last executing test programs: 17m47.271850995s ago: executing program 32 (id=562): socket$inet_sctp(0x2, 0x1, 0x84) setresgid(0xee00, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) close(r1) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 17m10.926714085s ago: executing program 33 (id=630): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, 0x0, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x2000000b}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='cache=none') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x1208004, 0x0) 12m33.398545664s ago: executing program 0 (id=1248): socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f0000000400)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x10000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x60}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x61, 0x40001002, r6, 0x0) 12m29.598960971s ago: executing program 0 (id=1259): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@dellink={0x20, 0x11, 0x400, 0x0, 0xfffffff5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x211}}, 0x20}}, 0x20000000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x2880) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r4], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="50202b449ab4d04ff71971a19417a09928bc4275cf19dd0b250fb4ddcb4bfc97dc5ebafe3e3ae2d976f8759098fa5f4be7eff4f55653eefd88e036a2f105153ae024f421fa1b2317be9c3ed106a2a55bf57762f05dd49a757c4fa474f490da6f65a23e517063cfd66d8d76c6addd28dc841072420fcd1c4f119510e3c95fd418d522c72025fc300a2769fa8143c3bafd5c4aff9cce7f40a25c73273fdedd1da9e848c7dd1de80909d790b8a668cd67a4960da17686b029f6c87774772c767eb82dfb6454dd39dcb1fd29538566e5c0526821f29932c4b74abf4f7063ab88ece8bfe289c7ba8fae9fa5577943af0c59552dd81c24cab1d279669a6484f9f3ce", 0xff) r9 = dup(r1) close_range(r2, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000440)={0x28, 0x2, 0x0, {0x1, 0x1}}, 0x28) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x44, r11, 0x211, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfffffffd}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048012}, 0x4000004) socket$inet6_mptcp(0xa, 0x1, 0x106) 12m27.569703391s ago: executing program 0 (id=1264): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7ffffe01}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) iopl(0x3) getuid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = mq_open(&(0x7f0000000180)='#.\x1e$@#\x00', 0x40, 0x1d1, 0x0) mq_notify(r5, &(0x7f0000000340)={0x0, 0x4000002, 0x1, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r3, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) 12m19.010278773s ago: executing program 0 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000}, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000880, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x2, {}, 0x884d4e09817961eb}, 0x18) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) getpid() mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) 12m18.018875142s ago: executing program 0 (id=1281): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x80}}}, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x26d, 0x11900, 0x1000, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, 0x0, 0x0, 0x1, &(0x7f0000000400)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r7, 0x0, 0xec, 0x1000, &(0x7f0000000440)="2c4445fce17939c510a8ec44a426fc68a2b269c3d7cd454ac6a253d683af8186b354423161ddb4f47fae74bea61d52ace0f3c5d6eda24a9fbdf48070bf6a178b215e68bfccd17304f9e3c2fa6b16e39422df10e7a77af54662fc1a33b6c36c2856af147818f0e86ba0c2909a4400b8b69b64d5914d395d1119511e259315d8b99ef6dbf7e674bc2143e1302a3d37d1f7d13588f2ba8c590111ab4bf47352248ab0d7b635bc377a323499ae5d709b341632c39fe99539f781765521f8380e854fba7f0f0c67f0a41923e4b78e14d403a903a88ddacc1d27b3eb90ae7048264495ea49b9a9326e2f3f2233a2e6", &(0x7f0000000540)=""/4096, 0x8000, 0x0, 0x6f, 0x4b, &(0x7f0000000180)="ae49408a87a082d2db2bac9d8760e844f15aa476426692b0e5a974dbe2df52c2eafb0fea985129c1731a72923a14596505098af54eccd250d5791227fdda95882d5659e604afd17d992e2a10567e3544246771459bbd2b1a28d0f50edec3cf5756ae998351940d6e5a327baaef5ff7", &(0x7f00000002c0)="570f86bce31fd14a81a11a78b4e86356d5e4a2cb47045004040682e3b61ec26f00c547e828ed61d64eb14c2789f505475a2c711fe56a5ef6b31c2b90f50d7a2388727cf58491c8df90e132", 0x5, 0x0, 0x7}, 0x50) 12m17.692929421s ago: executing program 0 (id=1283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m17.454585527s ago: executing program 34 (id=1283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 10m6.397090734s ago: executing program 6 (id=1548): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0xfc, 0x10a5, 0x3, &(0x7f0000000040), 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x3d76, 0x0, 0x8, 'syz1\x00'}) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xb}], 0x2, 0x2100, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) connect$netrom(r0, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x1}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB="34c229fa9b229ae8392cdff20932", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a7238a570116eccab40000000213c0000001c0a05010000000000000000070000070900020073797a31000000000900010073797a30"], 0xc0}}, 0x40000) 10m4.135944953s ago: executing program 6 (id=1555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x4004) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local, {[@end]}}, @info_request={0xf, 0x0, 0x0, 0x3492, 0x2}}}}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = gettid() prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) fanotify_init(0x8, 0x800) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r9, 0x203, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) sendfile(r2, r7, 0x0, 0x4000000000010046) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) 10m2.602794725s ago: executing program 6 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x2002, &(0x7f0000000140)='devlink\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/149, 0x95}, {&(0x7f0000005c40)=""/4099, 0x1003}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) 10m1.558741696s ago: executing program 