last executing test programs: 10m22.332258279s ago: executing program 32 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000130f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c7465", @ANYRES16=r0], 0xc4}}, 0x0) 9m25.271895551s ago: executing program 33 (id=356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010201fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 9m18.196790157s ago: executing program 34 (id=339): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000500), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) getpid() r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x40001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1) 6m52.663980054s ago: executing program 5 (id=731): setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000440)={0x2c, 0x1, r4, 0x2d, r2}, 0x10) shmctl$SHM_LOCK(0x0, 0xb) syz_open_dev$vim2m(0x0, 0x7f, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) signalfd(r6, &(0x7f0000000040)={[0x800]}, 0x8) socket(0x1, 0x803, 0x0) r7 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r7}, 0x0, &(0x7f0000000140)='%-010d \x00'}, 0x20) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_delroute={0x60, 0x19, 0x400, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x14, 0x35, 0xfd, 0x4, 0xfe, 0x8, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_IP_PROTO={0x5, 0x1b, 0x65}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_IIF={0x8, 0x3, r4}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_MULTIPATH={0xc, 0x9, {0x2bac, 0x15, 0x9, r4}}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_DST={0x8, 0x1, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 6m52.181533332s ago: executing program 5 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff2}, {0x2, 0xfff3}, {0xffe0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xaa6bcb446f309d09}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = io_uring_setup(0x2539, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x3, 0x2}) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x40, 0xd0, 0x18, 0x0, 0x0, 0x8000}) 6m50.23885032s ago: executing program 5 (id=742): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x381402) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0xaa4, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xa74, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_ACT={0x550, 0x6, [@m_simple={0x20c, 0x1f, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x4, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000006, 0x1, 0x0, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x159, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x170, 0x18, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x131, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x8c, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x5d, 0x6, "eda7d7a535361ed0c9b32a364b522addd6669254402ee3ff325c8cea5004909bdc00830603507c7cc3cb8a9b0bfd1aa374f3d137bd1e7f8b57e264a568809005b37e0f9e7b458fe6d976cd4a52b8661fb1fc93f220613f0a0b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "b785195954bf29eb7a792088a3b0d8286cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x58, 0x1b, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x68, 0x9, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8812f}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x97}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0x10}}, @TCA_ROUTE4_ACT={0x500, 0x6, [@m_simple={0x114, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4, 0x8, 0xfffffffe, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9bc4, 0xfe5c, 0xffffffffffffffff, 0x1ff, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x5, 0xfffffff9, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x7, 0x0, 0x7}}]}, {0x85, 0x6, "df09f4e6b59374fca452f234e8874f8b7f2ed9f8b54f08abc1c33faf925a366234130ea3a547f6eb044cf46f33dc90f25968992d4052a209eba3c125efcca15a0a8fae2f33e5dedb45469b63f90ed0eae21f34881747cce14f57c183b3b2c5133af211365d36b3b00f262714876cf53348fa7df20071af31d2c785c6f54b06bdfe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x114, 0x18, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, {0x6f, 0x6, "4f2860d732648882b6ccea7e2381c59ce8ed8c7c714e41a48a0eab5a7bd4e904bf22b8ecf34afab8dfb51de5560cfa586ccc9e2755b475122be97f87bedee4dc00cef010f74605a20c67846a6a057ea962b9e54ea3bf669ddfcf0176228e840e9a6fecb4a6d02b25e0734d"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x118, 0x3, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc8ba}]}, {0xe3, 0x6, "020234bcedf105ca1a48891a1714503c046bfe7066d8181524a23a7cfc89d22249e708d9a38f88e9a74dedb94430ac031f80fc8e736b4de284c3a772cae0da8278187d3a24af1e92ccb64079481c2714278a87dd0cf7004388edd238a8fe63974985b112367f1742bd69085f7fcddd78430664126ca0af8e81a876e7b02b4236139dfe746e78785b5017218de8e3457f64faa502b7ad35f461ce6e06d673a15da10f0b5299813784d083c95a8395627673c7e0774383f73c4025fe051d96c255b0f74015b404869168d5fc17c029931d4590a0886bd629658d1ee81ee12f33"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x1bc, 0x1b, 0x0, 0x0, {{0x7}, {0x134, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xfc, 0x6, {0x2, 'filter\x00', 0x0, 0x4, "22d21328632dda598ba7db4723adabaf7863bf8f7a5b3397e23805d61bc295c7d085c2e191da26141961c85f56defc20856610b9e676c67062e20e7fcb50e5cd7f75bc31bf50ae9936a5009703653a9b0fefe6df03afdc08894d0b1694c6df18990543993ef42eefceb863d23418ff301a8a05d3425164ee4a66f52b18856859ea5025d2c0f2c4df66acf44026fea8d3112853682fefde4b5ccb9f99fb6feb873adedebb3a7c1962ab50ade2522bdc45dde7280140b052fb296da1575be721ac92c0f48666999d9ee58ae0098288a314da9c"}}]}, {0x64, 0x6, "8c1f265a042919fe0dd4e91b36c7481153a4a269504b6926eda052efbaed240dcba9a60e237a831731e703757bdbfd4e7cb7ec76173db550d0c94ebf38856e62532acf26a4b8db8b62780c0a18bc4fa7e9017368910c0ac6bdbac771dc2848d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0xffff}}]}}]}, 0xaa4}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000800) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/93, 0x5d}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x0, 0x989680}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086021440f4151500bffd010203010902120001010000000904"], 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x80000000, 0x3, 0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000028000000000a030000000000000000000a00000008000240000000000900010073797a300000000014000000050a00000000000000000000000000001400000011000100000000000000000000ee000a"], 0x8c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r5, 0xbabc) r6 = socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="030000000000000000000000000000009500000000000020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x4, 0x5}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x8}}, 0x18) recvmmsg$unix(r1, &(0x7f00000042c0)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/52, 0x34}, {&(0x7f0000000780)=""/22, 0x16}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x4, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000940)=""/11, 0xb}], 0x2, &(0x7f0000000c00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000000d40)=""/234, 0xea}, {&(0x7f0000000ec0)=""/69, 0x45}, {&(0x7f0000000f40)=""/102, 0x66}, {&(0x7f0000001fc0)=""/138, 0x8a}, {&(0x7f0000002080)=""/157, 0x9d}, {&(0x7f0000002140)=""/40, 0x28}, {&(0x7f0000002180)=""/228, 0xe4}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/123, 0x7b}, {&(0x7f0000003400)}], 0xa, &(0x7f0000003500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003640)=""/30, 0x1e}], 0x1, &(0x7f00000036c0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(r9) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 6m47.641868623s ago: executing program 5 (id=750): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x17) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001180)=0x1007) 6m44.722731566s ago: executing program 5 (id=761): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000180)=0x2, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0xb9, 0x2, 0x3, 0x6, 0x2, [0x7, 0x3, 0x5]}) userfaultfd(0x1) socket$inet6(0xa, 0x6, 0x1) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x86240, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0x1001}]) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) 6m42.660039521s ago: executing program 5 (id=766): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r2 = socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000000e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={r4, 0x80000}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40c0}, 0x40840) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/consoles\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {}, 0xfd}, 0x18) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x6, {0x6, 0x7, "1a020018"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m27.637425302s ago: executing program 35 (id=766): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r2 = socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000000e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={r4, 0x80000}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40c0}, 0x40840) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/consoles\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {}, 0xfd}, 0x18) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x6, {0x6, 0x7, "1a020018"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m59.108131403s ago: executing program 8 (id=814): openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r0}, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000"], 0x80}}, 0x0) 5m52.70005061s ago: executing program 8 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003000400020004000200040004000400060008001780040003001c0017800400050004000400040001000400020004000200040002000a00e800ffffffffffff0000040017801c00e700db6d365654c98181bfba37013717c4c8c68999db6df653c904001780200017"], 0x138}}, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x2c}}, 0x40020) 5m51.43603893s ago: executing program 8 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x82, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) 5m36.282265589s ago: executing program 36 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x82, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) 3m38.529377917s ago: executing program 3 (id=1299): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_unlink(0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) socket$kcm(0x10, 0x400000002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c41f4040110f00107f00000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) setgid(0xee00) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1a8c0000000008080000000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, &(0x7f0000000140)}, 0x20) socket$kcm(0x2, 0x3, 0x84) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x5a8e, 0x9, 0xd2ab, 0x7, 0x2, 0x9}) 3m35.20382182s ago: executing program 3 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x2b1e}, 0x8080) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r3, &(0x7f00000007c0), 0x20000004}, 0x20) 3m34.433197405s ago: executing program 3 (id=1305): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x0, 0x4, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2000000}) 3m32.1360695s ago: executing program 3 (id=1309): r0 = mq_open(&(0x7f0000000000)='\'\x80\x00\x00\x00\x00\x00\x00\x012\x9c\xe1\x00\x03q\xc3\x14(w\xaf\xb3\xc4\xd8V|\xc0\x03\xaf\a', 0x40, 0x88, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x200e}) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad21ed0d09f91b45090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f330063090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b5b070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f336e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e0a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a624272643470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc78708000000cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210380106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c101e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d13768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b20c2fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b07c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72565ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa76893974d000000008f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x1000}}, 0x1006) 3m31.86290715s ago: executing program 3 (id=1313): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) mq_open(&(0x7f0000000040)='!selinuxsDl\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000006c0), &(0x7f0000000700)={0x7f}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat2(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x800) r5 = syz_io_uring_setup(0x206c, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000200)={0x3a, 0x12, 0x14, 0x2, 0x2, 0x2, 0x6, 0x38, 0x7fffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) 3m30.526212489s ago: executing program 3 (id=1318): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (fail_nth: 2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0xf0f000, 0x1500, @name="0c3901800000010000000000000000d4ffd14e01a265cb6c8595d9438bf54bb8"}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x7, 0x400, 0x8, 0xbcc7, 0x1, 0x6eca17b7, 0x88c, 0x3ff}}}}]}, 0x58}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x0, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000) 3m14.385189841s ago: executing program 37 (id=1318): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (fail_nth: 2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000001c0)={0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0xf0f000, 0x1500, @name="0c3901800000010000000000000000d4ffd14e01a265cb6c8595d9438bf54bb8"}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x7, 0x400, 0x8, 0xbcc7, 0x1, 0x6eca17b7, 0x88c, 0x3ff}}}}]}, 0x58}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x0, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000) 2m41.339986103s ago: executing program 1 (id=1465): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r4, 0x0, 0x4}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x32, 0x0, @val=@tcx={@void, @value}}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup(r6) r8 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x802, 0x0) ftruncate(r8, 0x200004) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r7, r8, 0x0, 0x80001d00c0d1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 2m37.447807997s ago: executing program 1 (id=1473): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2020480) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000280012800e00017036677265746170000000140002800800040004000000060010004e2100000a000100aaaaaaaaaa0000000000"], 0x54}}, 0x0) syz_open_procfs(0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x39, 0x64, 0x32, 0x31, 0x33, 0x62, 0x65, 0x64, 0x63, 0x38, 0x35, 0x34, 0x30, 0x38, 0x62, 0x37]}, &(0x7f0000000240)={0x0, "fbfaea1a7c4fc582daffa2ecd1dc2e95f91d61a415395f4f43faf77545eaf0080cf9bc586de1d56c4e2f923ac6a852ecdb61eeb20db9f87fc9eb145cffb975eb", 0x10}, 0x48, 0xfffffffffffffffc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000070000008802860608000001"], 0x18}}], 0x2, 0x840) write(r0, &(0x7f0000000340)="07000000010000", 0x7) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x4024}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x41002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004111, 0x0) 2m34.667303149s ago: executing program 1 (id=1475): socket$igmp(0x2, 0x3, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x3b9ac9ff, 0x0, 0x0) 2m32.55392266s ago: executing program 0 (id=1484): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x2b1e}, 0x8080) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r3, &(0x7f00000007c0), 0x20000004}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107446, 0x20000000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 2m30.646845188s ago: executing program 0 (id=1488): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4008885) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x70, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x4f, 0x70, 0xe, [{{0x9, 0x4, 0x0, 0x51, 0x2, 0x2, 0x6, 0x0, 0x4b, {{0xa, 0x24, 0x6, 0x0, 0x0, "d03a9c5f2a"}, {0x5, 0x24, 0x0, 0x837}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0xff, 0xfd}, [@mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xe3, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xa6, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x0, 0xb8}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x9c, 0x9, 0x9, 0x40}, 0xe1, &(0x7f0000000400)=ANY=[@ANYBLOB="050fe10002d9100bc3a68d8b8d90f9181e7521fffc4c172dde6fdf484e62d2ffa5534f044fd9d4b38097077df41aeabc74ecc1a1c82bf66435634ba54fac888c0ed61643619eba6212e20818d04fcbebe0ae00ed75652b58b713c6a1a378ee182eeeec1b9d1136fec317128de20faeaa06aeda2b15d78e5ce06ee6594e1a90870b376f977dcad525744c8d9e29a636dd629427287908d94b22cf5cca9acd5c1b72681a2ba0f090e82110565e054dd2e4d95ad789d45a47b334ccda3865e2addecc22f023f44a1173a75c8e3467a0b4d267eaaa545a2ab8c287d410d27cbc03100bf6128904342861beb5fb709972016b71abef16ac6e453092ff8da84b48a61e5791a2964f70ef64cf4dc91321cce1eda2c33ffd8394f2a4e75ae0392cb8919b474fa494c986384720018c94fa0941ac2346ab336519d4f49eca3e9c5cfc991ae73d13453606d9491b78733b33887d6a05c2d4d1cb00f1dbfbf426dba6316af1fe05fff5f66e8dea81b4bf0da5988c81dbe01cdcc6d9f01082efff4c9a3522300318edd12b040b7e59bd2a4299b3efd2"], 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2e57}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x422}}, {0x1b, &(0x7f0000000380)=@string={0x1b, 0x3, "3d92ecde5750dade7a67c799112b3680017def6924c1950970"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @dev}}, 0x2000000, 0x0, 0x0, 0x0, 0x55}, 0x9c) 2m29.046944387s ago: executing program 1 (id=1493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x302, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102376, 0x18fe8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket(0x2, 0x80805, 0xd07d) sendmmsg$inet_sctp(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="8d", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) 2m28.214583276s ago: executing program 1 (id=1495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x17) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001180)=0x1007) 2m27.403971197s ago: executing program 0 (id=1498): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x2b1e}, 0x8080) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r3, &(0x7f00000007c0), 0x20000004}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107446, 0x20000000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 2m26.613221077s ago: executing program 0 (id=1500): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2020480) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000280012800e00017036677265746170000000140002800800040004000000060010004e2100000a000100aaaaaaaaaa0000000000"], 0x54}}, 0x0) syz_open_procfs(0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x39, 0x64, 0x32, 0x31, 0x33, 0x62, 0x65, 0x64, 0x63, 0x38, 0x35, 0x34, 0x30, 0x38, 0x62, 0x37]}, &(0x7f0000000240)={0x0, "fbfaea1a7c4fc582daffa2ecd1dc2e95f91d61a415395f4f43faf77545eaf0080cf9bc586de1d56c4e2f923ac6a852ecdb61eeb20db9f87fc9eb145cffb975eb", 0x10}, 0x48, 0xfffffffffffffffc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000070000008802860608000001"], 0x18}}], 0x2, 0x840) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x4024}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x41002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004111, 0x0) 2m25.258248498s ago: executing program 0 (id=1502): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r2], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2m24.948057843s ago: executing program 1 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a0013070000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/213], 0x154}}, 0x0) unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) 2m24.92226854s ago: executing program 0 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a0013070000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/213], 0x154}}, 0x0) unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) 2m9.475021762s ago: executing program 38 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a0013070000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/213], 0x154}}, 0x0) unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) 2m9.429813975s ago: executing program 39 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r0, r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a0013070000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/213], 0x154}}, 0x0) unshare(0x8000400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) 25.017535419s ago: executing program 2 (id=1792): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000500), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010027bd00000000df", @ANYRES32, @ANYBLOB="08009f000000000008005700fe000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x4042090) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) shutdown(r3, 0x2) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @main=@item_4={0x3, 0x0, 0x0, "0d34b68a"}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 22.348029795s ago: executing program 7 (id=1796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000180)=0x17) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0) 15.189101883s ago: executing program 4 (id=1805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x2b1e}, 0x8080) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r1, &(0x7f00000007c0), 0x20000004}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107446, 0x20000000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 15.182897599s ago: executing program 2 (id=1806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) write(r2, 0x0, 0x0) epoll_create(0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17C\xc6\xd3;q\xb8C\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x00\x00\r\xb6}\x9c\xfcC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xc7\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8buY\xd4\x8b\xd4\x11\xc5\\\xdd\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\x04\x00\x00\x00\x00\x00\x00\x00\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x9fj\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51y\xff\xdf\xed\xfa\x97\x88nW\x1b\x14\xce\xa3\xc5o\x8a\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xaa \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\xf7\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc01\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00TY\xe9\xab\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9f\xe5\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93VcKf,\xa8\x85\x0ex%T\x85\x85\xab\x17(\x02\x1b\t\xc3\xa0\xc5\x12a\xba]c\x9fy\xc7\f\xe3FW\xdd\xd6\xb4\xa8w\xf6&\x97U\xa9\xca\x9a\x00\x00\x00\x91&\xdcN\xdd:o\xce]W\xc9\xb31K\xd5%\xe6\xcf\x8a\xda\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e \r\xe7\xb4\xd9W\xc2\x80HZ\x9a\x151\x9fe\x81\x1f\x9b\'\xb6IW\x03K\x19(I\xd4?\rb\xce\xa7.\x8a\x19\r\xae\xbc\xc0:\xa3\xf1\xa4\xcd]\xa29\x96\xbbf&wK\xc3\x86\xb4\x14\xb3A%o\xbaT\xd0^a\x80\xa02Vn\xda\xf5J\v\x96\xba?P\x88\xa2r\x8f\x17*|1>\"X&J\x10\x85\xf4w\xc9\xd9\b\xf1w\xacO\xd0\xda\xcf\xa5\x89\x88\xab?\x8c\xa4f\x93\x95\x8cF\xb1\x1d\x8c!\x1b+\x9c\xa4Fl\x1c4p\xd5,\xa5\xaeP\x98\xcb\xbe\x8eBe$\xde\x9f\xa4\xed\x16\tw\xc0\x92\xf3\xb5\xc6\xd2\x13\xb2\xdc\xab|\x854$\x13\xd4\x1b\x9fw\xde \xae_\xcf\x14mG\xe2\xbd#\xcf)\x19R\xfax\x03\xf40\x06\x8b\xea\xc0\x86\xc3b\x06\x95\xc6\x0e}Y\xa9\x99TvN\x1f\x01\x18\x8cW\x82\xb9v\xeb\xae\\|(\xaf3\xad\xf1\x95\xc3Lz\xa4.8\x1bz\xb7\x1c\xb34\xea\xf3w\xfcn\x89\xd2k\x9d0 \x17\xcb3w\x91\x05\x8c6p\x182\'\xaf\xd8\xcd\xedD\xf2\xa7\xca\xc0W\xc45-\xb0\x16~UKN\x88F\xc8\x91\xf7\xbd\x98\xc2H\xf8\x89S\x9bA\xc73\x97\\I\xdf\xf9\x83+\t\xe9)\xf8\x0e\xf7XE\x8fS\xd1\x06\xba\xc4Sz\x95\xffj\xf9=\x88\x9f2S,.\x8c\xbf\xfd\'\xe8\xa6)\xd2\x17\x17\x19\xf9\xd6\x1bpv\x8d\xb8\x8f\x98\xbb0)N\x8d\\b\xac*\b\xa9\x8f\x9f\xe2\x03\xbca\x18\x83\xed\x1f\x7f\xe84 \xe9\b\xceI\x0f\xbd\x81\xee+\xe3{~}Y\xf5\xa8\x97\x97\xb6\xbcf\x01\'\xacot\x1c\xaa\x1d\x84\x10\x1b\xd1@2v?\xbf\xf26TbZ\xb55\xb5J\x97\xe2b5\x1e\xcc\xfa\xa0\x03h\xe3Y\xfd\xb6\x15\\r\x03\xdd\xd9\a\x88Q\a\xaew*\x98\xfa\xe2`\xc7\xd7\xc7\x02\xb6\x88\xd7FXU\x9a\x9bW\xfcD~L\xb3\x99n\xa8\xb8\xc9N\xf1\x18<\x17\xab\xf8ET\xb1X%\xb5KS\x05-\xcb\x9d\x1c\x81=\xf0\xf6\xfa\xd3\t\xba\xc5\xa6\x1dX\xa6\x80\xbar7\xea\xd2^\x9a#rR2_[\xb9#\xf0~\xda\x1fe\xa2y{7\x02\xf4\xb3\x13\x92*\xce\x01.\xcf\xf8\x82\xe9\xe4\xd6Q\xd3\xfd\xa3.J\xff\xa5\x18\xb5\fR\xae\x16\xdfb\xb3\x9b\x86\xc9\xe1\xf1\x9c\x8cj\xc5\xc4\xf9\xcd`q\xfd!5\x98\xbfb\xf7\x9c\x05Xb\xc6EI6\xfdI\x1c\x9cP\x1b\xadv\xecB\x1b\x9ax\xc7?\xfb8\xe2\x05\x9cI\xd7*.\xfe&\xc9\x9f\xa7q=\"!\x82RUs\xc7d\x8cb\xd7\xe8>_\xd9\x90>\xd7\xeb\xa6Z\xcdu\xab[,W4\xaa?\x19\xc7\xe3\xad\x01\xb1+\x8f\x04Z\xd3 8?z\xcb\x1c|B\xad\x90{\xff\xeeV:\xf8\x97EJ\xd4\x00\x8dm\x8bA\x01!Tv\xa5\xc6\x17U\xca<\xe7\xf9i?\x97Z\xf5lO\xa9Y\n1E\x18\xdc1i\x92!\xcf9\xe5\x86\xd8x\xad\xa7\x97\xd4\xbd\x02\x9d\x8af\x9a\xe7\xf7\x1f\xa5\xfe\x06%\xfb\xa9\xdb\xd9\xc2\xdb\x0e\xff\xd6\x7f\x8f[g\xce\x99\xd6JG\xd1\xdf\xd9\xe90\xff1d_\xfa\x93\xa7\xc5\x81\xd2\xfe\x8fl\x8b\xd4\x85\xd1\xce\xcf[\x0e\x8fg\x15\x85B\'\x9a\n\xd0\xb2\x96\xb2\xba\x11gG}\x1eF\xfd\x9dX\xca\xed\x86\x14\xf6i\x9f1\x1b\xc0P\x8c\xdb\x89\xce?y]\xee\xadO\xf7\x8d-\x93\xa2Ha\xc2\x97u\xdaw\"\xac\xc0\x85h\xfe*\xb6\x1f\x90^NQ\xeb\x1a\xe1\x8a\xfe0\xe1y\xe60\x150\xa2\xf6+E\x92\x86\xbf\x97@\xc76\xd6\xa3\x04\x9c~\xa8\x94&4\x99\xe4\xfa\xddUt\xae\x81\"2\xc5\x8ct\b\x00\xbaUv\xf3\x8a\x15\xf3[\x1c\xe8\x85\x05N\xe5\xe6\xf0\xf0\xdbhhU?\x10\xad\xdc39\x93\xf9\xb5$\xf5', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r7, 0x4, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f00000006c0)={{0x3, @addr=0xffffffff}, 0x8, 0xa, 0x3}) 13.52649928s ago: executing program 7 (id=1807): socket$alg(0x26, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0xa00000000000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 13.019275662s ago: executing program 4 (id=1808): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{'ac,'}]}) socket$igmp(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100b, 0x1000}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 12.451956218s ago: executing program 2 (id=1812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = syz_open_procfs(r3, &(0x7f0000000040)='cmdline\x00') syz_usb_disconnect(0xffffffffffffffff) preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x0, 0x1000) 12.158679632s ago: executing program 7 (id=1813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x302, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket(0x2, 0x80805, 0xd07d) sendmmsg$inet_sctp(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="8d", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) 9.563717543s ago: executing program 4 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa1e88cf0b88ec3ef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e23, @local}, 0x10) 9.474695364s ago: executing program 2 (id=1815): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000001a002c0000002c0000000a000000000000000100000d00add6000000000000000000000000000000000b00000000060000000000000c010000000000000000002e5f3000"], &(0x7f0000000200)=""/4092, 0x4e, 0xffc, 0x1, 0x0, 0x10000, @value=r1}, 0x28) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r0, &(0x7f0000000c80), 0x0, 0x8f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0x0, 0x8, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in=@local, @in=@local, 0x15, 0x0, 0xfbd360222186af48}, @sadb_x_nat_t_type={0x1, 0x14, 0xf}]}, 0x40}}, 0x400c0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180)=""/77) 9.433191448s ago: executing program 7 (id=1816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000500), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010027bd00000000df", @ANYRES32, @ANYBLOB="08009f000000000008005700fe000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x4042090) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) shutdown(r3, 0x2) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @main=@item_4={0x3, 0x0, 0x0, "0d34b68a"}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.411169393s ago: executing program 9 (id=1817): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) pread64(r2, &(0x7f0000001940)=""/4113, 0x1011, 0xd) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$ax25(r1, &(0x7f0000000140)={{0x3, @null, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0x7fff}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1000007f, 0x6, 0x4d, 0xfffffff6, 0x5f, 0x9, 0x1, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x81, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7ffd, 0x4c74, 0x80010000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0xffffffff, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x5, 0x2, 0x9, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0x8000, 0xffff, 0x2, 0x7d, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x27fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x80000, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x20000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x936, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x800, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x6, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x2, 0x1, 0x10000, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xe, 0x7, 0x1, 0x6c1a, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x600, 0xffff3441, 0x5]}, 0x45c) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x4c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r4]) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, r0, 0x2) 9.295590071s ago: executing program 6 (id=1818): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x2b1e}, 0x8080) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r1, &(0x7f00000007c0), 0x20000004}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107446, 0x20000000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 7.461142521s ago: executing program 2 (id=1819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00c40000000000004c0012800b000100697036746e6c00003c0002800400130000", @ANYRES32=0x0, @ANYBLOB="0800bafe070008000000080014008ee107000000140002003af1341f04514ae13b5de7b40000"], 0x84}}, 0x4004000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r3, 0x0, 0x0, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom1\x00', 0x402, 0x0) r5 = gettid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000280)={r5, 0x1, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001c000100000000000080000007000000", @ANYRES32=r7, @ANYBLOB="8000a6000a000200aaaaaaaaaabb00000c000e"], 0x34}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121301) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x40049366, &(0x7f0000000180)) ioctl$DRM_IOCTL_RES_CTX(r9, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r10, 0x40086425, &(0x7f0000000140)={r11, 0x3}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000200)={r11}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000080)={0x60, 0xb, 0x0, 0x2, 0x0, 0x94, 0x0}) 5.762656332s ago: executing program 6 (id=1820): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r6, r8, 0x0, 0x7ffff004) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 5.738369825s ago: executing program 4 (id=1821): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2020480) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000280012800e00017036677265746170000000140002800800040004000000060010004e2100000a000100aaaaaaaaaa0000000000"], 0x54}}, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x39, 0x64, 0x32, 0x31, 0x33, 0x62, 0x65, 0x64, 0x63, 0x38, 0x35, 0x34, 0x30, 0x38, 0x62, 0x37]}, &(0x7f0000000240)={0x0, "fbfaea1a7c4fc582daffa2ecd1dc2e95f91d61a415395f4f43faf77545eaf0080cf9bc586de1d56c4e2f923ac6a852ecdb61eeb20db9f87fc9eb145cffb975eb", 0x10}, 0x48, 0xfffffffffffffffc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000070000008802860608000001"], 0x18}}], 0x2, 0x840) write(r0, &(0x7f0000000340)="07000000010000", 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x4024}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x41002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004111, 0x0) 5.591991264s ago: executing program 9 (id=1822): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0xe1}], 0x18, 0x20000080}, 0x4000) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x23, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x12f4}}, 0x240000c4) recvmmsg(r2, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000000300)=""/173, 0xad}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000080)=""/79, 0x4f}], 0x3}, 0x9}], 0x1, 0x12120, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7) 4.471307659s ago: executing program 7 (id=1823): r0 = io_uring_setup(0x74dc, &(0x7f0000000180)={0x0, 0x280e, 0x100, 0x1, 0xaa}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001200)=ANY=[@ANYBLOB="1c000000220001062abd700000000000050000000000f1"], 0x1c}], 0x1}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109026a00010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_connect$uac1(0x5, 0xdd, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0xff, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x6b}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x0, 0x80, "c583"}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x2, 0x55, "2e48b671935a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xb, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x0, 'P', "3105"}]}, {{0x9, 0x5, 0x1, 0x9, 0x208, 0xb, 0xf0, 0x7, {0x7, 0x25, 0x1, 0x81, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0xc, "f5175f27"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x5, "e96e293f856e"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xf, 0x55dc, 0x0, "47e63d7fb427fc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6c, 0x4, 0xfd, 0x75, "", "05b696"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x47, 0x1, 0x5, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x7d, 0x8, {0x7, 0x25, 0x1, 0x1, 0x3, 0x7fff}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x21, 0x5a, 0x8}, 0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="050f8e0003751002f50788cb55ce52fb7d73ca3525e522a79e7fc4d39119aabbfce0fa41c14f9a69508d5c153f19b378b3e78bbf22e4b6ce5c9fd93d1dbc46c7c1618cd66d7af1ee10f5b6e3196351de8762eee1b3133d45908be4efcd5b7b367cb85962fb6dd771e4ed2e3535c4f6942a5c96050a1003020400030904000a100302020003cf0b00"], 0x4, [{0xab, &(0x7f0000000340)=ANY=[@ANYBLOB="ab03a58eb5ea4fb3387974a7c64ee28418f1152236761628fa62eb3aea731a5120e1ef7cafd2a4df1adf2e9071607d7c5222b494f89b0b465610e47654fdaca6dd6e2aa156c46a21c4d4b5b135eee5d3f8c61c4dd83733a59b9619c4745887c297ddcb1fef0938a4cfdcab679c2de98f2c1233e519cb6cddd9791b6e51ead15cb64ca34175621cee8401d097fcf1b349094e42f4b31dc5802a61284da22842a50985b6825378dda857576f"]}, {0x33, &(0x7f0000000400)=@string={0x33, 0x3, "f0a365c8911a061e142fd7dd6e8df9bbca210b66fc4d560d0cda052bf915a00f9dd2f8c290f474334b7dddedd78e296dce"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc09}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x60c2678d, 0x0, {{0xd, 0x4, 0x1, 0x1, 0x34, 0x66, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@lsrr={0x83, 0x7, 0xf0, [@remote]}, @generic={0x82, 0x4, "49f2"}, @rr={0x7, 0xf, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback]}, @ra={0x94, 0x4}]}}}}}) getpeername$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x84) finit_module(r1, &(0x7f0000000840)='/dev/hidraw#\x00', 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000000)={0x3, 0x6}, 0x1) syz_usb_control_io(r3, 0x0, 0x0) open(&(0x7f0000000580)='./file0\x00', 0x14141, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)={0x11, @local, 0x4e24, 0x4, 'ovf\x00', 0xf, 0x200, 0x2}, 0x2c) 4.212316926s ago: executing program 6 (id=1824): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{'ac,'}]}) socket$igmp(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100b, 0x1000}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 3.635987352s ago: executing program 9 (id=1825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = syz_open_procfs(r3, &(0x7f0000000040)='cmdline\x00') syz_usb_disconnect(0xffffffffffffffff) preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x0, 0x1000) 3.347211911s ago: executing program 4 (id=1826): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r3 = socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000011005da700000002ffffffff07000000", @ANYRES32=r5, @ANYBLOB="002000000020000004001a80"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x4}}]}, {0x4, 0xa}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x80, r7, 0x0}]) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, 0x0, 0x15) r10 = dup(r9) r11 = socket(0x1e, 0x1, 0x0) connect$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mknodat$loop(r6, &(0x7f00000003c0)='./file1\x00', 0xc000, 0x1) sendmmsg$unix(r11, &(0x7f0000004400), 0x400000000000203, 0x0) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) r12 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) writev(r12, &(0x7f0000003bc0)=[{&(0x7f0000003a40)="f1b937", 0x3}], 0x1) socketpair(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x48, &(0x7f0000000040), 0x4) 3.135363077s ago: executing program 6 (id=1827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x302, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102376, 0x18fe8) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0xd07d) sendmmsg$inet_sctp(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="8d", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) 1.30253769s ago: executing program 9 (id=1828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x20000000, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1.299749651s ago: executing program 6 (id=1829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg(r1, &(0x7f00000081c0)=[{{&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="3fad5b040aee0ed8cefe830e39cf78f32dff1ed1b65575bf3491e0550c4f256b27757ece0bd083b7066141927a393af5ea6bdf621c83c8f180fbd7b97180b7dcd2b8fb62456acfcd46fbcddb9d0b245bcae563086c828de8634be455cf129311db12b6151f70a8f2a8c2a2102a655f5439da3edea247b1c7aa46c48807437496667dd485396203efe144cd7e36f4005f232ad18ffe188c165b10020cad3b5ab1f92c7a2f29878c4f5842db28fbb7fde69c9987fc963fd172156310e6ddfbc7298d0590776edaecee19321a804237d7a82340289dffe3053c52d6423fad7e8aa589892ab3060ddb071006f3a4643e33951888", 0xf2}, {&(0x7f0000000080)="86182071346e9f32008e49c6448b152c22b5c5bb422fe524730864d7fa8c3915f48e93b2a69d65f3850f1fb5a240dbceca9c9cb561f68ab3bb5926eff9a104e2c4ab63b69b8baf8d5e549831148392c2bef391973632a9e0cd9478589e8e63e0f7bebcecbee7d48be86218c8c2eec668c04c6e61628177d3", 0x78}, {&(0x7f0000000100)="f7b5b467a511", 0x6}], 0x3, &(0x7f00000002c0)=[{0xd8, 0x11, 0x1132, "7c0593dae58c10fde73b7fd1f84bc6321c70a8c8d32887912ed4200f83ea630c63333a3a863d53634afd9faeb47e49992ca3e09a2866cb578abec5de37d178f7367dea4c98d271ec2720ba0978cc98f469652e3ed92e038b63f04306b46be1c613e57b83fe51c8512fb92bc4054b0226c14f9cdb1dd88387a002f9aaa662576ba39b89d7cc367fa7a26bfc22f713db86257a3842d6ac9c35cc17ab8839e433975b44ab75d63dcc5e772c983f727e6f0b6ea1fc1c2524e40f2a0e1683c1c330261238a5572a54fb01"}, {0xd8, 0xff, 0x9, "f8614babaabfd425b4a29951efcf8dbb70cd20a303db8f17e694a41bde8081ff42b88ec7f9c4b67c7583bf3729c89eba889ca0e10c4c30d9010dde64344a4878dd4d4b6543eccfa037e117621a9379183d8465df4de35b1337297b06774b70ae17900a98d1653e5cb4b4cd25273b41ef45f1c58ec61f9165fda4817e823fa27d417353dc470753a5f54042dad088d6ad33ad75ce2f62ae8ec1d205ccf8f72224e888303aac794b5b345aed8cd8517e032ac4d6d5d56a233a8af641e633c98006ac70"}, {0xa0, 0x8a05edc89416b309, 0x6, "d2ffc9a05895b9840e8344590d3f48881dea6fe93187eb2254c872e701574b468059771c7495a08163577927b3e239fb47db519846a744892be344c7c0657bc39f5e197193f2de86bfb30e96cfb2edb88edf82813359d6c0a6b323913257c2636eb87b35e2f6cd6b4a2120b3af1d796683e38c7e3a46372afe35a57d455c93d09d57c5e17eaa862d18fabb456e2f9ac1"}, {0x50, 0x10e, 0xfffffe7b, "52e6add3308f636327d85cf3101b5adfbd80824c14edc31cd434413c27de10d946fe45365726ff64d92f42d276ee8b080decf87e7506d6fd5f5d36cf"}], 0x2a0}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x0, 0x3, {0xa, 0x4e22, 0x9a06, @empty, 0x55b1}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)="b167f0610690dbc19515a2987197fadb187c3c30431f4b3ed2f9bc9195015230f52c99a586d83047ec53b2c5f6fe0cc1a068f5e3562af994d384ca9be5e2397eed1f550d0b193875d12fbd39027978603b8d2dff281172cb934739578577e2f0", 0x60}, {&(0x7f0000000700)='|', 0x1}], 0x2, &(0x7f0000000880)=[{0xc8, 0x10f, 0x101, "240ffecb2a60a34d883e29b03c2f517e38fc223d3de7db95926b39f36e57070724cd0a4e03c58da916eda6309a3c674ed77bb31e518921922682a792325ef44206f8f5e1f31b06d8d749821e1156323d5338749277e9ac3dd3d3a6f66d2b3d9ce0698d312edfcfb415d45c935b9cc59101138438cef49f1aacdddca330434a0157cfa26609d6cdc70e4bc3c8fbbc8ae1f7b55129ee112beb47d36ee8ed926e6d9616ff8289083ebf333e4a668cb7ff4b35"}, {0xa8, 0x1, 0x8, "381c6928951db211760c87f27c0fd6405e5b08782d522d336de0612bcf1f5a08e9975e5d2f10f55e3e4e01d7a877aac3c5c8d6a26bc77b8bbcf2eedf0251809ee129f4fd162aa750cac87aced5ad7224d491ca42f6a3abf3b00181c80768f7ab4428b1c8abac885634503ddc479cb2d30e72f65027ffc9d511d21cefd7ef04e66fab1ec60542a61b6480e6d98eeacff01b82"}, {0x30, 0x1, 0x9, "3575ebf7b7d8c86591f168784d0b6b311f428249d6ee27ab60"}, {0x68, 0xff, 0x3, "3e1c3f74c65154b9b9837c7cbefae1469b915f122dbee39d43946dbee6d3afa1bf8377a37a6f77290f796f95c1b9aefd0f6a2c5cf7e32e53542559efc0b9b9deb0716217021c012c0310ff9f5ae2c115fc64352dd7cfdb"}, {0x78, 0x10f, 0x4, "29cec34606ec10ed08689bfe4fbf35a1d11fd364a4701a0fa59ede4513d3afe6c6c98eecaa719752d2cfd7568da39c02d897b61b2c94ccab7fe575f9c0254dcda48783854c64ec4a3129324806d5b6c5c1cb0580fb1649152a344900235050113ba0a41956475d"}], 0x280}}, {{&(0x7f0000000b00)=@isdn={0x22, 0x4, 0xf, 0x9, 0x2}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000000780)="53dc69c1e460f8211f2082d2e1554b1672ab931d3c1d583b235584fbdf735a16227bdd6e45d13a347c9601ab981b858916d7fb2d8fe1745a8e89bc95", 0x3c}, {&(0x7f0000001b80)="6a88429e2f74453f2ddcb1098c57662f77f27cbd8ca4e9800fd02a08d3f9bfa328c1bc9347991cab62e2f7842dd7c4f7aee65ec1584020bde6eec8acc638beaabc3945f5298aeb194b5651c414a66bffdd96e8e20e1094da9d88a20b997d77f1d11846213618d1e574750453889744a4215f11520a3bebb4cb077faebe4ead13190bd12a79957a23f9b4e8040626bfdd05e6b64c27ca6e02182e24c10510413c954c7f3af33ca9e15c88acc8c6941e1a8e713b7e7c0c98091c9a48f7703e20e7c6db2fc9cfb2d8a9a8302f58f9c3f7a8de80da27a87b1a367f7c49e83e8857d9d6e4a149dd5715343473a6ac480264", 0xef}, {&(0x7f0000001c80)="787ab21add750858e16238b9b8cc8e36f06505fb0215ec1a6694fdc92c2702eeba62e2d2c1ee8fd66f8da4637dab5a29a15b5e", 0x33}, {&(0x7f0000001cc0)="ec039f1b0fc84b8f0eee313bd38cd74d8383e8582d1d7562a321eff4bd2fca22b145f693e4132e5df77505d1388790c3dda18dd8de4340ba60a63b1c3f839646e3f98a368dce3c5583a1b4b8ec3db77b40de5d4db3e7d7dd3999caefc971bab3a449a1a556c53b5f9799385c17d73f9d0176e2380e782a1f849379bb48de5b6fb4fcfeed8da438b37bcdb8cd56d919c661dff414edea1fcd23b4e0d6eb634a78445009f22424137c0e9be6278c4bf1a3f7da4cad88813b4692328487e2e5fe0a72c942431d6ea24694d2c0578c33d89208ebf802ff107d919a66efbda5e695af10b44540d6ce786274cb14cfccb70947", 0xf0}], 0x5, &(0x7f0000001e40)=[{0x110, 0x1b0, 0x968, "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"}], 0x110}}, {{&(0x7f0000001f80)=@in6={0xa, 0x4e20, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000002000)="8a3306d653278c2dad864fdcf53735531ecbf11c5151e33eefaa834fff92b4af7e44871b7f0b3bbf91776317c36adc73a0d53bde78fcda0face2ea69a49f362200d95992d6022cce28b0ef58c7", 0x4d}], 0x2, &(0x7f0000003d00)=[{0x1010, 0x84, 0x3, "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"}, {0x20, 0x9e, 0xfffffff6, "7e6f58524d5ca92f6d013fed19dbb6f4"}, {0x28, 0x10a, 0x800, "711e10a1d5142878772852e5e59656f132"}, {0x30, 0x88, 0x2, "333b07db7fce900a3bb3dd23eec6304ade8821e479f8aa664fa92ef5f8c1e8e8"}, {0x98, 0x1, 0x3f, "c2c28a8c5e62a564f1febe55bc69eb4da3a78c7bced7cde668055abed09e31ded65a01cccd58a2b157e14607e875535f5653753aa7baac439a8a7304da16cc989976319179bd0c2a11f671743e6af28b4997a840d760a01aac4d22951dec00d81c41a22b55c79bac5381fdbc16f138d0662ab452f29293c68f51ac9ea20a4673b7"}, {0x48, 0x88, 0x3, "a9dc32c6bd6d931641ade7b969e88609ad13c031a0388983fc0e5d11a6ef84984d42706d4b33333cac31a5bfe323e790502a74400a6c"}], 0x1168}}, {{&(0x7f00000020c0)=@hci={0x1f, 0x3, 0x2}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002140)="d38fc98a02757548c2bf61422a7dd71ba064012d714b8e51171e41512eda38c36adac553729c7f782864482163b1f8c0eb61490fc6220260e2809d609571497284d5ea1080e820c658cd798b76858725e20dd3dfb3e1d1bf1f63d79b3ef57589ded42b481eb5f9b6af16c194f55b85dcd591d4ee27fc52ab64456dd12fe3a37b37d3dc70a64674c4fc5cd25312ac0018b7d7089d9bd0ec8306321e909fda277ed3bc949f8156ec7de541988568c7fc5bd8ee24d3c410f75e4a6cbffe6b58a06c", 0xc0}, {&(0x7f0000002200)="2b77f71f1130eb99c0e5885bc6cdd45b7469c7d67582e1766348c9df2eeaeea25ceb528f198e68d61610fc3cc80b0388523151501cec5217482b", 0x3a}, {&(0x7f0000002240)="7fd75e768eaa259f9ce1230e8f9132c2d052ff22dd50d21e7730c1a12f44598d106fc1f9866e3039da3a55b663a0f849643fefedcce9c5d25d0dfb9f1395f77fd4a9ad84e1f7d222931d8878e0630253ae37b30dfe47186aa4e1ee5d056e30ee748c3bc9d875c9b9d857d5f12d332d8f113ffaac0be03f851511bb2585f31ada983f7c2291ce88cd793b13533a343d614cd605ba460148409255ff84abf3f308012d2b68f4ef46272ac1df612a294e2b59ea892d38f7877df6a34dc2975f38719943e0b01d5cb83836aa0cd9abb87a358a7cbb1247b99a4a", 0xd8}], 0x3}}, {{&(0x7f0000002380)=@nl=@kern={0x10, 0x0, 0x0, 