6 (id=1559): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x589) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x6, 0x7a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg$unix(r5, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f0000000940)=""/245, 0xf5}], 0x2}}], 0x1, 0x40000160, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) syz_usb_control_io(r3, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 9m58.74365435s ago: executing program 6 (id=1566): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x40000) 9m56.870466066s ago: executing program 6 (id=1571): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000093837e295e17a89378193af4f33b628ab202d3d5ff9cca3371e24f4d2b815b54fffbf8c90217a255aa9cefaa6dc75a667c393f1bcf3e0b1713b570d69be9abe3e37bb67e46ff0f942a01f682caecdad74dc28f91416e4438a73a74717ee1b3202cc102e027fa135f5c27467ef6b5a94bb221bb74f6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="da941cb992daa453426617e053957c6779fa2e62", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000000c000000b7070000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) clock_gettime(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @value64=0x8000000000000001}}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@empty, @loopback, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x22, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000280)=@nl=@unspec, 0x80, &(0x7f0000000840)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/21, 0x15}, {0x0}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/246, 0xf6}, {&(0x7f0000000780)=""/168, 0xa8}], 0xa, &(0x7f0000003b00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000900)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000980)=""/69, 0x45}, {&(0x7f0000000a00)=""/230, 0xe6}], 0x2, &(0x7f0000000b00)=""/32, 0x20}}], 0x2, 0x60000003, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 9m40.434202459s ago: executing program 35 (id=1571): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000093837e295e17a89378193af4f33b628ab202d3d5ff9cca3371e24f4d2b815b54fffbf8c90217a255aa9cefaa6dc75a667c393f1bcf3e0b1713b570d69be9abe3e37bb67e46ff0f942a01f682caecdad74dc28f91416e4438a73a74717ee1b3202cc102e027fa135f5c27467ef6b5a94bb221bb74f6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="da941cb992daa453426617e053957c6779fa2e62", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000000c000000b7070000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) clock_gettime(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @value64=0x8000000000000001}}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@empty, @loopback, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x22, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000280)=@nl=@unspec, 0x80, &(0x7f0000000840)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/21, 0x15}, {0x0}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/246, 0xf6}, {&(0x7f0000000780)=""/168, 0xa8}], 0xa, &(0x7f0000003b00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000900)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000980)=""/69, 0x45}, {&(0x7f0000000a00)=""/230, 0xe6}], 0x2, &(0x7f0000000b00)=""/32, 0x20}}], 0x2, 0x60000003, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 9m17.029794235s ago: executing program 5 (id=1634): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f0000000340)="e57802c83b00"/16, 0x10, 0x10, &(0x7f0000000100)={0x2, 0x0, @empty, 0x2}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000380)=0x40b, 0x4) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x620400, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xfd, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x0, 0x0, 0x1002]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f00000001c0)) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 9m15.920591431s ago: executing program 5 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 9m11.158000366s ago: executing program 5 (id=1645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002d000100fcffffffef0226da08000000", @ANYRES32=r4], 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) 9m10.011327983s ago: executing program 5 (id=1647): unshare(0x68040200) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0xa0, 0x3b, 0x46, 0x40, 0x6cd, 0x202, 0xa8d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x57, 0x7f, 0x0, 0xdb, 0x2d, 0x94, 0x9}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xfec0ffff00000000}}]}}}]}, 0x48}}, 0x0) 9m6.859418175s ago: executing program 5 (id=1652): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) prlimit64(0x0, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x840) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x4010, r2, 0x6000) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') syz_open_dev$ttys(0xc, 0x2, 0x1) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/199, 0xc7) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000100)={0x2, r1, 0xd9f, 0x1, 0x9, 0x1, 0x1d40, 0x9, 0x5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 9m6.36511875s ago: executing program 5 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x40, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x11, 0x34, @random="9a9bec262f387d15ac63b5b348"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 9m5.059166626s ago: executing program 36 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x40, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x11, 0x34, @random="9a9bec262f387d15ac63b5b348"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2m59.4068262s ago: executing program 7 (id=2479): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0xfffffffffffffe2f) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read$alg(r3, &(0x7f0000000040)=""/9, 0x9) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) 2m55.642320301s ago: executing program 7 (id=2487): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x3, r0, 0x200}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) prlimit64(r2, 0xa, &(0x7f0000000340)={0xc0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x2300, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc810, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r6, 0x0, 0x22) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) mount(&(0x7f0000000100)=@sg0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x1208004, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstatfs(r7, &(0x7f0000000180)=""/69) 2m51.710697192s ago: executing program 7 (id=2494): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r3) io_setup(0x200, &(0x7f0000000400)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x82002, 0x0) io_submit(r4, 0x1, &(0x7f0000001980)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x0, 0x5}]) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x21, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x24, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x10, 0x1a, 0x0, 0x1, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="c27b8277f3"]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf252100000008000300efccc56295aa0ad008abccfec453e39b485cd1375cb0e98766ac990243fd9dc52a86f245956913cd4fb93c971f4d8b85809f30690d25f86e66a16cf6fba25a1cce0308007db588f5ac1fccc4526f1940d2aaf7aa0ece2a19c9d13e2e71d5a69200000000", @ANYRES32=r9, @ANYBLOB="0a00f5000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x20008040}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_list_modules(0x0, 0xfffffffffffffffe, 0x0) 2m48.631084422s ago: executing program 7 (id=2500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000481000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 2m47.822382504s ago: executing program 7 (id=2504): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe9b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x6b30, 0xde52, 0x41, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[]) io_uring_enter(r1, 0x7baf, 0xb538, 0x0, &(0x7f0000000140)={[0x5]}, 0x8) 2m35.77343517s ago: executing program 7 (id=2521): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800800050000000000050016000100000004001200080015"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) r3 = signalfd4(r0, &(0x7f0000000480)={[0x7]}, 0x8, 0x80000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003540)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003500)={&(0x7f0000002e80)={0x690, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x16f, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x40}, @device_a, @device_b, @initial, {0x0, 0x80}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x89, 0x43, 0xfffffffc, @device_a, 0x5, @value=@broadcast, 0x3, 0x8, 0x3, [{{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x14000000}, {{0x0, 0x0, 0x1}, @device_b, 0x9}]}}, @void, @val={0x84, 0xf5, {0x9f, 0xf, [{{}, @device_b, 0xfffffff6, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x42}, {{}, @device_b, 0x0, @void, 0x33}, {{}, @broadcast, 0x479, @void, 0x2b}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x2f}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x39}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x1a}, {{}, @broadcast, 0x1, @void, 0x3b}, {{}, @device_a, 0xfffffc92, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0xc}, {{}, @broadcast, 0x7, @void, 0x28}, {{0x0, 0x1}, @device_a, 0xfffffffd, @value=@device_b, 0x31}, {{0x0, 0x1}, @device_b, 0x7, @value, 0xa}, {{}, @device_b, 0x6, @void, 0x22}]}}, @val={0x7e, 0x15, {{0x0, 0x5}, 0x7, 0xf, @device_b, 0x3, 0x401, 0x8}}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x15f, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x10}, @device_a, @device_b, @initial, {0x9, 0x2e1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0xa, 0xde7, 0x0, 0x373, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x6, 0x81}}, @void, [{0xdd, 0x97, "1a55fcbf54608fe341351d4aa97ce4b07f575df8a1bc3d84cf6ea644faa95685fc03c938e0cf889ea0219fc4c49c4ec81d6e38560aea488d1747f2828c810ec8424bf0dd83ae9ca00ba46fd80e02ddda32580bfd42e667cd51b87fb68c6f9291becc79f2b54f2f45fdd1256c3208b5714b095eeb316bda9252e2cb864ccad2d3d8dfdd3daba2dbb7e2a0cb9f5fb4df63f0275793ffc1dc"}, {0xdd, 0x72, "a4f10536b15eff8ad8a29323979b31935decb355a6d755b73860dc5fd12aa4e5bac9f29c4142fd0bc832516c9b3cd3e61ac976fe6c188fe48a2c2ab8beffec979d51615d3a79e3f6164dc81921c8d54e9298ea7bd82e3a09427a286ab7010713001c475bc686eafcbff5481b5506f886d702"}, {0xdd, 0x10, "4d880c80215a11a93794b29c240c20a3"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x1, 0x63, 0x6, 0x9, 0x4, 0x8, 0x2, 0x5, 0xc44]}, @NL80211_ATTR_FRAME={0x387, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0xc, 0x5}}, 0x3, 0x24, @random=0x4, @void, @val={0x2d, 0x1a, {0x400, 0x1, 0x2, 0x0, {0x8, 0x7, 0x0, 0x100, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x8}}, [{0xdd, 0x53, "ff71f1d15f3ec88c13e345955fd59b8241f248bb744cce9cd1a5ad3f6724dff9c5b1286635c614e6bf5cd98ba83fe90e79578a63b7453d84b210fd3e63fb90f33a70787fe9a5287c24a2053f259067d5eddcc0"}, {0xdd, 0x6a, "fb78a6cd9761be9e3414fa68b017b5a55f14d3e469558ac711f432a75905dbfa9125a0bbe0bb4fd16b49a46e478561d28e62684fd09e599726e2d78e888f089a8a844c402f6d429ac7a034a235f96ce02a1287bc35f8f981e5b1114a134a84dcc9f3a69931b8263706fc"}, {0xdd, 0xf3, "232b7cdd874a538d092d4d46ab152e4528fecf5e2d85dca8f2f1804ab8fab440ee411fdc39776caedf2cd4311477409320f0c59b668dc9e9a403dc3cfc1fb064ac193fe5ad15dbf41510f0abd06826c984d0201bb51ca487379b9686fa82cbcbeb4e98e46ace640399f3bdcab74e7ce9884394983e8aa417a37d44812c0b851fbcb523e07a58992ac7b56167a8831ffaa5a9a1642869bc4057a083cae0b8e4f20d8f018dc44df560304c3977634e04ab2b3f1f5d601be7e5859de58e97de2f664e4ef64f971e2692e36219cfb9d1b1ee69df727bc5f61becf4ab793b1655e1eb05bb6d496955ce2e2b155da068a13d079bb48c"}, {0xdd, 0xfe, "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"}, {0xdd, 0x91, "2fedca4a729bd15254bd4113a0b1a51f2bc7d8c8cdc68594e4fcdd9451763fee63bd59f5be668f8d4a0f08af0c0c470a3c5b4071427d0b5e3c9ebd00839971e51d66342aaceb8c5ab4ac30bac78d3305a39b145bc7d95902b540626a4bfb86d77c88d7a3339732968783afcb87c9e75850288dc58ce9b04fbbe182d95eda1a874bfa193a7acc23016d99ba757c89eda020"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4a}]}, 0x690}, 0x1, 0x0, 0x0, 0x4000814}, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64000000010000000000000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000039c0)={r4, 