0x2}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002400)="7b296814753cf39a757dd0f4351614ed9d37bded05cf8aa632e5a53eca45c0c56891c9d30b8030b1fcafeb4009ffae182d21aef9f2c9fe1429800440bf4a56108c7f501defa4c417d5a9b884b0cc663feeb1752d12d65b7fa62f9ae9cf3e5f06e7f0a94e3b7bd5bbefde7b98d528519f950f57a3bb43e7fa23d6e278c2b583738fdb29062319dbdc89d15376baac1467c6e1d8", 0x93}, {&(0x7f00000024c0)="cb65f698", 0x4}, {&(0x7f0000002500)="6d498a5867ea5d331fd77eb4063ce24f4344942f6a4e169ba8c583a7c23736e685a367c7a00e0be0750a3219d615d40dde49c5ae668a015c1d57a0b32cff8432a7e231ae3794b837421e1c3b0e026d3107ac70081c7da37c3cbd4e34b20967ec6158bb7e97a73a4b99f3137f3defe65ca8fcc817825c86a514171a18493a6593b66c006a827955726e9687010bd3ca118f56b7", 0x93}, {&(0x7f00000025c0)="88d176d9d11e8c69256b80f6ce295d0d47b9d75259dbf65560b529122d860e61c781386ea345bf975be19b1ef6587c1a4b4322d29748b133223b0190b022d443c097666ed6936eb5da0f64d3763e32f07ab14ad41abcf428e19a9f065692070beba7535d356a9a411470411b45a0a01b2dcf0ca5c4af5ad759c35f560f5cb674e6fc46b4cefe88afe966313a17b7c388d78f7b0cc7d655faea44e4ccbbd16c82fd69e6e33a208d63519de653137e87be60f389508530c46cfa303d8822b7c34950ddbd3639f7d44e7f8fc2d6353d815891f6b671fbb081880e213362a0fc10eca6bef68ce61c806b1a4e519843ef41443be7cf3e66457133c392cbaef4", 0xfd}, {&(0x7f00000026c0)="c7180acdcff89b4eb37b2fec0fef5a5d0a627c2f5306a8092537b33991189155948ecd3ed7", 0x25}, {&(0x7f0000002700)="628c90bc8e56ee23d60374d3e32116b3cd71f688bb2e156a1f1bcec8047ceeeffd68fcc7f842eca74f40c7176b857faebfd9bd7c0098ed2ce343b05efe9bc134e82cf0af92d5e325fb8f6c6a32df221ef1e1d68009f615ce2d032b8c4bf34a44a69823653eff0605b062d202a3ac7a218412b7d0d0260e66441a7776309db9cdbca0c8585c96fb73a51645c36d0c73041dfeb24d1af457a06765beef471d9b9bff677ac7e089a2217d6fb43beb3f33b69dc2d45706", 0xb5}, {&(0x7f00000027c0)="f33abb3918bde7b86f94c59a2a410a1bcd1bc828a5bd325578f8981647a97a43a1593f70f29245f5656b75fd5c2b12185d0a362608defa097fba289ff42c6dfed9461fcb6406100ff687906eb829bfcba02e81e0be15609e120b8859d311b275c8eb1b8eeb2d5b7b4783def6f33ea76bdd8db255ca0f50b8018cbfb3ebab407478c6199835f8efa51a40d08ca65ea535e6ba950a39f5f021", 0x98}, {&(0x7f0000002880)="1d36a136aaa634fe10b0f2777e008d00ccd8851061114fd5c3d4fd266c7fa828d3871243c69c16d1a89612625430e8e52e0f031788188eef923324c69b685b", 0x3f}], 0x8}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002940)="f8747a2d074d88745e19f7edbb0f8470740a829fa2f5f55f5fbe", 0x1a}, {&(0x7f0000002980)="fe881dc323833974ee1d1ccffdeb0ec92964286f46830f6eb7d1fc5461806c97c30885b3ff0349332083f35f4cab95ce67db362aaac4a1b7ff4026a2f397b4207562f61a416f1edc2c7a9942915edd7584fef490b71b7be58f1e3129ea316bc815668a96ba68fd3e807aed63a3cb481555ee5d982a81d45d601e0e1331d27553646f83e75a814d665d03333078cea246094ad7f5f56d9f", 0x97}], 0x2, &(0x7f0000004e80)=[{0x108, 0x118, 0xfffffff7, "aa52ad7bcecd7425c40dae1b07e231c6a644eff616bbfaeef0307ce018da40c2ed24d47c6f211574b99206632e3c2e15c1212eee65e6c6fd2ffaccc9eded2df459aec7580b39f3ce899d768763a75a50263f6a4ade23ee03893d889b005675e9e69b8d82c4fc892a9caeeaf0c6c730b395732fd4a0cd121c306d7e9fe67721c83c7371c5acbd17670a691eca776d10bd373d82a5ac679fec6ecf40f51af1e23c52ffa7a16ad4215742f2d2ab552caf5192ca3c6d9997fe690e7838b0c9d0d9629dfeb3f6c4147276e3e28253bf60262f94f9738579ea75c359f6479c081d141a53c68a83108efe876cc179ba0e635f486fdc"}, {0xc0, 0x0, 0x2c14, "edf79c6d3c328b650254684594b783db91bd5d36d4a2de279a8df9c9aaf30f8c42eec7cded09faa259cdbd2e35e3e9907beeb1942f5acc55e9325820fc64341ebadb62fe7a0b446c3216b562d327e21d1543c0067641da2a792fd27497139ad1ce26cc6a17b7a8ff659a8d5e5fd5539c556644b6564c0eccf038c5bb995cda9308c65c1402afd12aa548fc6d31199be763a5cf18e39821ba4e25619345a4755d46ac9b9b9d9a22af70df434b77b993"}, {0x70, 0x114, 0xfffffff7, "b5f52e8fa19d6faf993a59a86028cd36e87f34d93f90349a52147730ac367e69968256089446b38758c0300fb8dd9e8f21f261a9d4145a7a687e1bc5af73ea63dbba2a2c3f8bc2081f4fbaace27f0e397348123c4003ce1e21879ea7faa0cb8d"}, {0x18, 0x88, 0x7, "01"}], 0x250}}, {{&(0x7f0000002a80)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b00)="a0625d5e11ddb418b0834a4793af1f2a62d2a1d69fc0274e8e9c42353497a8dc601f43f9a6f6caafd04e1a8d70c2be8ed4eb669f38274ad956c9d94015be1de32611a5982fe17ba6389f9840c12ae2b3d86bc0c85ff79cf4f7c7729bb437b4c1fac9ac01257211ea5a5f0df5962bfeda51d766aa57c5acc43b9ff59b9cb0f77abe8b9eabecf97a44a1eda27a73bf342362b4ba08cec9507cbd5f4236119e8339086cc491954cd6cef655a17c04a65fffd18e98b69f9d340def66c6cc83352d0427d0fb27acdf853ce443e62713011bd3533c1cf165bc0e31e7d97ed256ff76b9e6b816f1f747e93c19eb9fdd018115e59b111ede834de0ab84", 0xf9}, {&(0x7f0000005100)="fdc9039aec77e0102a5d932e405f99a33536d412889eeaca208b97c27b10ccb924520bee975de2e5b930b8e8a8024b302dd005e40eeb84464e0f3b5f665329ab4acef89230b212002c31f1f5cc65551b2edd8c0aec20b4fe66ed10b18a222f132f72be110ea4c1a9fab71898592be62d7617352fcd3f35df17dbd4e5113d7d22385732751b2c02dfda2a39", 0x8b}], 0x2, &(0x7f00000051c0)=[{0xf0, 0x10d, 0xec08, "19f58af8e0b7768a707081aa409485e9d997f24bfd6eb286e9d9966ada91ba08e7923d0521d4be4397f248e6db01317ab264c40c781fd0ca9f497f6c06ef2bfcf5771a17d972674662bf5cfc511bb23dc08877ed81ef3ad06147e1e427dfc61e15587cd37853958c1547479c471ad037b3181b7412568934a9a5547fa04c4ff4d71573f31d9eb4efd83712d42dfb46c1eebb9c8fc243a1c59b79dcf11e2c79ca25e8061a4f4e57a38c088c50d33932eaf05d577f2a6acffab0e8e627f752553c731dd5016b2fd72c6d4a7fc5dc1a06c034d469c3c24e9c21e4"}, {0xd8, 0x10e, 0x5, "1ff3964f1038dbd5e28aa4332ccaeee5f7e5066082cb3a072503900db1158682df4c4120d600bae5c1209079b1354b23c26a4ef63039e0a2dd887cb14b33a782b230ad4f96dabcdceb7b1467f487d3311fae101afe9da0ab87c56c1aa70061bd6f998f553df46c658133cdea98f28dd70d96c9fb1cc82bc6a2976f9c03bf888b0529423c26d87631feaebc73b7d4817ad852661badfee63a7b27bf9e7ae49ea93f5bb004a4cc005f25883338be3c87f53971072cf52977903c2c2d9b6c8df28f39fc887eb2"}], 0x1c8}}, {{&(0x7f00000053c0)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005440)="0f9eb3e4b7beb2e855482d05bc7290f911858b80969b0cc10b3740425fcb57149f5173dc81d1018d8d15cd3d337fc6953492220badaa80cc8eebca030182d35686ea1041f1f85dd814bcde8a16b97282f86bf81ad0f662cc44640eea3962d4d566a7f572aab2a9c565bde2d479f2b8da3397bb75e1a89779a9beb8e1fdec8575f297b1d18d52e517c02a6394ca3c1dde78cae5cb9d418b6cc2cad87ecaf7e0403ae6bd5b4dc27491d2444d98063a7cc708c04b8b70078e4ebcf73e8b121cd390b207eb06954eb0bdf555391bea596494d9e76bf5da2462865dbe790afaf98310d3f08a227dab", 0xe6}, {&(0x7f0000005540)="fa5c7fd4c788f17b93427aecb612590fe1c9095dcf", 0x15}, {&(0x7f0000005580)="b4fe267eeb33983f5b30f0483bfc472e2a6eea98cfd926fbabd261ae61c610995dd48058ab0f00dfaaeb2f1a97dd2b429b9735cb3d6d9050d0b793d9ad5cb8b3600bed3096b09a1bdd436e90090e2429c01dfb324e4fdc027f8cd83afea09a7a4ac0348eeecc6338743b3b5783e29ab181adb6a77e1b6c88b35a03b8296d1944569d62aa7d0ab23ec8b14e300e25604ad42156", 0x93}, {&(0x7f0000005640)="d3fcb7106af44c0757e59dce76d84f5711eea2171a9ea1f79a26fb07", 0x1c}, {&(0x7f0000005680)="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", 0xff}], 0x5, &(0x7f0000005800)=[{0xc8, 0x10d, 0x800, "007dc55d7d9669298e4711a7f5255b2a71d435e4f4895025d8601ee8271e6f105253a196af52a9cd8553c66fd0262c4b199beee68e1c4b2300407928d634b0721980a87025f9bc9660f7b8987403a89cbaa53e329223a11d281a145bddb397f80a4af3b50a4c3298f1708a13cbed9f2c51ec9911374945027ce96402b8fae263b40becfe915298f0bae4013ce8fef8b47be391da40e9932b0f7022abe5efe24889d78d9c146670597220831e4830c83ea4"}, {0xc0, 0x0, 0x0, "11db910ff4862302e09b8e8286a8d133e4dada1c835b296cf4385d7939e9ca3bde377202b75491e1bdc56576e0775cbce0288e6c695647629e3e94b11cb37b25c501494a8312478d399e540fb239e3d35f0d28dff0d214301bea4d11d79a2152fc6056fd928806a87c8674aca5d88133fdc169bc497474ca6f269e4dbfbd9d1a8dabab0d9e9c059a70addd88a637e9c4f8da9f23de81857112405c05d5954ccdd454237ebdcbe558f4db"}, {0x110, 0x0, 0x6, "60b30582e0cfe1c90e966981e875ca7479c5afaf75b0ddde8f52a53a6ad9da57dc51ee7952eb9922217813e14a98b95913b00fa4f17e76f04bf5d9afb745ea3d47aa7c7e498ca0b3c3fe7d4fac0405c89a5e5150590cda6d587af886d8d84b51f4fd3f39ea7791a79e7904e0f4399658e4482c61375458e64779fa56530f282ecc56f9863e76fbe587179b97acfeeb6b123e112b994363c53664fe471d76214f15dae2e23c1139cdc64d3f926be1f94d3d1f5abc3dc46ca402641da1119e0cbd5fdd9531f315247d7957aa8698a90dc4d25cc2d55ca0b5798fe6e204e88e6d89c53e0940b60c23db15f6b45d3b561dbb91908103366fbdf36e"}, {0xa0, 0xff, 0x80000001, "d8d09af2dee6dde407d19f6971055824767e3472dc1cbc475846f0a0c5df4a9d5c3ffa2ab253e5b392b00e084e6b6f21c21193deb8d80b9ae20dbc02af6ab5e323109991681ef3c412239dd53fb4c772fe97ede65befeddabfcff368c7b03dea6a4423b35af7e2eada90453358b14b26e808e33f8f34e8e23022945199c30ff21294427a72886b79fff4171015e0"}, {0x30, 0x10f, 0x9, "cb471c3450e2a536cc945b58690e1023af8615d638dcc37ecb93"}, {0x90, 0x1eaa27673c0beb8, 0x2, "a9678c4ff59a3ea68dcd9ffcd883a0c412f1be53f7598c05f5d5148aaf2616771b1abe6013f151d22d0b0ca70632d8f19b0ccb42df0b1bd514f9ca146a63360d8da5c09ded8481948e90511ff4357adcd1e091b940028575727312e49e4dc41a13dd3c747ec3c43ef110f6a967f265e48da55f50f77be5e53114764bc0"}, {0x70, 0x106, 0x8, "bd61ca88e7085f91f3c5caa80d2e3c9d450c8351dac2949654c8a5834fdcd863a43349b9187625eec749d376589462bbc4316d9722d10336bf0a2a5b53707e819b8a3645603db48e6902df38532240b1643c3bc28d94295db58d4d60d33036bf"}, {0x10, 0x116, 0xc5f0000}, {0x48, 0x0, 0xf, "397a77745d029ee2c5d5c8c4a34e81861f8823f30b01b16d1a0b78fcc9f33e131d906dc0889a9228b52c4658a477b78737"}, {0x68, 0x115, 0x5, "19d9e123548b36f564b1742de862fe625a2884f9ac3162bd01f3d9b9671284cf6580fecd1dfaaa8dab129677d6b29815343d5425d315df37d57c2b2296e6165c1b57fadbe671b2a2de0d471f1290f7ed6c7236"}], 0x528}}, {{&(0x7f0000005d40)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80, &(0x7f0000008140)=[{&(0x7f0000005dc0)="e575f55633e60b15883b819f0c2430a995d40e986314822dc27486ca3e48f56cd339bc0291f3c64753e9e2345e0b618f588ce5b01621d89e0393485647e653d401117b76540628f5a273a950c10af68f13fcaa2ac38ba6f634ed47ce32d9c179b434d3c46198af43f3b2c06e635a", 0x6e}, {&(0x7f0000005e40)="f07b89e5bbd63891fbf8a8f39df30018c183fadc8cd6545595f4a84c888bd0b6c77898d17c2538d20ff1453c75daa43d5826a8416ed3e7d95079a378f87cf3e15adbba385898a101b65199a809e55ec505ca77ba09dd5b6a75d4e1a7a9d1a4232eb03636c68a67066b5f327b1b1110c71738eed9c52278f06bf4a6fbdb15d9ec9beddfb07e7c6e0101c6366bb39aa386d71c447fe299be", 0x97}, {&(0x7f0000005f00)="bb7389600889f85331cbb2aad0547a4c77497417968e22796ee85b906712f488fd16ff9aabfb64c77d7f4172", 0x2c}, {&(0x7f0000005f40)="1468e1bec8c25ae074ee10a7159e68aba17693e42b5f5852ec3d0beb5af19a26c3862925af29d8cc142050b253f0c9ab46dc30ee9ef3e74b56a5c89758ba6d4e0531ede5f52fb6dd51b93d7325d918c94f1be8a4012f3cda4f17243a4264a1b66925de0ba81fb2314d1ad4838d5f25a960e02d25e4db1f506e986f", 0x7b}, {&(0x7f0000005fc0)="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", 0x1000}, {&(0x7f0000006fc0)="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", 0x1000}, {&(0x7f0000007fc0)="902d0b324900b2b09b76a46d2ef4d0b82606547f0e6f8ba18bef591229bc1190bc6a8caeda153c716252d404549811bbf4749cddc7c16a9f3f456042bc87ee0548a6a9eeddb3a815610783c9b754f7dea59f4418eb3bb34dd5960b93eb", 0x5d}, {&(0x7f0000008040)="c75e111c50a7ecbda4a9463db0b78122905301a992351dccb7677adf720c773a6e187a6ed0d1c452bc46efb388a3887377a1d912f2c7c4e6b3360eed3b9a17c36f0aced4d0d887e7121237dc07ffb211e33a96d11822cd0f2f014dcbda2ff8081f8640f21fe583c359257ec26239ae92f2c211185dae7644ccbf6d093b7c85ab4ac1075d45dcde5a3e075740b805c0d673fe962c227fbb89242c879258c22607d3d733a2012006a94ff19cd934510b03ac8b8c09fb12d6dbfc91c5db4b08639c505f8941f75aba15e4821ccffd5987ae", 0xd0}], 0x8}}], 0xa, 0x4004085) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa3}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0xe43c4cf3342b4a61, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 1.15536195s ago: executing program 9 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x2b1e}, 0x8080) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r1, &(0x7f00000007c0), 0x20000004}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40107446, 0x20000000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 370.269437ms ago: executing program 9 (id=1831): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f7d8ff00883c0120010000000000000000000000000000ff0200000000000000000000000000010c0e0003"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd", 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c0}, 0x4008010) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000009500"/32], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0xc, @sdr}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r7, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r8 = dup(r6) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r10 = dup(r9) write$vga_arbiter(r7, &(0x7f00000000c0)=@unlock_all, 0xb) sendfile(r10, r8, 0x0, 0x89ffc) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10041) 311.999689ms ago: executing program 4 (id=1832): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000080)={0x0, 0x2, 0x1}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140020c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$isdn_base(0x22, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f000000c3c0)={0x2020}, 0x2020) linkat(r4, &(0x7f0000000200)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') r6 = socket(0x23, 0x80805, 0x0) poll(&(0x7f0000000040)=[{r6, 0x9081}], 0x1, 0x120002) socket$can_raw(0x1d, 0x3, 0x1) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="b8d1f5e2a35a5f3511772cc7bf", 0xd}], 0x1, 0x401, 0xd) getpid() close_range(r3, r3, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES8=r1], 0x0) 265.137639ms ago: executing program 2 (id=1833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000500), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010027bd00000000df", @ANYRES32, @ANYBLOB="08009f000000000008005700fe000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x4042090) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) shutdown(r3, 0x2) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @main=@item_4={0x3, 0x0, 0x0, "0d34b68a"}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 264.456179ms ago: executing program 6 (id=1834): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff"]}, 0xa4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = getuid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405039909"], 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xd5) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x33) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xb5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="e261a8527ea4fd71aa359edc525d1d75e5e9eff8ba0263bc794d57723f49c0431cceda0b4291ed93eb5890092d5be281e51e6b65581b0d6cdd4bab0a58f681a709ec964e1f22e01ac0e53fd9ed0ce603ebce9958431f36abe3e86af1dae8229a58f923de396444c56b812497028c5a7e0e0aa52d6097f8582794dce8cdb3bc9fef84aadac945af880bfa", @ANYRES16=r7, @ANYBLOB="01002cbd7000000000001400000008000300", @ANYRES32, @ANYBLOB="0600360006000000"], 0x24}}, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0000ff0108003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="e57d3d2cc44d396a3aa12fcdd63104ac7b2dbc7f3b6fbfdc447e4782f67b", @ANYRESDEC=r0], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) socket$inet_sctp(0x2, 0x1, 0x84) 0s ago: executing program 7 (id=1835): r0 = socket(0x11, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000ea8a6a072a56826f5b2b00000000001800004495001800000004000000020000000000000c0200000000000000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$packet(r0, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001e80)={{0x12, 0x1, 0x0, 0xfd, 0x9e, 0xee, 0x40, 0xc98, 0x1140, 0x2f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): disconnect, device number 37 [ 620.480852][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 621.260599][ T5838] Bluetooth: hci6: command 0x0405 tx timeout [ 621.266840][T10812] Bluetooth: hci3: command 0x0c1a tx timeout [ 621.302657][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 621.308761][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 621.473183][T11401] Cache volume key already in use (9p,(null),) [ 621.769696][T10812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.783556][T10812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.913468][T11413] FAULT_INJECTION: forcing a failure. [ 621.913468][T11413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.927276][T11413] CPU: 1 UID: 0 PID: 11413 Comm: syz.7.1365 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 621.938079][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.948161][T11413] Call Trace: [ 621.951473][T11413] [ 621.954516][T11413] dump_stack_lvl+0x241/0x360 [ 621.959244][T11413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.964498][T11413] ? __pfx__printk+0x10/0x10 [ 621.969128][T11413] ? should_fail_ex+0x334/0x4e0 [ 621.974014][T11413] should_fail_ex+0x3b0/0x4e0 [ 621.978724][T11413] ? kvm_arch_vcpu_ioctl+0x476/0x2a30 [ 621.984139][T11413] _copy_from_user+0x2f/0xc0 [ 621.988774][T11413] memdup_user+0x64/0xc0 [ 621.993053][T11413] kvm_arch_vcpu_ioctl+0x1bac/0x2a30 [ 621.998382][T11413] ? kvm_arch_vcpu_ioctl+0x476/0x2a30 [ 622.003802][T11413] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 622.009499][T11413] ? mark_lock+0x9a/0x360 [ 622.013871][T11413] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 622.019901][T11413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 622.026260][T11413] ? do_raw_spin_unlock+0x13c/0x8b0 [ 622.031503][T11413] ? finish_task_switch+0x1e5/0x870 [ 622.036756][T11413] ? lockdep_hardirqs_on+0x99/0x150 [ 622.041996][T11413] ? finish_task_switch+0x1e5/0x870 [ 622.047233][T11413] ? __schedule+0x1803/0x4be0 [ 622.051944][T11413] ? mark_lock+0x9a/0x360 [ 622.056312][T11413] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 622.062341][T11413] ? __pfx___schedule+0x10/0x10 [ 622.067240][T11413] ? lock_acquire+0x264/0x550 [ 622.071950][T11413] ? preempt_schedule+0xe1/0xf0 [ 622.076840][T11413] ? preempt_schedule_common+0x84/0xd0 [ 622.082337][T11413] ? preempt_schedule+0xe1/0xf0 [ 622.087222][T11413] ? __pfx_preempt_schedule+0x10/0x10 [ 622.092632][T11413] ? __mutex_trylock_common+0x183/0x2e0 [ 622.098215][T11413] ? __pfx___might_resched+0x10/0x10 [ 622.103559][T11413] ? __pfx___mutex_trylock_common+0x10/0x10 [ 622.109491][T11413] ? preempt_schedule_thunk+0x1a/0x30 [ 622.114908][T11413] ? __mutex_lock+0x398/0xee0 [ 622.119635][T11413] ? tomoyo_path_number_perm+0x679/0x860 [ 622.125303][T11413] ? tomoyo_path_number_perm+0x679/0x860 [ 622.130965][T11413] ? kvm_vcpu_ioctl+0x1da/0xea0 [ 622.135852][T11413] ? __pfx___mutex_lock+0x10/0x10 [ 622.140914][T11413] ? tomoyo_path_number_perm+0x6f9/0x860 [ 622.146588][T11413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 622.152606][T11413] kvm_vcpu_ioctl+0x73e/0xea0 [ 622.157345][T11413] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 622.162618][T11413] ? smack_file_ioctl+0x353/0x3a0 [ 622.167684][T11413] ? __pfx_smack_file_ioctl+0x10/0x10 [ 622.173092][T11413] ? __fget_files+0x2a/0x410 [ 622.177714][T11413] ? __fget_files+0x2a/0x410 [ 622.182339][T11413] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 622.187584][T11413] __se_sys_ioctl+0xf5/0x170 [ 622.192228][T11413] do_syscall_64+0xf3/0x230 [ 622.196775][T11413] ? clear_bhb_loop+0x35/0x90 [ 622.201484][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.207417][T11413] RIP: 0033:0x7fbb4f385d29 [ 622.211861][T11413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.231509][T11413] RSP: 002b:00007fbb4d1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.239965][T11413] RAX: ffffffffffffffda RBX: 00007fbb4f576160 RCX: 00007fbb4f385d29 [ 622.247977][T11413] RDX: 0000000020002480 RSI: 000000004008ae89 RDI: 0000000000000007 [ 622.255989][T11413] RBP: 00007fbb4d1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 622.264001][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.272010][T11413] R13: 0000000000000000 R14: 00007fbb4f576160 R15: 00007ffda25c03a8 [ 622.280036][T11413] [ 622.290836][T10812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 622.300999][T10812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 622.309793][T10812] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 622.331138][T10812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 622.411826][T10855] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 622.490137][T11418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.635344][T11407] dummy0 speed is unknown, defaulting to 1000 [ 622.651876][T10855] usb 1-1: Using ep0 maxpacket: 32 [ 622.664925][T10855] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 622.818372][T10855] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 622.997702][T10855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.020924][T10855] usb 1-1: Product: syz [ 623.025160][T10855] usb 1-1: Manufacturer: syz [ 623.038511][T10855] usb 1-1: SerialNumber: syz [ 623.430332][T10855] usb 1-1: config 0 descriptor?? [ 623.599365][T11411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 623.709230][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1370'. [ 623.718443][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1370'. [ 624.289585][T10855] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.330913][T11429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 624.337057][T11429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 624.344700][T11429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 624.350928][T11429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 624.357013][T11429] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 624.363216][T11429] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 624.369702][T11429] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 624.493264][T11429] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 624.635308][T11407] chnl_net:caif_netlink_parms(): no params data found [ 624.717227][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.827665][T11407] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.835278][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.843191][T11407] bridge_slave_0: entered allmulticast mode [ 624.852632][T11407] bridge_slave_0: entered promiscuous mode [ 624.862226][T11407] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.869641][T11407] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.879277][T11407] bridge_slave_1: entered allmulticast mode [ 624.895169][T11407] bridge_slave_1: entered promiscuous mode [ 624.920503][T10855] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 625.647969][T11407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.674116][T11407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.751926][T11407] team0: Port device team_slave_0 added [ 625.760107][T11407] team0: Port device team_slave_1 added [ 625.762212][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.777102][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.788519][T10855] usb 7-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 625.798555][T10855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.939341][T10855] usb 7-1: config 0 descriptor?? [ 626.442872][T10812] Bluetooth: hci5: command 0x041b tx timeout [ 626.450672][T10812] Bluetooth: hci6: command 0x0405 tx timeout [ 626.457498][T10812] Bluetooth: hci3: command 0x0c1a