0xe0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000003740)=[0x0, 0x0], &(0x7f0000003780)=[0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f00000037c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003800), &(0x7f0000003840), 0x8, 0x82, 0x8, 0x8, &(0x7f0000003880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003a00)={0x20, 0x0, &(0x7f0000003580), &(0x7f00000035c0)='GPL\x00', 0x5, 0x66, &(0x7f0000003600)=""/102, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x29, r3, 0x8, &(0x7f0000003680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000036c0)={0x0, 0x2, 0x2, 0x1}, 0x10, r6, r3, 0x0, 0x0, 0x0, 0x10, 0x1b4a, @void, @value}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0xffffffffffffff03, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8000}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28800}, 0x4040850) sync() sync() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x31}, 0x64d}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000240)="fad1ed7c458775", 0x7}, {&(0x7f0000000280)="e68172f75a4ab8ffec5ac5f79fb13cf620aab66ce197f9c417ae4eb36eebec02d174283b5f275e7ebd3035e93c03b5275978a6ced82a8cf25e78cec64ff0ac170bd7ff102d266253595c7a5cac73256535c6c960c97858a679f7cd3f83c2a35fde91536c0b394c89a3c89dbc0e071375fd002896f613504b1016d362c968b6aa44ea161d0ecfc41e20c2f06cb47f8d806139285df058d9a1eabe6dd0c1cc6dc9092bfdad01682dfd7f91b13902a621167c597d7a1b", 0xb5}, {&(0x7f0000000540)="810a59c9a528a538da0aaf3297f3f5b05a380cee9d526abe1bcca8838f2741f388d44505af3a3cc20fd4b3ca293fec3b730ffc0a85646970590967b31fa545da83df3284c43f2e0b0b92774c222564548c54bf3ac53281a12ab6f5e34fe448cb6d6cea5dee555d5ae104d3c75911f5bebe9e4707f23e058b04e0caef4c11da7fb49d69bd4d636518a04dae29bc8ef1d623675c72c1682db182d8eaa4102cd7e1f0d7b0ab957ad78d3994aa9f084f98a0238cb1d1c690371be1d61cc652db21f40dd2c5289586f79f6517417c6ac0c03b33d45ded1b9b5c58856fe64f2827b182f401b5d3a638cc0250ec18cc41542903", 0xf0}, {&(0x7f0000000340)="cf8f4ac74167dcc13281b4a46c78ac4adc47cf459670e391c50c5aacc131cfc6c6017d6f29", 0x25}, {&(0x7f0000000640)="028c0454232976bf31798eca6b79cd5d37260248942672bf7429c69c6ceb2f7d5b8bee2314f08501322513426ced73ef7119a7ead155923b1035b5edd9222cfc949007c05ff8e3122784a0d4835ab8fd91bbe6162bae180d4c2c29b624ae4e51f85713efe8bdad25d91830e1776ae7b38d1ec1ed247e1b8876759590eb578430fa30b760df5368efd10d4b1d1433f4d044efc92bc33bb6cf4f5cd271f738f0008b370113af4e713f20bcb29309900a117ceeb159de2443bc022b4bad51180be519a7f6b21eb3029aaddec8b2672f858014758b7a0ade6f5e6147cc9e01c81a4ce24499fba2fa", 0xe6}, {&(0x7f0000000480)}, {&(0x7f0000000740)="a5d3ba49cc6bcd3d4734156858e35a444296997987d85da6bdd70431902eb828b41443b1f5d1502375e61ae374b0070e2ba5a22a4e8fffa43253944381419690a698e9dc7fc3b9eba3a6a2bf04d94629bfc56aee0b44ef976bdbae5be039dbedc8e3d25f938885b81a9805d2af7aef5eef50023c8db8fcda9f00f41ebc8768ecc5f962187b37444e62f7bab8aa3d81a13b81d29bd232639c7004b0a04cb5a3a09c7eced1531f940bec", 0xa9}], 0x7, &(0x7f0000000b00)=[@hopopts={{0x1098, 0x29, 0x36, {0x67, 0x20f, '\x00', [@generic={0x2, 0x30, "2613bda4ba2c52fb0bb7599d2cbfd24d9579325ec23e98e95af95d8dc8300e7c8e010a6690634e9ec735a2a899cdd585"}, @generic={0x7, 0x35, "40192991404c6c6be18e1af3dc1e59d89673ba5531dd391e2fac5ee33ac94e8b7bf0819ba88dc24b1afa3dfedfdbf9aa59d715e348"}, @generic={0x6, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x8}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@ra={0x5, 0x2, 0xe70d}]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x16, 0x12, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0xfffd, [0x88d3, 0x5, 0x0]}}, @ra={0x5, 0x2, 0xfff4}, @pad1, @ra={0x5, 0x2, 0x4}, @pad1, @pad1, @generic={0x1, 0x5f, "9849f7b3e6fe4162726f50bb5aff61852a9ee21fd47a3d47ad892da0f8b12a21a329103d045880a1e409a73d520614cd2ebfc733a636c72a68e76d55c703fa442a0890f3753a455fcda3ff8775734b313f6c16fa3af1b12af00d4d0575156f"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x11d8}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0xa04, @private0, 0xfffffffe}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000880)="529de69746e3f42374f752bd10b1712ec431004b03391e56f344afb6f7d182c3b9a223a153dd89fc1ba9bae9706c892060fe772b3a689555e32f68c1de2f2837e9a01a64b7174f356c73a12ac4242271379b5c45447d2e6c322bc9671e2d57f5bd2e1c7242960a9e44e804b8c9eb20334999227052c5dd91494c5058b2ee9460ef43f8db8a797509d2b1bf0f138cea55f3a9fa3bb882013898d1bacd4ce0994c5054c5f1f6e00b44831107bb2456afe4985e8f7276eea830498c9a0f774340fa26a60ba420ff9e8639c1bb416077", 0xce}, {&(0x7f0000000980)="eba2f15d2907bf2c8679c6b1f86c10ebba36d6110871390a93b241552b3a88842b50fbd3caa8d35b69e243af51a4df8f6241b05d9da298c67ed4555062422c6edf629431c1116e1247c9b607d25f046b", 0x50}, {&(0x7f0000001d00)="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", 0x1000}], 0x3, &(0x7f0000002d00)=ANY=[@ANYBLOB="2400000000000000290000003200000020010000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="0002000048000600000000002900000036000000ff05000000000000000100c2040004000007200000000306000b00090000000000000009de00000000000018260000000000000000000000140000000000000029000000340000000000001300000000"], 0x88}}], 0x2, 0x0) sync() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) sync() 2m19.552444124s ago: executing program 37 (id=2521): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800800050000000000050016000100000004001200080015"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) r3 = signalfd4(r0, &(0x7f0000000480)={[0x7]}, 0x8, 0x80000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003540)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003500)={&(0x7f0000002e80)={0x690, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x16f, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x40}, @device_a, @device_b, @initial, {0x0, 0x80}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x89, 0x43, 0xfffffffc, @device_a, 0x5, @value=@broadcast, 0x3, 0x8, 0x3, [{{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x14000000}, {{0x0, 0x0, 0x1}, @device_b, 0x9}]}}, @void, @val={0x84, 0xf5, {0x9f, 0xf, [{{}, @device_b, 0xfffffff6, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x42}, {{}, @device_b, 0x0, @void, 0x33}, {{}, @broadcast, 0x479, @void, 0x2b}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x2f}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x39}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x1a}, {{}, @broadcast, 0x1, @void, 0x3b}, {{}, @device_a, 0xfffffc92, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0xc}, {{}, @broadcast, 0x7, @void, 0x28}, {{0x0, 0x1}, @device_a, 0xfffffffd, @value=@device_b, 0x31}, {{0x0, 0x1}, @device_b, 0x7, @value, 0xa}, {{}, @device_b, 0x6, @void, 0x22}]}}, @val={0x7e, 0x15, {{0x0, 0x5}, 0x7, 0xf, @device_b, 0x3, 0x401, 0x8}}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x15f, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x10}, @device_a, @device_b, @initial, {0x9, 0x2e1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0xa, 0xde7, 0x0, 0x373, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x6, 0x81}}, @void, [{0xdd, 0x97, "1a55fcbf54608fe341351d4aa97ce4b07f575df8a1bc3d84cf6ea644faa95685fc03c938e0cf889ea0219fc4c49c4ec81d6e38560aea488d1747f2828c810ec8424bf0dd83ae9ca00ba46fd80e02ddda32580bfd42e667cd51b87fb68c6f9291becc79f2b54f2f45fdd1256c3208b5714b095eeb316bda9252e2cb864ccad2d3d8dfdd3daba2dbb7e2a0cb9f5fb4df63f0275793ffc1dc"}, {0xdd, 0x72, "a4f10536b15eff8ad8a29323979b31935decb355a6d755b73860dc5fd12aa4e5bac9f29c4142fd0bc832516c9b3cd3e61ac976fe6c188fe48a2c2ab8beffec979d51615d3a79e3f6164dc81921c8d54e9298ea7bd82e3a09427a286ab7010713001c475bc686eafcbff5481b5506f886d702"}, {0xdd, 0x10, "4d880c80215a11a93794b29c240c20a3"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x1, 0x63, 0x6, 0x9, 0x4, 0x8, 0x2, 0x5, 0xc44]}, @NL80211_ATTR_FRAME={0x387, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @initial, {0xc, 0x5}}, 0x3, 0x24, @random=0x4, @void, @val={0x2d, 0x1a, {0x400, 0x1, 0x2, 0x0, {0x8, 0x7, 0x0, 0x100, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x8}}, [{0xdd, 0x53, "ff71f1d15f3ec88c13e345955fd59b8241f248bb744cce9cd1a5ad3f6724dff9c5b1286635c614e6bf5cd98ba83fe90e79578a63b7453d84b210fd3e63fb90f33a70787fe9a5287c24a2053f259067d5eddcc0"}, {0xdd, 0x6a, "fb78a6cd9761be9e3414fa68b017b5a55f14d3e469558ac711f432a75905dbfa9125a0bbe0bb4fd16b49a46e478561d28e62684fd09e599726e2d78e888f089a8a844c402f6d429ac7a034a235f96ce02a1287bc35f8f981e5b1114a134a84dcc9f3a69931b8263706fc"}, {0xdd, 0xf3, "232b7cdd874a538d092d4d46ab152e4528fecf5e2d85dca8f2f1804ab8fab440ee411fdc39776caedf2cd4311477409320f0c59b668dc9e9a403dc3cfc1fb064ac193fe5ad15dbf41510f0abd06826c984d0201bb51ca487379b9686fa82cbcbeb4e98e46ace640399f3bdcab74e7ce9884394983e8aa417a37d44812c0b851fbcb523e07a58992ac7b56167a8831ffaa5a9a1642869bc4057a083cae0b8e4f20d8f018dc44df560304c3977634e04ab2b3f1f5d601be7e5859de58e97de2f664e4ef64f971e2692e36219cfb9d1b1ee69df727bc5f61becf4ab793b1655e1eb05bb6d496955ce2e2b155da068a13d079bb48c"}, {0xdd, 0xfe, "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"}, {0xdd, 0x91, "2fedca4a729bd15254bd4113a0b1a51f2bc7d8c8cdc68594e4fcdd9451763fee63bd59f5be668f8d4a0f08af0c0c470a3c5b4071427d0b5e3c9ebd00839971e51d66342aaceb8c5ab4ac30bac78d3305a39b145bc7d95902b540626a4bfb86d77c88d7a3339732968783afcb87c9e75850288dc58ce9b04fbbe182d95eda1a874bfa193a7acc23016d99ba757c89eda020"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4a}]}, 0x690}, 0x1, 0x0, 0x0, 0x4000814}, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64000000010000000000000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000039c0)={r4, 0xe0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000003740)=[0x0, 0x0], &(0x7f0000003780)=[0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f00000037c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003800), &(0x7f0000003840), 0x8, 0x82, 0x8, 0x8, &(0x7f0000003880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003a00)={0x20, 0x0, &(0x7f0000003580), &(0x7f00000035c0)='GPL\x00', 0x5, 0x66, &(0x7f0000003600)=""/102, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x29, r3, 0x8, &(0x7f0000003680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000036c0)={0x0, 0x2, 0x2, 0x1}, 0x10, r6, r3, 0x0, 0x0, 0x0, 0x10, 0x1b4a, @void, @value}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0xffffffffffffff03, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8000}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28800}, 0x4040850) sync() sync() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x31}, 0x64d}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000240)="fad1ed7c458775", 0x7}, {&(0x7f0000000280)="e68172f75a4ab8ffec5ac5f79fb13cf620aab66ce197f9c417ae4eb36eebec02d174283b5f275e7ebd3035e93c03b5275978a6ced82a8cf25e78cec64ff0ac170bd7ff102d266253595c7a5cac73256535c6c960c97858a679f7cd3f83c2a35fde91536c0b394c89a3c89dbc0e071375fd002896f613504b1016d362c968b6aa44ea161d0ecfc41e20c2f06cb47f8d806139285df058d9a1eabe6dd0c1cc6dc9092bfdad01682dfd7f91b13902a621167c597d7a1b", 0xb5}, {&(0x7f0000000540)="810a59c9a528a538da0aaf3297f3f5b05a380cee9d526abe1bcca8838f2741f388d44505af3a3cc20fd4b3ca293fec3b730ffc0a85646970590967b31fa545da83df3284c43f2e0b0b92774c222564548c54bf3ac53281a12ab6f5e34fe448cb6d6cea5dee555d5ae104d3c75911f5bebe9e4707f23e058b04e0caef4c11da7fb49d69bd4d636518a04dae29bc8ef1d623675c72c1682db182d8eaa4102cd7e1f0d7b0ab957ad78d3994aa9f084f98a0238cb1d1c690371be1d61cc652db21f40dd2c5289586f79f6517417c6ac0c03b33d45ded1b9b5c58856fe64f2827b182f401b5d3a638cc0250ec18cc41542903", 0xf0}, {&(0x7f0000000340)="cf8f4ac74167dcc13281b4a46c78ac4adc47cf459670e391c50c5aacc131cfc6c6017d6f29", 0x25}, {&(0x7f0000000640)="028c0454232976bf31798eca6b79cd5d37260248942672bf7429c69c6ceb2f7d5b8bee2314f08501322513426ced73ef7119a7ead155923b1035b5edd9222cfc949007c05ff8e3122784a0d4835ab8fd91bbe6162bae180d4c2c29b624ae4e51f85713efe8bdad25d91830e1776ae7b38d1ec1ed247e1b8876759590eb578430fa30b760df5368efd10d4b1d1433f4d044efc92bc33bb6cf4f5cd271f738f0008b370113af4e713f20bcb29309900a117ceeb159de2443bc022b4bad51180be519a7f6b21eb3029aaddec8b2672f858014758b7a0ade6f5e6147cc9e01c81a4ce24499fba2fa", 0xe6}, {&(0x7f0000000480)}, {&(0x7f0000000740)="a5d3ba49cc6bcd3d4734156858e35a444296997987d85da6bdd70431902eb828b41443b1f5d1502375e61ae374b0070e2ba5a22a4e8fffa43253944381419690a698e9dc7fc3b9eba3a6a2bf04d94629bfc56aee0b44ef976bdbae5be039dbedc8e3d25f938885b81a9805d2af7aef5eef50023c8db8fcda9f00f41ebc8768ecc5f962187b37444e62f7bab8aa3d81a13b81d29bd232639c7004b0a04cb5a3a09c7eced1531f940bec", 