tx timeout [ 626.511280][T10812] Bluetooth: hci4: command 0x0406 tx timeout [ 626.520930][T10812] Bluetooth: hci2: command 0x0406 tx timeout [ 626.529254][T10812] Bluetooth: hci1: command 0x0406 tx timeout [ 626.834649][T11407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.841760][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.868041][T11407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.936584][T10855] uclogic 0003:5543:0042.000F: No inputs registered, leaving [ 626.953211][T10855] uclogic 0003:5543:0042.000F: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.6-1/input0 [ 626.965556][T11407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.980555][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.040518][T11407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.080338][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1375'. [ 627.102619][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1375'. [ 627.113224][T10855] usb 1-1: USB disconnect, device number 38 [ 627.185822][ T9642] usb 7-1: USB disconnect, device number 24 [ 627.298363][T11407] hsr_slave_0: entered promiscuous mode [ 627.363912][T11407] hsr_slave_1: entered promiscuous mode [ 627.415860][T11407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.442055][T11407] Cannot create hsr debugfs directory [ 627.536683][T11461] Cache volume key already in use (9p,(null),) [ 628.561761][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 629.091013][T11470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.099369][T11470] FAULT_INJECTION: forcing a failure. [ 629.099369][T11470] name failslab, interval 1, probability 0, space 0, times 0 [ 629.113947][T11470] CPU: 1 UID: 0 PID: 11470 Comm: syz.6.1379 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 629.124763][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 629.134853][T11470] Call Trace: [ 629.138165][T11470] [ 629.141120][T11470] dump_stack_lvl+0x241/0x360 [ 629.145845][T11470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.151084][T11470] ? __pfx__printk+0x10/0x10 [ 629.155712][T11470] ? __kmalloc_cache_noprof+0x48/0x390 [ 629.161210][T11470] ? __pfx___might_resched+0x10/0x10 [ 629.166541][T11470] should_fail_ex+0x3b0/0x4e0 [ 629.171259][T11470] should_failslab+0xac/0x100 [ 629.175991][T11470] __kmalloc_cache_noprof+0x70/0x390 [ 629.181314][T11470] ? mock_domain_hw_info+0x56/0x110 [ 629.186560][T11470] mock_domain_hw_info+0x56/0x110 [ 629.191626][T11470] iommufd_get_hw_info+0x285/0x8a0 [ 629.196774][T11470] ? __pfx_lock_release+0x10/0x10 [ 629.201839][T11470] ? __pfx_iommufd_get_hw_info+0x10/0x10 [ 629.207510][T11470] ? __might_fault+0xc6/0x120 [ 629.212229][T11470] iommufd_fops_ioctl+0x4d6/0x5a0 [ 629.217290][T11470] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 629.222887][T11470] ? __se_sys_ioctl+0x2c/0x170 [ 629.227691][T11470] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 629.233268][T11470] __se_sys_ioctl+0xf5/0x170 [ 629.237898][T11470] do_syscall_64+0xf3/0x230 [ 629.242446][T11470] ? clear_bhb_loop+0x35/0x90 [ 629.247152][T11470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.253086][T11470] RIP: 0033:0x7f1540f85d29 [ 629.257545][T11470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.277188][T11470] RSP: 002b:00007f1541e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.285650][T11470] RAX: ffffffffffffffda RBX: 00007f1541176160 RCX: 00007f1540f85d29 [ 629.293658][T11470] RDX: 0000000020000180 RSI: 0000000000003b8a RDI: 0000000000000006 [ 629.301661][T11470] RBP: 00007f1541e36090 R08: 0000000000000000 R09: 0000000000000000 [ 629.309658][T11470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.317659][T11470] R13: 0000000000000000 R14: 00007f1541176160 R15: 00007fff827f62f8 [ 629.325691][T11470] [ 629.540579][T11407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.558171][T11407] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.595918][T11407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 629.606438][T11407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.626284][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.633528][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.644532][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.651785][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.016833][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1382'. [ 630.198652][T11407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.528530][T11407] veth0_vlan: entered promiscuous mode [ 630.549475][T11407] veth1_vlan: entered promiscuous mode [ 630.640652][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 630.744711][T11407] veth0_macvtap: entered promiscuous mode [ 630.769026][T11407] veth1_macvtap: entered promiscuous mode [ 630.827273][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.865613][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.199683][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.527008][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.572440][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.620696][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.650540][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.663432][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.674345][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.685794][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.697026][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.708655][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.734762][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.743188][T11504] Cache volume key already in use (9p,(null),) [ 631.765770][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.787326][T11407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.893845][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.940065][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.954776][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.000451][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.030580][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.041147][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.051623][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.062277][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.074860][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.086531][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.096612][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.107476][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.118265][T11407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.128993][T11407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.142346][T11407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.391995][T11517] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 632.392781][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.494141][ T5877] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 632.519067][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.661185][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 632.699566][ T5877] usb 7-1: unable to get BOS descriptor or descriptor too short [ 632.730768][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 632.821651][ T5877] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 632.940574][ T5877] usb 7-1: can't read configurations, error -71 [ 632.977103][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.994604][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.028664][T11523] FAULT_INJECTION: forcing a failure. [ 633.028664][T11523] name failslab, interval 1, probability 0, space 0, times 0 [ 633.059053][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.7.1392 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 633.069893][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 633.079981][T11523] Call Trace: [ 633.083277][T11523] [ 633.086217][T11523] dump_stack_lvl+0x241/0x360 [ 633.090921][T11523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.096132][T11523] ? __pfx__printk+0x10/0x10 [ 633.100754][T11523] ? __kmalloc_noprof+0xb5/0x4c0 [ 633.105704][T11523] ? __pfx___might_resched+0x10/0x10 [ 633.111014][T11523] should_fail_ex+0x3b0/0x4e0 [ 633.115703][T11523] should_failslab+0xac/0x100 [ 633.120405][T11523] __kmalloc_noprof+0xdd/0x4c0 [ 633.125188][T11523] ? security_sk_alloc+0x53/0x360 [ 633.130232][T11523] security_sk_alloc+0x53/0x360 [ 633.135094][T11523] sk_prot_alloc+0xfa/0x210 [ 633.139608][T11523] ? sk_alloc+0x26/0x370 [ 633.143864][T11523] sk_alloc+0x38/0x370 [ 633.147943][T11523] ? bpf_test_init+0x15a/0x180 [ 633.152723][T11523] ? bpf_ctx_init+0x162/0x1b0 [ 633.157418][T11523] bpf_prog_test_run_skb+0x3ab/0x1820 [ 633.162801][T11523] ? __pfx_lock_release+0x10/0x10 [ 633.167843][T11523] ? __pfx___might_resched+0x10/0x10 [ 633.173154][T11523] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 633.178979][T11523] ? __fget_files+0x2a/0x410 [ 633.183584][T11523] ? fput+0x21b/0x290 [ 633.187577][T11523] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 633.193396][T11523] bpf_prog_test_run+0x2e4/0x360 [ 633.198354][T11523] __sys_bpf+0x48d/0x810 [ 633.202636][T11523] ? __pfx___sys_bpf+0x10/0x10 [ 633.207421][T11523] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 633.213414][T11523] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 633.219754][T11523] ? do_syscall_64+0x100/0x230 [ 633.224538][T11523] __x64_sys_bpf+0x7c/0x90 [ 633.228973][T11523] do_syscall_64+0xf3/0x230 [ 633.233492][T11523] ? clear_bhb_loop+0x35/0x90 [ 633.238180][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.244092][T11523] RIP: 0033:0x7fbb4f385d29 [ 633.248516][T11523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.268130][T11523] RSP: 002b:00007fbb4d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.276561][T11523] RAX: ffffffffffffffda RBX: 00007fbb4f575fa0 RCX: 00007fbb4f385d29 [ 633.284570][T11523] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 633.292578][T11523] RBP: 00007fbb4d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.300597][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.308612][T11523] R13: 0000000000000000 R14: 00007fbb4f575fa0 R15: 00007ffda25c03a8 [ 633.316646][T11523] [ 633.422231][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1394'. [ 633.548473][T11533] FAULT_INJECTION: forcing a failure. [ 633.548473][T11533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.600240][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.7.1395 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 633.611095][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 633.621201][T11533] Call Trace: [ 633.624507][T11533] [ 633.627472][T11533] dump_stack_lvl+0x241/0x360 [ 633.632213][T11533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.637477][T11533] ? __pfx__printk+0x10/0x10 [ 633.642127][T11533] ? __pfx_lock_release+0x10/0x10 [ 633.647202][T11533] should_fail_ex+0x3b0/0x4e0 [ 633.651925][T11533] _copy_from_user+0x2f/0xc0 [ 633.656564][T11533] copy_msghdr_from_user+0xae/0x680 [ 633.661810][T11533] ? __pfx___might_resched+0x10/0x10 [ 633.667166][T11533] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 633.671368][T11535] random: crng reseeded on system resumption [ 633.673008][T11533] ? do_recvmmsg+0x44e/0xab0 [ 633.683617][T11533] ? __might_fault+0xaa/0x120 [ 633.688323][T11533] do_recvmmsg+0x3bd/0xab0 [ 633.688368][T11533] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.693019][T11533] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 633.693057][T11533] ? ksys_write+0x22a/0x2b0 [ 633.693086][T11533] ? __pfx_lock_release+0x10/0x10 [ 633.704118][T11533] ? vfs_write+0x730/0xd30 [ 633.704179][T11533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.704212][T11533] ? __fget_files+0x2a/0x410 [ 633.704245][T11533] __x64_sys_recvmmsg+0x199/0x250 [ 633.704275][T11533] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 633.704312][T11533] ? do_syscall_64+0x100/0x230 [ 633.704348][T11533] ? do_syscall_64+0xb6/0x230 [ 633.704382][T11533] do_syscall_64+0xf3/0x230 [ 633.704415][T11533] ? clear_bhb_loop+0x35/0x90 [ 633.704440][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.704471][T11533] RIP: 0033:0x7fbb4f385d29 [ 633.704493][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.704513][T11533] RSP: 002b:00007fbb4d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.704539][T11533] RAX: ffffffffffffffda RBX: 00007fbb4f575fa0 RCX: 00007fbb4f385d29 [ 633.704557][T11533] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000003 [ 633.704572][T11533] RBP: 00007fbb4d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.704587][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.704602][T11533] R13: 0000000000000000 R14: 00007fbb4f575fa0 R15: 00007ffda25c03a8 [ 633.704631][T11533] [ 634.814416][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 635.179658][ T5877] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 635.740634][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 635.780771][ T5877] usb 7-1: config 4 has an invalid interface number: 244 but max is 0 [ 635.789147][ T5877] usb 7-1: config 4 has no interface number 0 [ 635.809467][ T5877] usb 7-1: config 4 interface 244 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1023 [ 635.906889][ T5877] usb 7-1: config 4 interface 244 has no altsetting 0 [ 636.000841][ T5877] usb 7-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 636.012674][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.013386][T11559] FAULT_INJECTION: forcing a failure. [ 636.013386][T11559] name failslab, interval 1, probability 0, space 0, times 0 [ 636.055104][ T5877] usb 7-1: Product: syz [ 636.059527][ T5877] usb 7-1: Manufacturer: syz [ 636.094705][ T5877] usb 7-1: SerialNumber: syz [ 636.186936][T11536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 636.228704][T11559] CPU: 0 UID: 0 PID: 11559 Comm: syz.0.1403 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 636.239556][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.249662][T11559] Call Trace: [ 636.252983][T11559] [ 636.255965][T11559] dump_stack_lvl+0x241/0x360 [ 636.260716][T11559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.265971][T11559] ? __pfx__printk+0x10/0x10 [ 636.270633][T11559] ? kmem_cache_alloc_noprof+0x48/0x380 [ 636.276235][T11559] ? __pfx___might_resched+0x10/0x10 [ 636.281586][T11559] should_fail_ex+0x3b0/0x4e0 [ 636.286312][T11559] should_failslab+0xac/0x100 [ 636.291054][T11559] ? ep_insert+0x267/0x1ab0 [ 636.295595][T11559] kmem_cache_alloc_noprof+0x70/0x380 [ 636.301038][T11559] ep_insert+0x267/0x1ab0 [ 636.305424][T11559] ? __fget_files+0x2a/0x410 [ 636.310070][T11559] ? do_epoll_ctl+0x41d/0xf80 [ 636.314800][T11559] ? __pfx_ep_insert+0x10/0x10 [ 636.319617][T11559] ? __pfx___mutex_lock+0x10/0x10 [ 636.324698][T11559] ? __fget_files+0x2a/0x410 [ 636.329341][T11559] ? __fget_files+0x2a/0x410 [ 636.333989][T11559] do_epoll_ctl+0x8bc/0xf80 [ 636.338558][T11559] __x64_sys_epoll_ctl+0x161/0x1a0 [ 636.343721][T11559] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 636.349403][T11559] ? do_syscall_64+0x100/0x230 [ 636.354221][T11559] ? do_syscall_64+0xb6/0x230 [ 636.358966][T11559] do_syscall_64+0xf3/0x230 [ 636.363534][T11559] ? clear_bhb_loop+0x35/0x90 [ 636.368261][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.374211][T11559] RIP: 0033:0x7f72e2b85d29 [ 636.378670][T11559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.398327][T11559] RSP: 002b:00007f72e38e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 636.406798][T11559] RAX: ffffffffffffffda RBX: 00007f72e2d76080 RCX: 00007f72e2b85d29 [ 636.414816][T11559] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 636.422837][T11559] RBP: 00007f72e38e1090 R08: 0000000000000000 R09: 0000000000000000 [ 636.430854][T11559] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 636.438866][T11559] R13: 0000000000000001 R14: 00007f72e2d76080 R15: 00007ffe995f7788 [ 636.446902][T11559] [ 636.872589][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 637.401211][ T5908] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 637.791620][ T5908] usb 10-1: device descriptor read/64, error -71 [ 638.102445][ T5908] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 638.415071][ T5908] usb 10-1: device descriptor read/64, error -71 [ 638.781967][ T5908] usb usb10-port1: attempt power cycle [ 639.220509][ T5908] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 639.241876][ T5908] usb 10-1: device descriptor read/8, error -71 [ 639.481090][ T5908] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 639.492554][T11597] loop6: detected capacity change from 0 to 524287999 [ 639.509965][ T5908] usb 10-1: device descriptor read/8, error -71 [ 639.566087][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.575594][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.595694][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.605004][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.679931][ T5908] usb usb10-port1: unable to enumerate USB device [ 639.691248][T11599] netlink: 'syz.1.1416': attribute type 10 has an invalid length. [ 639.699727][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.708947][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.734218][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.743609][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.766479][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.775790][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.815417][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.824663][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.879493][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.897154][T11599] team0: Port device bond0 added [ 639.944053][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.953290][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.968463][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 639.977768][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 639.986236][T11597] ldm_validate_partition_table(): Disk read failed. [ 640.091360][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.100642][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.108988][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.118195][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.142361][T11597] Dev loop6: unable to read RDB block 0 [ 640.179954][T11597] loop6: unable to read partition table [ 640.186227][T11597] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 640.200511][ T5908] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 640.382668][ T5908] usb 2-1: Invalid ep0 maxpacket: 32 [ 640.634229][ T9572] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 640.700537][ T5908] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 640.777111][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1418'. [ 640.786334][T11612] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1418'. [ 640.840590][ T9572] usb 1-1: Using ep0 maxpacket: 16 [ 640.864166][ T9572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 640.933837][ T5908] usb 2-1: Invalid ep0 maxpacket: 32 [ 641.007549][ T5908] usb usb2-port1: attempt power cycle [ 641.097713][ T9572] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 641.343776][ T9572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 641.383945][ T9572] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 641.426516][ T9572] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 641.442054][ T9572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.476254][ T9572] usb 1-1: Product: syz [ 641.490526][ T9572] usb 1-1: Manufacturer: syz [ 641.505793][ T9572] usb 1-1: SerialNumber: syz [ 641.546380][ T9572] usb 1-1: config 0 descriptor?? [ 641.559342][ T9572] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected [ 641.590945][ T5908] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 641.634683][ T9572] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 641.641737][ T5877] ipheth 7-1:4.244: Unable to find endpoints [ 641.652485][ T5908] usb 2-1: Invalid ep0 maxpacket: 32 [ 641.754479][ T9572] usb 7-1: USB disconnect, device number 26 [ 641.792508][ T5826] usb 1-1: USB disconnect, device number 39 [ 641.800587][ T5908] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 641.832346][ T5826] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 641.872978][ T5908] usb 2-1: Invalid ep0 maxpacket: 32 [ 641.884069][ T5826] omninet 1-1:0.0: device disconnected [ 641.900536][ T5908] usb usb2-port1: unable to enumerate USB device [ 641.943871][T11620] bridge0: entered promiscuous mode [ 641.949710][T11620] vlan2: entered promiscuous mode [ 641.956535][T11620] bridge0: left promiscuous mode [ 642.535216][T11623] x_tables: duplicate underflow at hook 3 [ 643.665776][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1427'. [ 645.578027][T11675] Cache volume key already in use (9p,(null),) [ 645.597601][T11676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.946526][T11701] tmpfs: Bad value for 'nr_blocks' [ 647.311631][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1442'. [ 647.320848][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1442'. [ 648.044163][T11708] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1445'. [ 648.142534][T11710] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 648.241864][T11706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 648.251295][T11706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.257470][T11706] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 648.263725][T11706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.269853][T11706] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 648.276129][T11706] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 649.219890][T11720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.410002][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 650.416443][T10812] Bluetooth: hci6: command 0x0405 tx timeout [ 650.426585][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 650.432869][T10812] Bluetooth: hci4: command 0x0406 tx timeout [ 650.438921][T10812] Bluetooth: hci2: command 0x0406 tx timeout [ 650.445215][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 650.676406][T11736] Cache volume key already in use (9p,(null),) [ 651.304750][T11748] fuse: Bad value for 'user_id' [ 651.309741][T11748] fuse: Bad value for 'user_id' [ 652.171436][T11756] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 652.200709][T11759] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1458'. [ 652.243990][T11759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.270792][ T5826] IPVS: starting estimator thread 0... [ 652.370642][T11761] IPVS: using max 19 ests per chain, 45600 per kthread [ 652.510056][T11766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.542171][T11769] FAULT_INJECTION: forcing a failure. [ 652.542171][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 