0xa9}], 0x7, &(0x7f0000000b00)=[@hopopts={{0x1098, 0x29, 0x36, {0x67, 0x20f, '\x00', [@generic={0x2, 0x30, "2613bda4ba2c52fb0bb7599d2cbfd24d9579325ec23e98e95af95d8dc8300e7c8e010a6690634e9ec735a2a899cdd585"}, @generic={0x7, 0x35, "40192991404c6c6be18e1af3dc1e59d89673ba5531dd391e2fac5ee33ac94e8b7bf0819ba88dc24b1afa3dfedfdbf9aa59d715e348"}, @generic={0x6, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x8}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@ra={0x5, 0x2, 0xe70d}]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x16, 0x12, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0xfffd, [0x88d3, 0x5, 0x0]}}, @ra={0x5, 0x2, 0xfff4}, @pad1, @ra={0x5, 0x2, 0x4}, @pad1, @pad1, @generic={0x1, 0x5f, "9849f7b3e6fe4162726f50bb5aff61852a9ee21fd47a3d47ad892da0f8b12a21a329103d045880a1e409a73d520614cd2ebfc733a636c72a68e76d55c703fa442a0890f3753a455fcda3ff8775734b313f6c16fa3af1b12af00d4d0575156f"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x11d8}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0xa04, @private0, 0xfffffffe}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000880)="529de69746e3f42374f752bd10b1712ec431004b03391e56f344afb6f7d182c3b9a223a153dd89fc1ba9bae9706c892060fe772b3a689555e32f68c1de2f2837e9a01a64b7174f356c73a12ac4242271379b5c45447d2e6c322bc9671e2d57f5bd2e1c7242960a9e44e804b8c9eb20334999227052c5dd91494c5058b2ee9460ef43f8db8a797509d2b1bf0f138cea55f3a9fa3bb882013898d1bacd4ce0994c5054c5f1f6e00b44831107bb2456afe4985e8f7276eea830498c9a0f774340fa26a60ba420ff9e8639c1bb416077", 0xce}, {&(0x7f0000000980)="eba2f15d2907bf2c8679c6b1f86c10ebba36d6110871390a93b241552b3a88842b50fbd3caa8d35b69e243af51a4df8f6241b05d9da298c67ed4555062422c6edf629431c1116e1247c9b607d25f046b", 0x50}, {&(0x7f0000001d00)="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", 0x1000}], 0x3, &(0x7f0000002d00)=ANY=[@ANYBLOB="2400000000000000290000003200000020010000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="0002000048000600000000002900000036000000ff05000000000000000100c2040004000007200000000306000b00090000000000000009de00000000000018260000000000000000000000140000000000000029000000340000000000001300000000"], 0x88}}], 0x2, 0x0) sync() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) sync() 1m23.882997438s ago: executing program 2 (id=2727): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$alg(0x26, 0x5, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x302, 0x0) r2 = io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4000}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x2}, 0x6) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r4, 0x0, 0xfffffffffffffffc}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}}, 0x0) splice(r6, 0x0, r8, 0x0, 0x10d00, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x1000000000000}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000980)=ANY=[], 0x8) setsockopt$inet6_opts(r10, 0x29, 0x3b, 0x0, 0x0) process_mrelease(r1, 0x0) ptrace$peek(0x2, r0, 0x0) 1m23.517904703s ago: executing program 2 (id=2730): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001880)=""/180) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000380)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x79c5, 0x4) 1m21.958834884s ago: executing program 2 (id=2732): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x29) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x3, 0xc, &(0x7f0000002240)=ANY=[@ANYRES16, @ANYBLOB="12a930f918275495d359e926e7ba959e8dce1d8812f48a8768e29aae40c0df8235b5d02e718a96a92c048f5f2d02a9f7b9761283c5dfe7a2e40a67718ed84ac756ca5b6e64b41220d1e179c2e3ff49f1231a366f0d8828a7cebb866a7b0ef7e712c3aa692f07486b746ff05b86ac5a16a349236bfef74b763c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xfc}, {0xffffffffffffffff}, 0x0, 0x7}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}, {0x0, 0x1}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) socket$inet_tcp(0x2, 0x1, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r4 = socket(0x2a, 0x1, 0x20005) socket$tipc(0x1e, 0x5, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8) fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) sendmmsg$sock(r4, &(0x7f0000002400), 0x0, 0x20000001) connect$netlink(r4, &(0x7f0000000000)=@unspec, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9}}, 0x50) bind$netlink(r4, &(0x7f00000022c0)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1be3df000000000000000f000000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1m21.772231983s ago: executing program 2 (id=2734): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r0 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) ioctl$CEC_DQEVENT(r0, 0x40046109, &(0x7f0000000080)) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="8aaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe80000000000e3eb0451697e29b75b22908fdf82c149de83f5e76c40b9f946a9377f7ad3c0dbc56d990a8dfdd4653800eef4cd1b87e0098091154e63c6997969ef3fe8e0f2c52ee6d"], 0x0) syz_open_dev$amidi(&(0x7f00000001c0), 0xfffffffffffffffe, 0x105400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x3, 0x8, 0x5, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x6800, 0x7ff) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="1044bb10c8938cbe"}}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280), 0x4) write$P9_RRENAME(r1, &(0x7f0000000340)={0x7, 0x15, 0x1}, 0x7) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a2a44000000001010902440081010010000904"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x400c050) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r5) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183741, 0x0) 1m19.312008743s ago: executing program 2 (id=2742): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_print_times', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0x5, 0x8001) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000300)={0x4000001, 0x71, 0x200000009}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) syz_open_dev$tty1(0xc, 