652.570525][T11769] CPU: 0 UID: 0 PID: 11769 Comm: syz.7.1464 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 652.581373][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 652.591475][T11769] Call Trace: [ 652.594786][T11769] [ 652.597747][T11769] dump_stack_lvl+0x241/0x360 [ 652.602493][T11769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.607743][T11769] ? __pfx__printk+0x10/0x10 [ 652.612384][T11769] ? __kmalloc_cache_noprof+0x48/0x390 [ 652.617902][T11769] ? __pfx___might_resched+0x10/0x10 [ 652.623249][T11769] should_fail_ex+0x3b0/0x4e0 [ 652.627973][T11769] should_failslab+0xac/0x100 [ 652.632709][T11769] __kmalloc_cache_noprof+0x70/0x390 [ 652.638036][T11769] ? inet_alloc_ifa+0x50/0x110 [ 652.642856][T11769] inet_alloc_ifa+0x50/0x110 [ 652.647486][T11769] devinet_ioctl+0x87c/0x1ac0 [ 652.652192][T11769] inet_ioctl+0x3d7/0x4f0 [ 652.656538][T11769] ? __pfx_inet_ioctl+0x10/0x10 [ 652.661404][T11769] ? tomoyo_path_number_perm+0x679/0x860 [ 652.667077][T11769] ? __lock_acquire+0x1397/0x2100 [ 652.672117][T11769] ? tomoyo_path_number_perm+0x206/0x860 [ 652.677768][T11769] sock_do_ioctl+0x158/0x460 [ 652.682386][T11769] ? __pfx_sock_do_ioctl+0x10/0x10 [ 652.687528][T11769] ? __asan_memset+0x23/0x50 [ 652.692133][T11769] ? smack_file_ioctl+0x29e/0x3a0 [ 652.697171][T11769] sock_ioctl+0x626/0x8e0 [ 652.701520][T11769] ? __pfx_sock_ioctl+0x10/0x10 [ 652.706385][T11769] ? __fget_files+0x2a/0x410 [ 652.710999][T11769] ? __fget_files+0x2a/0x410 [ 652.715604][T11769] ? __pfx_sock_ioctl+0x10/0x10 [ 652.720472][T11769] __se_sys_ioctl+0xf5/0x170 [ 652.725078][T11769] do_syscall_64+0xf3/0x230 [ 652.729633][T11769] ? clear_bhb_loop+0x35/0x90 [ 652.734324][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.740236][T11769] RIP: 0033:0x7fbb4f385d29 [ 652.744670][T11769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.764292][T11769] RSP: 002b:00007fbb4d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.772719][T11769] RAX: ffffffffffffffda RBX: 00007fbb4f575fa0 RCX: 00007fbb4f385d29 [ 652.780702][T11769] RDX: 0000000020000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 652.788686][T11769] RBP: 00007fbb4d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 652.796677][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.804657][T11769] R13: 0000000000000000 R14: 00007fbb4f575fa0 R15: 00007ffda25c03a8 [ 652.812657][T11769] [ 652.897167][T11774] x_tables: unsorted underflow at hook 3 [ 652.906077][T11774] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1466'. [ 653.860810][ T5877] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 654.030934][ T5877] usb 10-1: Using ep0 maxpacket: 16 [ 654.053774][ T5877] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 654.112230][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 654.263579][ T5877] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 654.275149][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.283579][ T5877] usb 10-1: Product: syz [ 654.288618][ T5877] usb 10-1: Manufacturer: syz [ 654.293527][ T5877] usb 10-1: SerialNumber: syz [ 654.337618][ T5877] usb 10-1: config 0 descriptor?? [ 654.406088][ T5877] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 654.440539][ T5877] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 655.160790][ T5876] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 655.937830][T11789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.970808][ T5877] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 655.994791][ T5877] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 656.140488][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 656.152149][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 656.174340][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 656.202645][ T5876] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 656.220565][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.249035][ T5876] usb 1-1: Product: syz [ 656.253550][ T5876] usb 1-1: Manufacturer: syz [ 656.258210][ T5876] usb 1-1: SerialNumber: syz [ 656.274893][ T5876] usb 1-1: config 0 descriptor?? [ 656.294050][ T5876] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 656.320576][ T5876] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 656.641369][T11781] tmpfs: Bad value for 'mpol' [ 656.646362][ T5877] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 656.676624][ T5877] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 656.686814][ T5877] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 656.705037][ T5877] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 656.876773][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 656.885857][T11802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1473'. [ 658.461173][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 658.670625][T11804] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1474'. [ 658.989775][ T5877] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 659.231230][ T5877] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 659.260553][ T5876] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 659.273696][ T5876] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 659.301041][ T5876] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 659.308060][ T5876] em28xx 1-1:0.0: No AC97 audio processor [ 659.320515][ T5877] usb 10-1: USB disconnect, device number 16 [ 659.345459][ T5876] usb 1-1: USB disconnect, device number 40 [ 659.352430][ T5876] em28xx 1-1:0.0: Disconnecting em28xx [ 659.362808][ T5876] em28xx 1-1:0.0: Freeing device [ 659.726858][T11816] fuse: Bad value for 'user_id' [ 659.731873][T11816] fuse: Bad value for 'user_id' [ 660.398708][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1477'. [ 660.758365][T11829] netlink: 'syz.0.1482': attribute type 2 has an invalid length. [ 662.198839][T11842] unknown channel width for channel at 909000KHz? [ 662.507072][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1485'. [ 662.516243][T11848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1485'. [ 663.241434][T11848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 663.247609][T11848] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 663.255197][T11848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 663.261556][T11848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 663.267726][T11848] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 663.274098][T11848] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 663.590188][T11855] x_tables: unsorted underflow at hook 3 [ 663.596703][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1489'. [ 663.851860][T11862] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1491'. [ 664.046693][T11864] fuse: Bad value for 'user_id' [ 664.051801][T11864] fuse: Bad value for 'user_id' [ 665.102121][T11870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.194051][ T5877] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 665.513311][T10812] Bluetooth: hci5: command 0x041b tx timeout [ 665.519519][T10812] Bluetooth: hci6: command 0x0405 tx timeout [ 665.526885][T10812] Bluetooth: hci3: command 0x0c1a tx timeout [ 665.535316][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 665.541601][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 665.547769][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 665.599827][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 665.623138][T11874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.775518][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 665.800530][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 666.390556][ T5877] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 666.417460][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.441795][ T5877] usb 1-1: Product: syz [ 666.459811][ T5877] usb 1-1: Manufacturer: syz [ 666.467031][ T5877] usb 1-1: config 0 descriptor?? [ 666.488927][ T5877] usb 1-1: can't set config #0, error -71 [ 666.508324][T11886] unknown channel width for channel at 909000KHz? [ 666.508675][ T5877] usb 1-1: USB disconnect, device number 41 [ 666.784291][T11871] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (5368709120 ns) > initial count (640 ns). Using initial count to start timer. [ 667.754905][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 667.764079][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1500'. [ 668.277469][T11901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.285322][T11901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.291520][T11901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 668.298237][T11901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.304500][T11901] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 668.310951][T11901] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 668.764395][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'. [ 669.225474][T11918] fuse: Bad value for 'user_id' [ 669.230434][T11918] fuse: Bad value for 'user_id' [ 669.511635][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 669.673248][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 669.753526][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 669.767687][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 669.791429][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 669.809026][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.817885][ T9] usb 7-1: Product: syz [ 669.828893][ T9] usb 7-1: Manufacturer: syz [ 669.835081][ T9] usb 7-1: SerialNumber: syz [ 669.873614][ T9] usb 7-1: config 0 descriptor?? [ 669.894560][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 669.934622][ T9] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 669.981649][T11929] unknown channel width for channel at 909000KHz? [ 670.390969][T11876] Bluetooth: hci6: command 0x0405 tx timeout [ 670.397190][T11876] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.403699][T11876] Bluetooth: hci4: command 0x0406 tx timeout [ 670.407775][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 670.410066][ T5827] Bluetooth: hci5: command 0x041b tx timeout [ 670.416281][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 671.094043][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 671.102494][ T9] em28xx 7-1:0.0: Config register raw data: 0x56 [ 671.306764][ T9] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 671.320762][ T9] em28xx 7-1:0.0: No AC97 audio processor [ 671.489232][ T9] usb 7-1: USB disconnect, device number 27 [ 671.496558][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 671.508917][ T9] em28xx 7-1:0.0: Freeing device [ 671.545059][T11935] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1512'. [ 671.576170][T11935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.992697][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1513'. [ 672.001936][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1513'. [ 672.801869][T11941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 672.808054][T11941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 672.814205][T11941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 672.820445][T11941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 672.826626][T11941] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 672.832859][T11941] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 674.141341][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1517'. [ 674.471403][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1517'. [ 674.973514][ T5835] Bluetooth: hci5: command 0x041b tx timeout [ 674.979602][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 674.985779][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 674.992262][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 674.998439][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 675.004950][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 675.776120][ T29] audit: type=1326 audit(1736223216.124:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 675.977059][T11958] program syz.9.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 676.030602][ T29] audit: type=1326 audit(1736223216.174:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.070430][ T29] audit: type=1326 audit(1736223216.174:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.136212][ T29] audit: type=1326 audit(1736223216.174:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.222489][ T29] audit: type=1326 audit(1736223216.174:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.253344][ T29] audit: type=1326 audit(1736223216.194:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.330758][ T29] audit: type=1326 audit(1736223216.204:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.352700][ T29] audit: type=1326 audit(1736223216.204:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.374705][ T29] audit: type=1326 audit(1736223216.204:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9c2984690 code=0x7ffc0000 [ 676.397760][ T29] audit: type=1326 audit(1736223216.214:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11957 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x7ffc0000 [ 676.520795][T11967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.304128][T11974] fuse: Bad value for 'user_id' [ 677.309615][T11974] fuse: Bad value for 'user_id' [ 678.054944][T11976] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1524'. [ 678.176304][T11976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.476269][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1525'. [ 678.485587][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1525'. [ 679.402077][T11988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 679.408240][T11988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 679.414436][T11988] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 679.420620][T11988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 679.426694][T11988] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 679.432923][T11988] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 679.689045][T11999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1528'. [ 679.692362][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1529'. [ 679.708688][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1529'. [ 680.020501][T10855] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 680.212135][T10855] usb 7-1: Using ep0 maxpacket: 16 [ 680.228053][T10855] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 680.287504][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 680.455566][T10855] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 680.574981][T10855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.695648][T10855] usb 7-1: Product: syz [ 680.699896][T10855] usb 7-1: Manufacturer: syz [ 680.704625][T10855] usb 7-1: SerialNumber: syz [ 680.712969][T10855] usb 7-1: config 0 descriptor?? [ 680.721456][T10855] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 680.730834][T10855] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 681.330010][T10855] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 681.339916][T10855] em28xx 7-1:0.0: Config register raw data: 0x56 [ 681.520850][ T5835] Bluetooth: hci5: command 0x041b tx timeout [ 681.522456][T10812] Bluetooth: hci6: command 0x0405 tx timeout [ 681.527169][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 681.533333][T10812] Bluetooth: hci4: command 0x0406 tx timeout [ 681.542860][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 681.545482][T10812] Bluetooth: hci1: command 0x0406 tx timeout [ 681.567381][T12009] bridge0: port 3(erspan0) entered blocking state [ 681.572291][T10855] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 681.574227][T12009] bridge0: port 3(erspan0) entered disabled state [ 681.583584][T10855] em28xx 7-1:0.0: No AC97 audio processor [ 681.587895][T12009] erspan0: entered allmulticast mode [ 681.733062][T10855] usb 7-1: USB disconnect, device number 28 [ 681.748488][T10855] em28xx 7-1:0.0: Disconnecting em28xx [ 681.755159][T12009] erspan0: entered promiscuous mode [ 681.773833][T12009] bridge0: port 3(erspan0) entered blocking state [ 681.780219][T10855] em28xx 7-1:0.0: Freeing device [ 681.780472][T12009] bridge0: port 3(erspan0) entered forwarding state [ 683.454433][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1537'. [ 683.635483][T12028] fuse: Bad value for 'user_id' [ 683.640676][T12028] fuse: Bad value for 'user_id' [ 684.524236][T12033] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1540'. [ 684.992672][T12037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.406722][T12040] netlink: 'syz.7.1542': attribute type 10 has an invalid length. [ 685.428747][T12040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.437328][T12040] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 686.154860][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.258402][T12040] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1542'. [ 686.313623][T10812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 686.333772][T10812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 686.342590][T10812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 686.363333][T10812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 686.373435][T10812] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 686.383002][T10812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 686.436630][T10812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 686.452651][T10812] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 686.463631][T10812] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 686.483573][T12049] dummy0 speed is unknown, defaulting to 1000 [ 686.537174][T10812] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 686.559501][T10812] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 686.569037][T11876] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 686.739446][T12051] dummy0 speed is unknown, defaulting to 1000 [ 687.359372][T12066] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 687.387356][T12049] chnl_net:caif_netlink_parms(): no params data found [ 687.402212][T12064] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1543'. [ 687.428755][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1543'. [ 687.435046][T12051] chnl_net:caif_netlink_parms(): no params data found [ 687.443022][T12064] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1543'. [ 687.475850][T12064] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1543'. [ 687.838980][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.857825][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.932167][T12049] bridge_slave_0: entered allmulticast mode [ 687.971396][T12049] bridge_slave_0: entered promiscuous mode [ 688.021295][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.028991][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.041513][T12049] bridge_slave_1: entered allmulticast mode [ 688.048813][T12049] bridge_slave_1: entered promiscuous mode [ 688.057960][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.066675][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.080007][T12051] bridge_slave_0: entered allmulticast mode [ 688.088100][T12051] bridge_slave_0: entered promiscuous mode [ 688.214835][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.242616][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.249925][T12051] bridge_slave_1: entered allmulticast mode [ 688.307502][T12051] bridge_slave_1: entered promiscuous mode [ 688.324579][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.431563][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.477910][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.480870][T11876] Bluetooth: hci7: command tx timeout [ 688.536045][T12049] team0: Port device team_slave_0 added [ 688.574515][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.631168][T11876] Bluetooth: hci8: command tx timeout [ 688.643608][T12049] team0: Port device team_slave_1 added [ 688.918841][T12051] team0: Port device team_slave_0 added [ 688.998017][T12051] team0: Port device team_slave_1 added [ 689.520310][T12084] dummy0 speed is unknown, defaulting to 1000 [ 689.835002][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.850438][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.877604][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.889889][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.949793][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.051300][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.066555][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.073907][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.168027][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.187349][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.202997][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.264407][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.434425][T12051] hsr_slave_0: entered promiscuous mode [ 690.457206][T12051] hsr_slave_1: entered promiscuous mode [ 690.488236][T12051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.496015][T12051] Cannot create hsr debugfs directory [ 690.550728][T11876] Bluetooth: hci7: command tx timeout [ 690.650264][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 690.650303][ T29] audit: type=1326 audit(1736223230.995:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12083 comm="syz.6.1549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1540f85d29 code=0x0 [ 690.723152][T11876] Bluetooth: hci8: command tx timeout [ 690.751403][T12049] hsr_slave_0: entered promiscuous mode [ 690.833945][T12049] hsr_slave_1: entered promiscuous mode [ 690.877393][T12049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.885392][T12049] Cannot create hsr debugfs directory [ 691.094164][T12100] netlink: 'syz.7.1553': attribute type 10 has an invalid length. [ 691.525717][T12104] vcan0: Master is either lo or non-ether device [ 692.073475][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.105512][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.155152][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.194163][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.201534][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.216415][T12051] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.234234][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.241471][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.263409][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.270637][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.322984][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.330110][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.380612][ T9572] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 692.511628][ T9572] usb 8-1: device descriptor read/64, error -71 [ 692.630613][T11876] Bluetooth: hci7: command