0x4, 0x2) fstat(r1, &(0x7f0000000480)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1000a94, &(0x7f0000000280)={0x0, 0x40000000, 0x1000, 0x0, 0x1000000}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x6ed3, 0xdae5, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x401, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r10, 0xae44, 0x42c2000) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1m17.560848359s ago: executing program 2 (id=2745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sendmsg$AUDIT_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81883100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x3e9, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x7ff, 0x215, 0x5, 0x0, 0x0, 0x8, 0x3}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000040) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r6, 0xfffffff7, &(0x7f00000000c0)={0x4000007, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{'noacl'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '%*'}}]}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x3c}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x5d22) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m2.418026646s ago: executing program 38 (id=2745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sendmsg$AUDIT_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81883100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x3e9, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x7ff, 0x215, 0x5, 0x0, 0x0, 0x8, 0x3}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000040) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r6, 0xfffffff7, &(0x7f00000000c0)={0x4000007, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{'noacl'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '%*'}}]}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x3c}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x5d22) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 14.725335137s ago: executing program 4 (id=2857): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x700000000000000) 14.650702637s ago: executing program 1 (id=2858): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x37}}, 0x1c, 0x0}}], 0x3, 0x4008040) 14.514613114s ago: executing program 1 (id=2860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20088881}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) recvmmsg(r3, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/145, 0x91}, {&(0x7f0000000a80)=""/4083, 0xff3}], 0x2}, 0x6}], 0x3, 0x20, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = open(&(0x7f0000000340)='./bus\x00', 0x82840, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000400)={0x8, 0x1c, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @jumbo, @jumbo={0xc2, 0x4, 0x3}, @generic={0x2, 0xd5, "b6fb09f96d24ed524780ba6e0d370625c9467d2234bfd8a6ee5f93169f0abc0f7a2c47bcdee8f848699939fe47357d352a235322b10856a28f31b4b660a39b712f23b209ca15c961a50c0798e5d0e6025000be7174a79ea75344261fab72e2b5fce12c858dfdf4d4ece99dc3621d1b17458e53a2331cfddf1c18915dd0efc5c25692e1cb16aa0990fc43bbfebcd4312211e5b6c0ffd5911d6972c3756f0d0941925e9f6e6851dd8857483a62b1635ef30f7c957491b178dbbef9fa9e8244db16b177acfb1fa9260d202fe269f037351c4326f954a6"}]}, 0xf0) connect$inet(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) read$sequencer(r2, &(0x7f0000000040)=""/243, 0xf3) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f00000000c0)=0xfffffffc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x140, 0xc8, 0x8, 0x140, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x4e21, 0x84, 0x7, 0x4e23, 0x8, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x4, 0x4}}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r9, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048014}, 0x80) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="0a0006"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 14.378909559s ago: executing program 4 (id=2861): creat(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0xeb446cbb0080cdef, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}}, 0x448d1) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) preadv(r5, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, 0x8, 0x55c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000580)=0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) futex(0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x2) sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) 14.07856158s ago: executing program 8 (id=2863): r0 = syz_io_uring_setup(0x122c, &(0x7f0000000140)={0x0, 0x3706, 0x400, 0x3, 0xd1}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f0000000340), 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 13.805356874s ago: executing program 1 (id=2864): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000", @ANYRES32=r3], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r7, 0x0, 0x0, 0x4000001, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/202) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="50202b449ab4d04ff71971a19417a09928bc4275cf19dd0b250fb4ddcb4bfc97dc5ebafe3e3ae2d976f8759098fa5f4be7eff4f55653eefd88e036a2f105153ae024f421fa1b2317be9c3ed106a2a55bf57762f05dd49a757c4fa474f490da6f65a23e517063cfd66d8d76c6addd28dc841072420fcd1c4f119510e3c95fd418d522c72025fc300a2769fa8143c3bafd5c4aff9cce7f40a25c73273fdedd1da9e848c7dd1de80909d790b8a668cd67a4960da17686b029f6c87774772c767eb82dfb6454dd39dcb1fd29538566e5c0526821f29932c4b74abf4f7063ab88ece8bfe289c7ba8fae9fa5577943af0c59552dd81c24cab1d279669a6484f9f3ce", 0xff) r8 = dup(r1) close_range(0xffffffffffffffff, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x2, 0x0, {0x1, 0x1}}, 0x28) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x44, r10, 0x211, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfffffffd}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048012}, 0x4000004) socket$inet6_mptcp(0xa, 0x1, 0x106) 13.804738419s ago: executing program 8 (id=2865): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_io_uring_complete(0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x80}, 