tx timeout [ 692.761554][ T9572] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 692.810571][T11876] Bluetooth: hci8: command tx timeout [ 692.898012][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.931062][ T9572] usb 8-1: device descriptor read/64, error -71 [ 693.032136][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.062430][ T9572] usb usb8-port1: attempt power cycle [ 693.427085][ T9572] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 693.465426][ T9572] usb 8-1: device descriptor read/8, error -71 [ 693.563479][T12051] veth0_vlan: entered promiscuous mode [ 693.649251][T12051] veth1_vlan: entered promiscuous mode [ 693.685435][T12049] veth0_vlan: entered promiscuous mode [ 693.710657][ T9572] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 693.741213][ T9572] usb 8-1: device descriptor read/8, error -71 [ 693.753207][T12049] veth1_vlan: entered promiscuous mode [ 693.789300][T12051] veth0_macvtap: entered promiscuous mode [ 693.812389][T12051] veth1_macvtap: entered promiscuous mode [ 693.851995][ T9572] usb usb8-port1: unable to enumerate USB device [ 693.872591][T12049] veth0_macvtap: entered promiscuous mode [ 693.881359][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.911245][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.921231][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.943008][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.958873][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.979319][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.005107][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.026844][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.047349][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.069020][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.089951][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.121086][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.141770][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.170687][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.200630][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.225525][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.252008][T12051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.276607][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.297723][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.323490][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.347711][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.455576][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.488640][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.518482][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.563060][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.605175][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.638041][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.648143][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.658684][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.668694][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.679250][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.689289][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.699910][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.720196][T12051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.755341][T12149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.800525][T11876] Bluetooth: hci7: command tx timeout [ 694.870724][T11876] Bluetooth: hci8: command tx timeout [ 694.997954][T12049] veth1_macvtap: entered promiscuous mode [ 695.569325][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.607715][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.642220][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.652834][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.662833][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.690469][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.708826][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.730576][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.751815][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.770383][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.780246][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.790813][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.800728][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.811255][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.824647][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.835256][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.848715][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.863922][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.877969][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.904236][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.958935][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.979148][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.989779][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.000437][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.011048][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.021036][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.036768][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.048027][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.060830][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.071407][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.084206][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.099007][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.109725][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.119956][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.130717][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.140648][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.152608][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.167190][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.369339][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.391587][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.475022][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.484287][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.502731][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.510286][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.591026][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.610170][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.835613][T12165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.546988][T12169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 698.234507][T12180] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 700.561209][T12179] x_tables: duplicate underflow at hook 3 [ 701.542478][T12205] Cannot find add_set index 0 as target [ 701.638896][ T5826] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 702.055604][T12208] syz.6.1577[12208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.055724][T12208] syz.6.1577[12208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.124089][ T5826] usb 10-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 702.152264][T12208] syz.6.1577[12208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.159426][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.222030][ T5826] usb 10-1: Product: syz [ 702.236523][ T5826] usb 10-1: Manufacturer: syz [ 702.249516][ T5826] usb 10-1: SerialNumber: syz [ 702.261390][T12208] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 702.272328][T12208] syzkaller0: entered promiscuous mode [ 702.286568][T12208] syzkaller0: entered allmulticast mode [ 702.295605][ T5826] usb 10-1: config 0 descriptor?? [ 702.519848][ T5826] peak_usb 10-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 702.721876][ T5826] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 702.733442][ T5826] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 702.756652][ T5826] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 702.856816][ T5826] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 702.892125][T12214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1578'. [ 702.936828][ T5826] usb 10-1: USB disconnect, device number 17 [ 702.940444][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1578'. [ 702.964184][T12214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1578'. [ 703.001652][T12214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1578'. [ 703.054879][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1580'. [ 703.069840][T12217] ipvlan2: entered promiscuous mode [ 703.088796][T12217] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 703.097262][T12217] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 703.393105][T12221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.994357][T12236] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 705.093611][T12242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.132496][T12242] batadv_slave_1: entered promiscuous mode [ 705.141570][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1589'. [ 705.820492][T12253] dummy0 speed is unknown, defaulting to 1000 [ 706.260712][T12252] netlink: 'syz.2.1591': attribute type 4 has an invalid length. [ 706.268523][T12252] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1591'. [ 706.560502][ T5877] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 706.771166][ T5877] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 706.781499][ T5877] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 706.793376][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.872762][ T5877] ath6kl: Failed to submit usb control message: -110 [ 708.879847][ T5877] ath6kl: unable to send the bmi data to the device: -110 [ 708.887808][ T5877] ath6kl: Unable to send get target info: -110 [ 709.182966][ T5877] ath6kl: Failed to init ath6kl core: -110 [ 709.189190][ T5877] ath6kl_usb 8-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 711.082809][T12300] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1604'. [ 711.561629][ T5826] usb 8-1: USB disconnect, device number 32 [ 712.576587][T12316] gretap0: entered promiscuous mode [ 712.582062][T12316] vlan2: entered promiscuous mode [ 712.621742][T12316] gretap0: left promiscuous mode [ 714.908702][ T5908] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 715.566075][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.620892][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 715.680745][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 716.653233][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 716.664463][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.677383][ T5908] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.686562][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.963599][ T5908] usb 5-1: config 0 descriptor?? [ 716.981220][T12336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 717.485883][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.506873][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.537460][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 717.553517][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 717.683618][T12350] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1620'. [ 717.722389][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.764905][ T9] usb 3-1: config 0 descriptor?? [ 717.834571][T12359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.036430][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1622'. [ 718.209580][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 718.218159][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 718.263599][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.289072][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.513125][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 718.522661][ T5915] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 718.558558][T12368] ipvlan2: entered promiscuous mode [ 718.563618][ T5908] usb 5-1: can't set config #0, error -71 [ 718.570957][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 718.586943][ T5908] usb 5-1: USB disconnect, device number 12 [ 718.599254][T12368] bridge0: port 3(ipvlan2) entered blocking state [ 718.681757][T12368] bridge0: port 3(ipvlan2) entered disabled state [ 718.694455][T12368] ipvlan2: entered allmulticast mode [ 718.700674][T12368] bridge0: entered allmulticast mode [ 718.707647][T12368] ipvlan2: left allmulticast mode [ 718.714117][T12368] bridge0: left allmulticast mode [ 718.784827][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 718.808439][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.835507][ T5915] usb 8-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 718.855822][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.883409][ T5915] usb 8-1: config 0 descriptor?? [ 718.951309][T10855] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 718.953600][ T5826] usb 3-1: USB disconnect, device number 18 [ 719.067746][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 719.707165][T12377] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1626'. [ 719.804955][ T5915] usb 8-1: string descriptor 0 read error: -71 [ 719.815852][ T5915] usbhid 8-1:0.0: can't add hid device: -71 [ 719.822119][T12381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.825445][ T5915] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 719.838875][ T5915] usb 8-1: USB disconnect, device number 33 [ 720.073695][T10855] usb 10-1: device descriptor read/64, error -71 [ 721.060650][T10855] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 721.440418][T10855] usb 10-1: device descriptor read/64, error -71 [ 721.567113][T10855] usb usb10-port1: attempt power cycle [ 721.826556][T12395] tipc: Started in network mode [ 721.831929][T12395] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 721.895915][T12395] tipc: Enabled bearer , priority 10 [ 722.656217][T12405] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 723.279210][ T9642] tipc: Node number set to 4269801491 [ 725.795004][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 725.804768][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1634'. [ 728.750460][T12410] FAULT_INJECTION: forcing a failure. [ 728.750460][T12410] name failslab, interval 1, probability 0, space 0, times 0 [ 728.763857][T12410] CPU: 1 UID: 0 PID: 12410 Comm: syz.4.1636 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 728.774672][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 728.784775][T12410] Call Trace: [ 728.788088][T12410] [ 728.791052][T12410] dump_stack_lvl+0x241/0x360 [ 728.795801][T12410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.801047][T12410] ? __pfx__printk+0x10/0x10 [ 728.805683][T12410] ? __kmalloc_noprof+0xb5/0x4c0 [ 728.810662][T12410] ? __pfx___might_resched+0x10/0x10 [ 728.815998][T12410] ? __mutex_lock+0x37f/0xee0 [ 728.820729][T12410] should_fail_ex+0x3b0/0x4e0 [ 728.825456][T12410] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 728.831300][T12410] should_failslab+0xac/0x100 [ 728.836006][T12410] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 728.841825][T12410] __kmalloc_noprof+0xdd/0x4c0 [ 728.846602][T12410] ? tracepoint_add_func+0x34c/0xaa0 [ 728.851903][T12410] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 728.857719][T12410] tracepoint_add_func+0x34c/0xaa0 [ 728.862848][T12410] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 728.868670][T12410] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 728.875620][T12410] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 728.883091][T12410] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 728.888909][T12410] ? anon_inode_getfile+0xff/0x180 [ 728.894041][T12410] ? bpf_probe_register+0x134/0x1f0 [ 728.899258][T12410] bpf_raw_tp_link_attach+0x4a3/0x700 [ 728.904647][T12410] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 728.910566][T12410] ? __fget_files+0x2a/0x410 [ 728.915165][T12410] ? fput+0x21b/0x290 [ 728.919161][T12410] bpf_raw_tracepoint_open+0x177/0x1f0 [ 728.924641][T12410] __sys_bpf+0x3c0/0x810 [ 728.928897][T12410] ? __pfx___sys_bpf+0x10/0x10 [ 728.933681][T12410] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 728.939677][T12410] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 728.946016][T12410] ? do_syscall_64+0x100/0x230 [ 728.950804][T12410] __x64_sys_bpf+0x7c/0x90 [ 728.955242][T12410] do_syscall_64+0xf3/0x230 [ 728.959765][T12410] ? clear_bhb_loop+0x35/0x90 [ 728.964455][T12410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.970370][T12410] RIP: 0033:0x7fc7a9f85d29 [ 728.974797][T12410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.994413][T12410] RSP: 002b:00007fc7aadac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 729.002841][T12410] RAX: ffffffffffffffda RBX: 00007fc7aa175fa0 RCX: 00007fc7a9f85d29 [ 729.010824][T12410] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 729.018814][T12410] RBP: 00007fc7aadac090 R08: 0000000000000000 R09: 0000000000000000 [ 729.026814][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.034825][T12410] R13: 0000000000000000 R14: 00007fc7aa175fa0 R15: 00007fffd083fac8 [ 729.042824][T12410] [ 730.316279][T12415] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.408744][T12432] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1643'. [ 730.416867][T12434] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1644'. [ 730.423947][T12432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.502763][T12415] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.540489][ T5908] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 730.552276][T12436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.650003][T12415] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.791825][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 730.822177][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.852336][T12415] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.880735][ T5908] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 730.911010][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.930578][ T5908] usb 5-1: Product: syz [ 730.937680][ T5908] usb 5-1: Manufacturer: syz [ 730.955867][ T5908] usb 5-1: SerialNumber: syz [ 731.550601][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'. [ 731.559633][T12448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1647'. [ 731.961704][ T5908] usb 5-1: config 0 descriptor?? [ 733.546436][T12415] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.782844][ T5908] usb 5-1: can't set config #0, error -71 [ 733.789647][ T5908] usb 5-1: USB disconnect, device number 13 [ 733.855615][T12415] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.891149][T12415] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.960069][T12415] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.086512][T12458] Invalid logical block size (16777216) [ 734.120611][ T9642] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 734.292291][ T9642] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.304168][ T9642] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 734.334127][ T9642] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.349048][ T9642] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 734.362982][ T9642] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 734.372519][ T9642] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.388115][ T9642] usb 10-1: config 0 descriptor?? [ 734.396230][T12446] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 734.506121][T12467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.313918][T12472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.447674][ T9642] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 735.457364][ T9642] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 735.473648][ T9642] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 735.646978][T12480] sctp: [Deprecated]: syz.6.1658 (pid 12480) Use of int in maxseg socket option. [ 735.646978][T12480] Use struct sctp_assoc_value instead [ 736.570498][ T5908] usb 10-1: USB disconnect, device number 21 [ 736.821781][T12486] Cache volume key already in use (9p,(null),) [ 737.293802][T12493] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1663'. [ 737.707760][ T5908] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 737.716331][ T29] audit: type=1800 audit(1736223278.055:335): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1664" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 737.862119][ T5908] usb 8-1: config 9 has no interfaces? [ 737.892547][ T5908] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 737.911189][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.939190][ T5908] usb 8-1: Product: syz [ 737.949367][ T5908] usb 8-1: Manufacturer: syz [ 737.959507][ T5908] usb 8-1: SerialNumber: syz [ 738.024135][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1660'. [ 738.046243][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1660'. [ 738.066527][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1660'. [ 738.117485][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1660'. [ 738.185002][ T5908] usb 8-1: USB disconnect, device number 34 [ 739.210572][ T9572] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 739.364658][ T9572] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.375978][ T9572] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.452652][ T9572] usb 8-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 739.474066][ T9572] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.490165][ T9572] usb 8-1: config 0 descriptor?? [ 740.244001][ T9572] wacom 0003:056A:0028.0012: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 740.266790][ T9572] wacom 0003:056A:0028.0012: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.7-1/input0 [ 740.296809][ T9572] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0028.0012/input/input13 [ 740.490704][ T9572] usb 8-1: USB disconnect, device number 35 [ 740.610800][ T5908] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 740.784452][ T5908] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 740.826621][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.857040][ T5908] usb 10-1: Product: syz [ 740.870603][ T5908] usb 10-1: Manufacturer: syz [ 740.896550][ T5908] usb 10-1: SerialNumber: syz [ 740.925933][ T5908] usb 10-1: config 0 descriptor?? [ 741.259918][ T5908] hso 10-1:0.0: Failed to find BULK IN ep [ 741.284994][ T5908] usb-storage 10-1:0.0: USB Mass Storage device detected [ 742.854793][T12537] Cache volume key already in use (9p,(null),) [ 742.980691][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 743.105003][T12545] tmpfs: Bad value for 'nr_inodes' [ 743.152777][T12545] overlayfs: missing 'lowerdir' [ 743.187830][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 743.220126][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 743.220168][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 743.220199][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 743.220246][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 743.220274][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.226058][ T9] usb 5-1: config 0 descriptor?? [ 743.271335][T12549] binder: 12547:12549 ioctl c0306201 200001c0 returned -14 [ 743.367090][T12535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.708872][T12555] unknown channel width for channel at 909000KHz? [ 743.905009][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 743.930511][ T9] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 744.166121][ T9] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 744.580639][ T5908] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 744.730717][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 744.740733][ T5908] usb 8-1: Using ep0 maxpacket: 16 [ 744.758711][ T5908] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 744.779527][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 745.047888][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1685'. [ 745.291449][ T5915] usb 5-1: USB disconnect, device number 14 [ 745.320841][ T5908] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 745.329967][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.350463][ T5908] usb 8-1: Product: syz [ 745.354725][ T5908] usb 8-1: Manufacturer: syz [ 745.359377][ T5908] usb 8-1: SerialNumber: syz [ 745.372804][ T5908] usb 8-1: config 0 descriptor?? [ 745.382989][ T5908] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 745.400662][ T5908] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 745.410860][ T9] usb 3-1: config 0 has an invalid interface number: 204 but max is 1 [ 745.419094][ T9] usb 3-1: config 0 has no interface number 1 [ 745.430562][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 745.453529][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.480639][ T9] usb 3-1: Product: syz [ 745.484941][ T9] usb 3-1: Manufacturer: syz [ 745.489610][ T9] usb 3-1: SerialNumber: syz [ 745.526148][ T9] usb 3-1: config 0 descriptor?? [ 745.603416][ T9] snd-usb-audio 3-1:0.204: probe with driver snd-usb-audio failed with error -22 [ 745.699729][T12584] Cache volume key already in use (9p,(null),) [ 745.761674][ T9] usb 3-1: USB disconnect, device number 19 [ 746.275282][ T5908] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 746.490864][ T5908] em28xx 8-1:0.0: Config register raw data: 0x56 [ 746.625785][ T5908] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 746.650161][ T5908] em28xx 8-1:0.0: No AC97 audio processor [ 746.795457][T12599] unknown channel width for channel at 909000KHz? [ 747.081390][T12602] FAULT_INJECTION: forcing a failure. [ 747.081390][T12602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.267931][T12602] CPU: 0 UID: 0 PID: 12602 Comm: syz.2.1694 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 747.278797][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 747.288900][T12602] Call Trace: [ 747.292229][T12602] [ 747.295200][T12602] dump_stack_lvl+0x241/0x360 [ 747.299953][T12602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.305223][T12602] ? __pfx__printk+0x10/0x10 [ 747.310025][T12602] ? __pfx_lock_release+0x10/0x10 [ 747.315110][T12602] ? __import_iovec+0x590/0x870 [ 747.320118][T12602] should_fail_ex+0x3b0/0x4e0 [ 747.324863][T12602] _copy_from_user+0x2f/0xc0 [ 747.329534][T12602] ____sys_sendmsg+0x2ef/0x7e0 [ 747.334380][T12602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.339719][T12602] ? __fget_files+0x2a/0x410 [ 747.344362][T12602] ? __fget_files+0x2a/0x410 [ 747.349020][T12602] __sys_sendmmsg+0x36a/0x720 [ 747.353769][T12602] ? __pfx___sys_sendmmsg+0x10/0x10 [ 747.359039][T12602] ? __pfx_lock_release+0x10/0x10 [ 747.364189][T12602] ? kstrtouint_from_user+0x128/0x190 [ 747.369613][T12602] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 747.375537][T12602] ? ksys_write+0x22a/0x2b0 [ 747.380759][T12602] ? __pfx_lock_release+0x10/0x10 [ 747.385804][T12602] ? vfs_write+0x730/0xd30 [ 747.390244][T12602] ? __mutex_unlock_slowpath+0x21e/0x790 [ 747.396007][T12602] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.402008][T12602] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.408376][T12602] ? do_syscall_64+0x100/0x230 [ 747.413189][T12602] __x64_sys_sendmmsg+0xa0/0xb0 [ 747.418059][T12602] do_syscall_64+0xf3/0x230 [ 747.422589][T12602] ? clear_bhb_loop+0x35/0x90 [ 747.427287][T12602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.433288][T12602] RIP: 0033:0x7fbbe0f85d29 [ 747.437724][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.457370][T12602] RSP: 002b:00007fbbe1ddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 747.465850][T12602] RAX: ffffffffffffffda RBX: 00007fbbe1175fa0 RCX: 00007fbbe0f85d29 [ 747.473866][T12602] RDX: 0000000000000001 RSI: 0000000020000800 RDI: 0000000000000003 [ 747.481937][T12602] RBP: 00007fbbe1ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 747.489920][T12602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.497912][T12602] R13: 0000000000000000 R14: 00007fbbe1175fa0 R15: 00007fff771db3a8 [ 747.505925][T12602] [ 747.671083][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.776578][ T5915] usb 8-1: USB disconnect, device number 36 [ 747.784658][ T5915] em28xx 8-1:0.0: Disconnecting em28xx [ 747.806815][ T5915] em28xx 8-1:0.0: Freeing device [ 747.877282][ T29] audit: type=1326 audit(1736223288.225:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12607 comm="syz.2.1697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbe0f85d29 code=0x0 [ 748.193758][T12613] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1699'. [ 748.442428][ T9] usb 10-1: USB disconnect, device number 22 [ 748.540048][T12620] Cache volume key already in use (9p,(null),) [ 749.501423][T12631] netlink: 'syz.7.1704': attribute type 15 has an invalid length. [ 749.528241][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1704'. [ 749.537847][T12632] unknown channel width for channel at 909000KHz? [ 749.549042][T12631] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1704'. [ 751.010517][ T5908] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 751.297386][ T9642] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 751.583673][ T9642] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 751.645934][ T9642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.260011][ T9642] usb 8-1: config 0 descriptor?? [ 752.275836][ T9642] usb 8-1: can't set config #0, error -71 [ 752.320546][ T9642] usb 8-1: USB disconnect, device number 37 [ 753.010936][ T5908] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 753.018675][ T5908] usb 10-1: can't read configurations, error -71 [ 753.439117][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 753.448500][T12669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1713'. [ 754.090707][T12669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 754.097375][T12669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 754.103730][T12669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 754.110661][T12669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 754.116774][T12669] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 754.123038][T12669] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 754.129204][T12669] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 754.135224][T12669] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 754.161355][T12664] Cache volume key already in use (9p,(null),) [ 754.205884][T12669] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 754.421537][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1715'. [ 754.430646][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1715'. [ 754.484785][T12669] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 754.492251][T12669] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 754.556078][T12677] unknown channel width for channel at 909000KHz? [ 754.662431][T12669] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 756.565216][ T5835] Bluetooth: hci7: command 0x0c1a tx timeout [ 756.586957][ T5835] Bluetooth: hci5: command 0x041b tx timeout [ 756.598111][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 756.603840][T11876] Bluetooth: hci3: command 0x0c1a tx timeout [ 756.605684][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 756.613999][T11876] Bluetooth: hci2: command 0x0406 tx timeout [ 756.617616][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 756.624026][T11876] Bluetooth: hci8: command 0x0c1a tx timeout [ 758.632321][T10812] Bluetooth: hci7: command 0x0c1a tx timeout [ 758.700781][ T9642] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 758.720613][T10812] Bluetooth: hci8: command 0x0c1a tx timeout [ 758.787590][T12716] Cache volume key already in use (9p,(null),) [ 758.868523][ T9642] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.880530][T10855] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 758.916522][ T9642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 758.966704][ T9642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 759.012810][ T9642] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 759.053576][T10855] usb 7-1: Using ep0 maxpacket: 32 [ 759.079675][ T9642] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.090489][ T9642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.171558][ T9642] usb 3-1: config 0 descriptor?? [ 759.176816][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.188271][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.198793][T12710] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 759.206327][T10855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 759.219588][T10855] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 759.229387][T10855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.291558][T10855] usb 7-1: config 0 descriptor?? [ 759.660211][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 759.669385][T12725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1729'. [ 760.680833][T12725] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 760.687206][T12725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 760.693552][T12725] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 760.699696][T12725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 760.705929][T12725] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 760.712424][T12725] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 760.718551][T12725] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 760.724936][T12725] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 760.917674][ T9642] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 760.926023][ T9642] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 761.477063][T12711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.510931][T12711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.528426][ T9642] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 761.567707][T10855] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0015/input/input16 [ 761.748163][T10855] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0015/input/input17 [ 761.869869][T10855] kye 0003:0458:5011.0015: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 763.124405][T11876] Bluetooth: hci6: command 0x0405 tx timeout [ 763.130803][T11876] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.137103][T11876] Bluetooth: hci4: command 0x0406 tx timeout [ 763.145905][T11876] Bluetooth: hci2: command 0x0406 tx timeout [ 763.152567][T11876] Bluetooth: hci1: command 0x0406 tx timeout [ 763.153287][T10812] Bluetooth: hci8: command 0x0c1a tx timeout [ 763.159067][T11876] Bluetooth: hci7: command 0x0c1a tx timeout [ 763.165142][T10812] Bluetooth: hci5: command 0x041b tx timeout [ 763.190449][ T9] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 763.230457][ T9572] usb 7-1: reset high-speed USB device number 29 using dummy_hcd [ 763.770690][ T9572] usb 7-1: device descriptor read/64, error -32 [ 765.271599][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1738'. [ 765.280728][T12761] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1738'. [ 766.132538][ T5908] usb 3-1: USB disconnect, device number 20 [ 766.146229][ T5826] usb 7-1: USB disconnect, device number 29 [ 766.511018][T12761] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 766.517217][T12761] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 766.523740][T12761] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 766.530060][T12761] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 766.534702][T12767] Cache volume key already in use (9p,(null),) [ 766.536269][T12761] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 766.548390][T12761] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 766.554830][T12761] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 766.561504][T12761] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 767.802764][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1742'. [ 767.812390][T12778] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1742'. [ 768.473715][T12778] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 768.482234][T12778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 768.488703][T12778] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 768.495240][T12778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 768.501598][T12778] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 768.507848][T12778] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 768.514735][T12778] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 768.521203][T12778] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 769.861986][T12796] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1746'. [ 770.422802][ T8] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 770.550494][T10812] Bluetooth: hci8: command 0x0c1a tx timeout [ 770.550618][ T5835] Bluetooth: hci7: command 0x0c1a tx timeout [ 770.556906][T11876] Bluetooth: hci5: command 0x041b tx timeout [ 770.569341][T11876] Bluetooth: hci6: command 0x0405 tx timeout [ 770.576126][T11876] Bluetooth: hci3: command 0x0c1a tx timeout [ 770.582469][T11876] Bluetooth: hci4: command 0x0406 tx timeout [ 770.588748][T11876] Bluetooth: hci2: command 0x0406 tx timeout [ 770.595834][T11876] Bluetooth: hci1: command 0x0406 tx timeout [ 770.962448][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 770.974876][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 770.985375][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 770.994768][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.010775][T12795] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 771.023239][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 771.350714][T10855] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 771.528117][T10855] usb 7-1: Using ep0 maxpacket: 32 [ 771.547509][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.566685][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.620551][T10855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 771.651379][T10855] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 771.662306][T10855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.838001][T10855] usb 7-1: config 0 descriptor?? [ 771.953982][ T5826] usb 8-1: USB disconnect, device number 38 [ 772.278861][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 772.545908][T10855] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0016/input/input18 [ 772.569198][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 772.626547][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 772.659582][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 772.678879][T10855] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0016/input/input19 [ 772.685740][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 772.719124][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.746370][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.923920][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.026488][T12827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.042102][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.537073][T10855] kye 0003:0458:5011.0016: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 773.542287][ T8] usb 5-1: config 0 descriptor?? [ 773.770888][ T9642] usb 7-1: reset high-speed USB device number 30 using dummy_hcd [ 774.545909][ T8] usb 5-1: can't set config #0, error -71 [ 774.608434][ T8] usb 5-1: USB disconnect, device number 15 [ 775.255674][T12853] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1761'. [ 775.546516][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 775.557687][T12855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1758'. [ 776.264389][T12855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 776.272612][T12855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 776.279454][T12855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 776.288049][T12855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 776.296821][T12855] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 776.304850][T12855] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 776.311811][T12855] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 776.319966][T12855] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 776.497748][ T5826] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 777.053851][ T5826] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 777.136646][ T5826] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 777.139660][T10855] usb 7-1: USB disconnect, device number 30 [ 777.193335][ T5826] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 777.328619][T12860] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1765'. [ 777.340960][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1765'. [ 777.360745][ T5826] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.381892][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.391664][ T5826] usb 8-1: Product: syz [ 777.396595][ T5826] usb 8-1: Manufacturer: syz [ 778.351341][ T5826] usb 8-1: SerialNumber: syz [ 778.430474][ T5826] usb 8-1: can't set config #1, error -71 [ 778.442316][ T5826] usb 8-1: USB disconnect, device number 39 [ 779.084732][T12857] Bluetooth: hci1: command 0x0406 tx timeout [ 779.093694][T12857] Bluetooth: hci2: command 0x0406 tx timeout [ 779.103754][T12857] Bluetooth: hci4: command 0x0406 tx timeout [ 779.118307][T12857] Bluetooth: hci8: command 0x0c1a tx timeout [ 779.126493][T12857] Bluetooth: hci7: command 0x0c1a tx timeout [ 779.133514][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 779.134628][T12857] Bluetooth: hci6: command 0x0405 tx timeout [ 779.143544][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 779.948064][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1765'. [ 780.188720][T12884] netlink: 'syz.9.1770': attribute type 1 has an invalid length. [ 780.210800][T12884] netlink: 134728 bytes leftover after parsing attributes in process `syz.9.1770'. [ 782.917850][ T5915] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 783.503420][ T5915] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 783.639384][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.690465][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 783.720439][ T5915] usb 3-1: config 1 has no interface number 0 [ 783.728813][ T5915] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 783.763733][ T5915] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.804247][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.830606][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.851057][ T5915] usb 3-1: Product: syz [ 783.861554][ T5915] usb 3-1: Manufacturer: syz [ 783.867178][ T5915] usb 3-1: SerialNumber: syz [ 783.941673][ T5915] cdc_wdm 3-1:1.128: skipping garbage [ 783.966712][ T5915] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 783.983447][ T5915] cdc_wdm 3-1:1.128: Unknown control protocol [ 784.147959][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.181141][T10855] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 784.200809][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.214632][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.240983][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.260534][ T9642] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 784.260890][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.280776][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.322489][ T5915] usb 3-1: USB disconnect, device number 21 [ 784.392309][T10855] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 784.431221][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 784.448301][ T9642] usb 8-1: Using ep0 maxpacket: 8 [ 784.461011][ T9642] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 784.478369][T10855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 784.503605][ T9642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.533276][T10855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 784.563018][ T9642] usb 8-1: config 0 descriptor?? [ 784.596644][T10855] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 784.633584][T10855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.650124][T10855] usb 7-1: config 0 descriptor?? [ 784.711383][T12903] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 785.433226][T12926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1779'. [ 785.482312][T10855] usbhid 7-1:0.0: can't add hid device: -71 [ 785.489968][T10855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 785.520844][T10855] usb 7-1: USB disconnect, device number 31 [ 785.554959][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1779'. [ 785.624279][T12926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1779'. [ 785.704415][T12926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1779'. [ 787.121869][T12946] tipc: Started in network mode [ 787.126952][T12946] tipc: Node identity , cluster identity 4711 [ 787.138267][T12946] tipc: Failed to obtain node identity [ 787.151361][T12946] tipc: Enabling of bearer rejected, failed to enable media [ 787.316057][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1787'. [ 787.353289][T12952] erspan0: left allmulticast mode [ 787.374232][T12952] erspan0: left promiscuous mode [ 787.410908][T12952] bridge0: port 3(erspan0) entered disabled state [ 787.485709][T12952] bridge_slave_1: left allmulticast mode [ 787.508298][T12952] bridge_slave_1: left promiscuous mode [ 787.522815][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.535303][T12952] bridge_slave_0: left allmulticast mode [ 787.541353][T12952] bridge_slave_0: left promiscuous mode [ 787.547915][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.751865][ T972] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 787.950877][ T972] usb 5-1: Invalid ep0 maxpacket: 16 [ 788.425185][ T9642] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 788.437291][ T9642] asix 8-1:0.0: probe with driver asix failed with error -71 [ 788.453077][ T9642] usb 8-1: USB disconnect, device number 40 [ 788.534388][T12943] input: syz0 as /devices/virtual/input/input20 [ 788.580448][ T972] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 788.595655][T12943] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.808159][ T972] usb 5-1: Invalid ep0 maxpacket: 16 [ 789.184637][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1790'. [ 789.194700][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1790'. [ 789.791374][ T8] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 789.850950][ T972] usb usb5-port1: attempt power cycle [ 789.872305][T12973] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 789.879753][T12973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 789.886586][T12973] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 789.893467][T12973] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.900273][T12973] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 789.907599][T12973] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 789.915146][T12973] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 789.922586][T12973] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 790.110594][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 790.121489][ T8] usb 8-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 790.132591][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.155001][ T8] usb 8-1: config 0 descriptor?? [ 790.164073][ T8] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 790.170959][ T8] gspca_mr97310a: reg write [21] error -22 [ 790.177118][ T8] mr97310a 8-1:0.0: probe with driver mr97310a failed with error -22 [ 791.420000][ T8] usb 8-1: USB disconnect, device number 41 [ 791.911407][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 791.923112][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 791.931100][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 791.954985][T10812] Bluetooth: hci6: command 0x0405 tx timeout [ 792.012060][T10812] Bluetooth: hci8: command 0x0c1a tx timeout [ 792.211540][ T5835] Bluetooth: hci7: command 0x0c1a tx timeout [ 792.213633][T12857] Bluetooth: hci3: command 0x0c1a tx timeout [ 792.227400][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 792.271770][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 792.789102][T13001] Cache volume key already in use (9p,(null),) [ 797.044411][T13020] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 797.056850][T13020] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 797.871763][ T5908] usb 3-1: device descriptor read/all, error -110 [ 798.402543][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1803'. [ 798.412788][T13025] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1803'. [ 799.936950][T13025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 799.945864][T13025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 799.956103][T13025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 799.964330][T13025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 799.972010][T13025] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 799.980819][T13025] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 799.988488][T13025] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 799.999488][T13025] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 800.926039][T13041] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1806'. [ 800.963226][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'. [ 802.807118][T12857] Bluetooth: hci6: command 0x0405 tx timeout [ 802.822810][T12857] Bluetooth: hci3: command 0x0c1a tx timeout [ 802.831591][T12857] Bluetooth: hci4: command 0x0406 tx timeout [ 803.686421][T11876] Bluetooth: hci2: command 0x0406 tx timeout [ 803.693734][T11876] Bluetooth: hci1: command 0x0406 tx timeout [ 803.700895][T11876] Bluetooth: hci8: command 0x0c1a tx timeout [ 803.707410][T11876] Bluetooth: hci7: command 0x0c1a tx timeout [ 803.713955][T11876] Bluetooth: hci5: command 0x041b tx timeout [ 804.331835][T13055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.599716][ T29] audit: type=1326 audit(1736223344.945:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13060 comm="syz.9.1817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9c2985d29 code=0x0 [ 805.495370][T13070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.033627][T13072] program syz.9.1817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.050677][T13078] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1819'. [ 808.153634][T13078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.686538][ T8] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 808.821397][T13085] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 809.087237][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.745361][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 809.758660][T13091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1821'. [ 809.798800][ T8] usb 8-1: device not accepting address 42, error -71 [ 809.910056][T13093] trusted_key: syz.9.1822 sent an empty control message without MSG_MORE. [ 809.947539][T13091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 809.954545][T13091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 809.962808][T13091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 809.970191][T13091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 809.976825][T13091] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 809.986056][T13091] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 809.994452][T13091] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 810.002176][T13091] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 810.356310][ T8] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 810.602563][ T8] usb 8-1: config index 0 descriptor too short (expected 106, got 36) [ 810.612554][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.688667][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.671336][ T8] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 811.682397][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.701894][ T8] usb 8-1: config 0 descriptor?? [ 811.900901][T13109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.999260][T12997] Bluetooth: hci1: command 0x0406 tx timeout [ 812.201764][T12997] Bluetooth: hci8: command 0x0c1a tx timeout [ 812.209098][T12997] Bluetooth: hci7: command 0x0c1a tx timeout [ 812.217310][T12997] Bluetooth: hci5: command 0x041b tx timeout [ 812.226252][T12997] Bluetooth: hci6: command 0x0405 tx timeout [ 812.234135][T12997] Bluetooth: hci3: command 0x0c1a tx timeout [ 812.242607][T12997] Bluetooth: hci4: command 0x0406 tx timeout [ 812.251516][T12997] Bluetooth: hci2: command 0x0406 tx timeout [ 812.502513][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.540877][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.591059][ T3471] tipc: Subscription rejected, illegal request [ 812.863814][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 812.876725][ T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 812.907587][ T8] usb 8-1: USB disconnect, device number 43 [ 813.760823][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 814.790950][ T30] INFO: task syz.1.1506:11914 blocked for more than 143 seconds. [ 814.807653][ T30] Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 814.819555][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 814.830798][ T972] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 814.857130][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.871665][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 814.897837][ T30] task:syz.1.1506 state:D stack:26240 pid:11914 tgid:11913 ppid:11407 flags:0x00004004 [ 814.912286][T13135] netlink: 'syz.7.1835': attribute type 10 has an invalid length. [ 814.923114][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 814.959667][ T30] Call Trace: [ 814.966505][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 814.967550][ T30] [ 814.983900][ T30] __schedule+0x17fb/0x4be0 [ 814.989710][ T30] ? __pfx___schedule+0x10/0x10 [ 814.995505][ T30] ? __pfx_lock_release+0x10/0x10 [ 815.012663][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 815.013743][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.041498][ T972] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 815.065546][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 815.075324][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.091045][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 815.113100][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 815.142698][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 815.155307][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.160225][ T30] ? schedule+0x90/0x320 [ 815.174142][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 815.186202][ T8] usb 5-1: Product: syz [ 815.190476][ T30] schedule+0x14b/0x320 [ 815.207331][ T30] ? down_read+0x6a5/0xa40 [ 815.213357][ T9642] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 815.216904][ T8] usb 5-1: Manufacturer: syz [ 815.223734][ T30] schedule_preempt_disabled+0x13/0x30 [ 815.235163][ T972] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 815.247183][ T30] down_read+0x705/0xa40 [ 815.253888][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.267503][ T30] ? __pfx_down_read+0x10/0x10 [ 815.278468][ T30] super_lock+0x27c/0x400 [ 815.281989][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 815.291222][ T30] ? __pfx_lock_release+0x10/0x10 [ 815.300517][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 815.301571][ T972] usb 3-1: config 0 descriptor?? [ 815.317379][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 815.320475][ T30] ? __pfx_super_lock+0x10/0x10 [ 815.332666][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 815.337550][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 815.346292][T13132] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 815.352607][ T30] iterate_supers+0x8c/0x190 [ 815.383151][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 815.390193][ T30] __se_sys_quotactl+0x38e/0xa30 [ 815.398609][ T30] ? __pfx___se_sys_quotactl+0x10/0x10 [ 815.405950][ T30] ? do_syscall_64+0x100/0x230 [ 815.407135][ T9642] usb 8-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 2.f0 [ 815.412988][ T30] ? do_syscall_64+0xb6/0x230 [ 815.431824][ T30] do_syscall_64+0xf3/0x230 [ 815.437191][ T30] ? clear_bhb_loop+0x35/0x90 [ 815.447988][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.455060][ T30] RIP: 0033:0x7fde6e785d29 [ 815.460738][ T30] RSP: 002b:00007fde6f592038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 815.468278][ T9642] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.500394][ T30] RAX: ffffffffffffffda RBX: 00007fde6e975fa0 RCX: 00007fde6e785d29 [ 815.508180][ T9642] usb 8-1: Product: syz [ 815.527415][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 815.539833][ T9642] usb 8-1: Manufacturer: syz [ 815.541148][ T30] RBP: 00007fde6e801b08 R08: 0000000000000000 R09: 0000000000000000 [ 815.567972][ T9642] usb 8-1: SerialNumber: syz [ 815.599281][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.601064][ T9642] usb 8-1: config 0 descriptor?? [ 815.628341][ T9642] usb 8-1: bad CDC descriptors [ 815.638621][ T9642] pcwd_usb: The device isn't a Human Interface Device [ 815.640667][ T30] R13: 0000000000000000 R14: 00007fde6e975fa0 R15: 00007ffc8c05a6f8 [ 815.693637][ T5915] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 815.695742][ T30] [ 815.723049][ T30] INFO: task syz.0.1507:11920 blocked for more than 144 seconds. [ 815.739659][T13139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 815.759815][T13135] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.775797][ T30] Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 815.775827][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 815.775842][ T30] task:syz.0.1507 state:D stack:26240 pid:11920 tgid:11917 ppid:5839 flags:0x00004004 [ 815.775913][ T30] Call Trace: [ 815.775924][ T30] [ 815.775940][ T30] __schedule+0x17fb/0x4be0 [ 815.776008][ T30] ? __pfx___schedule+0x10/0x10 [ 815.776045][ T30] ? __pfx_lock_release+0x10/0x10 [ 815.776076][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.776109][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 815.776137][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 815.776175][ T30] ? schedule+0x90/0x320 [ 815.776206][ T30] schedule+0x14b/0x320 [ 815.776241][ T30] ? down_read+0x6a5/0xa40 [ 815.776265][ T30] schedule_preempt_disabled+0x13/0x30 [ 815.776299][ T30] down_read+0x705/0xa40 [ 815.776334][ T30] ? __pfx_down_read+0x10/0x10 [ 815.776380][ T30] super_lock+0x27c/0x400 [ 815.776413][ T30] ? __pfx_lock_release+0x10/0x10 [ 815.776441][ T30] ? __pfx_super_lock+0x10/0x10 [ 815.776478][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 815.776527][ T30] iterate_supers+0x8c/0x190 [ 815.946607][ T972] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 815.983767][ T972] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 815.985878][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 815.995849][T13135] bond0: (slave team0): Enslaving as an active interface with an up link [ 816.000509][ T30] __se_sys_quotactl+0x38e/0xa30 [ 816.000565][ T30] ? __pfx___se_sys_quotactl+0x10/0x10 [ 816.000601][ T30] ? do_syscall_64+0x100/0x230 [ 816.000653][ T30] ? do_syscall_64+0xb6/0x230 [ 816.000694][ T30] do_syscall_64+0xf3/0x230 [ 816.000729][ T30] ? clear_bhb_loop+0x35/0x90 [ 816.000757][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.000804][ T30] RIP: 0033:0x7f72e2b85d29 [ 816.000828][ T30] RSP: 002b:00007f72e3902038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 816.000861][ T30] RAX: ffffffffffffffda RBX: 00007f72e2d75fa0 RCX: 00007f72e2b85d29 [ 816.000884][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 816.000903][ T30] RBP: 00007f72e2c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 816.000922][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.000941][ T30] R13: 0000000000000000 R14: 00007f72e2d75fa0 R15: 00007ffe995f7788 [ 816.000980][ T30] [ 816.001033][ T30] [ 816.001033][ T30] Showing all locks held in the system: [ 816.001053][ T30] 1 lock held by khungtaskd/30: [ 816.001071][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 816.001169][ T30] 6 locks held by kworker/1:2/972: [ 816.001192][ T30] 2 locks held by kworker/u8:6/1158: [ 816.001236][ T30] 2 locks held by getty/5587: [ 816.001252][ T30] #0: ffff888035d7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 816.001334][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 816.001410][ T30] 1 lock held by syz-executor/5834: [ 816.001428][ T30] #0: ffff88807ef8a0e0 (&type->s_umount_key#87){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 816.001514][ T30] 5 locks held by kworker/1:6/5915: [ 816.001647][ T30] #0: ffff888021aaa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 816.001736][ T30] #1: ffffc9000421fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 816.001819][ T30] #2: [ 816.046957][ T972] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 816.060808][ T8] usb 8-1: USB disconnect, device number 44 [ 816.160443][ T30] ffff888028b2b190 [ 816.286944][ T9] usb 5-1: USB disconnect, device number 19 [ 816.294655][ T30] (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 816.326799][ T30] #3: ffff888028ba6510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 816.347248][ T30] #4: ffff8880285ba668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 816.361503][ T30] 1 lock held by syz.1.1506/11914: [ 816.373046][ T30] #0: ffff88807ef8a0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 816.388153][ T30] 1 lock held by syz.0.1507/11920: [ 816.400824][ T30] #0: ffff88807ef8a0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 816.414521][ T30] 3 locks held by syz.6.1834/13128: [ 816.421597][ T30] #0: ffff88807b84d608 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 816.433702][ T30] #1: ffff8881432d9a58 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_release+0x54/0x2b0 [ 816.445856][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 816.466589][ T30] 2 locks held by syz.7.1835/13134: [ 816.473503][ T30] #0: ffff88807b95be08 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 816.488700][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 816.503821][ T30] [ 816.507223][ T30] ============================================= [ 816.507223][ T30] [ 816.524612][ T30] NMI backtrace for cpu 1 [ 816.530686][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 816.544488][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 816.556979][ T30] Call Trace: [ 816.563609][ T30] [ 816.566747][ T30] dump_stack_lvl+0x241/0x360 [ 816.571519][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.578395][ T30] ? __pfx__printk+0x10/0x10 [ 816.586186][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 816.594601][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 816.601906][ T30] ? _printk+0xd5/0x120 [ 816.609359][ T30] ? __pfx__printk+0x10/0x10 [ 816.614834][ T30] ? __wake_up_klogd+0xcc/0x110 [ 816.620359][ T30] ? __pfx__printk+0x10/0x10 [ 816.625974][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 816.633000][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 816.642660][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 816.651585][ T30] watchdog+0xff6/0x1040 [ 816.658106][ T30] ? watchdog+0x1ea/0x1040 [ 816.663678][ T30] ? __pfx_watchdog+0x10/0x10 [ 816.668754][ T30] kthread+0x2f0/0x390 [ 816.673353][ T30] ? __pfx_watchdog+0x10/0x10 [ 816.682995][ T30] ? __pfx_kthread+0x10/0x10 [ 816.689551][ T30] ret_from_fork+0x4b/0x80 [ 816.695259][ T30] ? __pfx_kthread+0x10/0x10 [ 816.701308][ T30] ret_from_fork_asm+0x1a/0x30 [ 816.707472][ T30] [ 816.711477][ T30] Sending NMI from CPU 1 to CPUs 0: [ 816.718004][ C0] NMI backtrace for cpu 0 [ 816.718023][ C0] CPU: 0 UID: 0 PID: 3592 Comm: kworker/u8:11 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 816.718048][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 816.718062][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 816.718099][ C0] RIP: 0010:crng_make_state+0x5dc/0xa80 [ 816.718126][ C0] Code: 6a e1 77 06 e9 01 fd ff ff e8 60 b9 53 fc e8 8b 20 75 06 48 83 7c 24 28 00 74 87 e8 4e b9 53 fc fb 48 c7 44 24 40 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 48 8b 4c 24 38 c7 04 08 00 00 00 00 [ 816.718144][ C0] RSP: 0018:ffffc9000cc577c0 EFLAGS: 00000293 [ 816.718166][ C0] RAX: ffffffff854bba82 RBX: 0000000000000000 RCX: ffff888032edbc00 [ 816.718181][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.718194][ C0] RBP: ffffc9000cc57970 R08: ffffffff854bb9f2 R09: 1ffffffff284e32f [ 816.718210][ C0] R10: dffffc0000000000 R11: fffffbfff284e330 R12: 000000000000001a [ 816.718225][ C0] R13: 1ffff110170c756e R14: 0000000000000046 R15: ffff8880b863ab78 [ 816.718240][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 816.718257][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.718272][ C0] CR2: 00007fc7aad68fe0 CR3: 000000007f058000 CR4: 00000000003526f0 [ 816.718290][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 816.718303][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 816.718320][ C0] Call Trace: [ 816.718328][ C0] [ 816.718338][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 816.718363][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 816.718387][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 816.718410][ C0] ? nmi_handle+0x2a/0x5a0 [ 816.718442][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 816.718471][ C0] ? nmi_handle+0x14f/0x5a0 [ 816.718493][ C0] ? nmi_handle+0x2a/0x5a0 [ 816.718516][ C0] ? crng_make_state+0x5dc/0xa80 [ 816.718544][ C0] ? default_do_nmi+0x63/0x160 [ 816.718568][ C0] ? exc_nmi+0x123/0x1f0 [ 816.718589][ C0] ? end_repeat_nmi+0xf/0x53 [ 816.718612][ C0] ? crng_make_state+0x542/0xa80 [ 816.718633][ C0] ? crng_make_state+0x5d2/0xa80 [ 816.718656][ C0] ? crng_make_state+0x5dc/0xa80 [ 816.718679][ C0] ? crng_make_state+0x5dc/0xa80 [ 816.718702][ C0] ? crng_make_state+0x5dc/0xa80 [ 816.718724][ C0] [ 816.718731][ C0] [ 816.718741][ C0] ? crng_make_state+0x196/0xa80 [ 816.718763][ C0] ? __pfx_crng_make_state+0x10/0x10 [ 816.718803][ C0] _get_random_bytes+0xd7/0x2c0 [ 816.718826][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 816.718851][ C0] ? __pfx___might_resched+0x10/0x10 [ 816.718885][ C0] ? do_raw_spin_unlock+0xe0/0x8b0 [ 816.718914][ C0] ? skb_put+0x114/0x1f0 [ 816.718939][ C0] nsim_dev_trap_report_work+0x328/0xb50 [ 816.718976][ C0] ? process_scheduled_works+0x976/0x1840 [ 816.719007][ C0] process_scheduled_works+0xa66/0x1840 [ 816.719052][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 816.719112][ C0] ? assign_work+0x364/0x3d0 [ 816.719144][ C0] worker_thread+0x870/0xd30 [ 816.719172][ C0] ? __kthread_parkme+0x169/0x1d0 [ 816.719194][ C0] ? __pfx_worker_thread+0x10/0x10 [ 816.719213][ C0] kthread+0x2f0/0x390 [ 816.719234][ C0] ? __pfx_worker_thread+0x10/0x10 [ 816.719252][ C0] ? __pfx_kthread+0x10/0x10 [ 816.719275][ C0] ret_from_fork+0x4b/0x80 [ 816.719294][ C0] ? __pfx_kthread+0x10/0x10 [ 816.719316][ C0] ret_from_fork_asm+0x1a/0x30 [ 816.719353][ C0] [ 816.720011][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 817.169291][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 817.182458][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 817.195593][ T30] Call Trace: [ 817.199693][ T30] [ 817.203039][ T30] dump_stack_lvl+0x241/0x360 [ 817.209360][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.214878][ T30] ? __pfx__printk+0x10/0x10 [ 817.222639][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 817.231312][ T30] ? vscnprintf+0x5d/0x90 [ 817.237231][ T30] panic+0x349/0x880 [ 817.242279][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 817.250411][ T30] ? __pfx_panic+0x10/0x10 [ 817.255577][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 817.262192][ T30] ? __irq_work_queue_local+0x137/0x410 [ 817.271120][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 817.287900][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 817.296199][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 817.303858][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 817.314586][ T30] watchdog+0x1035/0x1040 [ 817.319580][ T30] ? watchdog+0x1ea/0x1040 [ 817.327424][ T30] ? __pfx_watchdog+0x10/0x10 [ 817.333939][ T30] kthread+0x2f0/0x390 [ 817.341423][ T30] ? __pfx_watchdog+0x10/0x10 [ 817.349427][ T30] ? __pfx_kthread+0x10/0x10 [ 817.357812][ T30] ret_from_fork+0x4b/0x80 [ 817.362935][ T30] ? __pfx_kthread+0x10/0x10 [ 817.367925][ T30] ret_from_fork_asm+0x1a/0x30 [ 817.374959][ T30] [ 817.379434][ T30] Kernel Offset: disabled [ 817.384166][ T30] Rebooting in 86400 seconds..