0x0) socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000000340)={0x10}, 0x10}, {&(0x7f0000003900)={0x10, 0x3f6}, 0x10}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8242, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x48, 0x2000) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000006c0)={0x52, 0xfffb, 0x0, {0x0, 0x1}, {0x4c, 0x1}, @period={0x58, 0x0, 0x400, 0x5, 0x2, {0xfffe, 0x20}, 0x0, 0x0}}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) write$cgroup_subtree(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r7, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 12.587149758s ago: executing program 1 (id=2866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xb, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) 11.774897831s ago: executing program 4 (id=2867): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x3, 0x0, 0x203}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xa671}]]}}}]}, 0x38}}, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x8a002, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3f, r2, &(0x7f0000000ac0)={0xd000000d}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0xfffffffd, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) 11.534945541s ago: executing program 8 (id=2868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e23, 0xffff, @remote, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="8426698c9712eaf857a1c8638ac76b3fc2406777b54a7e98714b2ee34c1362171fdea61d520cd10e3d30569911d6e48713ed96306eee592961afae8f31e70e9644882fa420dc62e5d60ad508adf420f5365fedf7b61260984363026b4828", 0x5e}, {&(0x7f00000003c0)="27623e187b0f771aaea061467650224b09a2404c469da16f38bac247a3fb84146b8db2dc984eb5b5e100dad920439f536e809150a3d34df7faff4ea72f141ec49be818a68137e5633beefb87a7633d626217e3f5d19eea34bee0aa3568587eb04f5c1f4510b218183a188aa8ae6f990adf4f20a5b91f94deff208a84b325f8ede23fa3d30905e942e8e3262e3c79316cbd648d04950786a3714bf9c93ee85726fc64ccf36c778e3c27", 0xa9}], 0x2}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232a, 0xa}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x5}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}]}, 0x64}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, 0x0}, 0x0) 11.377259212s ago: executing program 4 (id=2869): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0xcabc258ba52e7b, 0x48080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) close(r4) 10.918606683s ago: executing program 3 (id=2871): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000500000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e1200000800"], 0x44}}, 0x0) 10.55088704s ago: executing program 3 (id=2872): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000380)={0x0, 0xff8d, &(0x7f0000000340)={0x0}}, 0x98c4) r3 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000640)={0xc, @raw_data="f7d1a726ba4c56c4b04cac55085830cab51909a75a14ce405449260e7bee398f8ff1e9d0e71e010fc364c29959ac7b024d3d1bbd5e60b6592678d2c415a45089fe265d998de6e9202eb8d214abe26842b5232e8b475619203c18472e79e6c2ffa168b56ce6165617b5d3eaa25cca3a034b0ee234f671f9d0f7e428d3d8d9e1bb4fd714f0338f2236fea76d0145f5ef1562dd554457a34c00bcd57b4f8515d3461b5aafbbc5a57ed64c3486c8f5a9ec13daf09d0405c865f531ecd3430f64b43b7376f36589d9ca96"}) read$alg(r2, &(0x7f0000000040)=""/14, 0xe) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000019792e20b4070a000201010203010902120001c30001a1c7e1f89d102243c0"], 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0xff, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x1}]}) write$ppp(r5, &(0x7f0000000180)="1a6a", 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0], 0x54}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) 9.218662698s ago: executing program 9 (id=2874): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r1 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000002300), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x2, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "31c5"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$smackfs_change_rule(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="626174616476301a202126292d2052626257206c42425851"], 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000200, 0x0, 0x0, 0x400000000230, 0x400000000260], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) listen(0xffffffffffffffff, 0x2) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x31]}}}}]}) 7.946840228s ago: executing program 8 (id=2875): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r1 = openat$smackfs_change_rule(0xffffff9c, &(0x7f0000002300), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x2, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "31c5"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$smackfs_change_rule(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="626174616476301a202126292d2052626257206c42425851"], 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000200, 0x0, 0x0, 0x400000000230, 0x400000000260], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) listen(0xffffffffffffffff, 0x2) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x31]}}}}]}) 7.894091733s ago: executing program 9 (id=2876): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000140)) 7.587141831s ago: executing program 9 (id=2877): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0) r0 = syz_clone(0x10000, &(0x7f0000000000)="549a4a413231916ee3", 0x9, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000200)="4c471d73e915c685a9db5d013f695d045b33fccf9b07f13e5d1e81756fc8f29a3c66d00ecaf6ede36e2894dbe584b1d3e56232391803a274f3b2dc76527693df1db4e8115e32b05b8df78cc6") sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x26, 0x2, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xa0029, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=35,size=', @ANYRESOCT, @ANYRESDEC=0x0]) 7.48176711s ago: executing program 1 (id=2878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_io_uring_complete(0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x80}, 0x0) socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r3, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000000340)={0x10}, 0x10}, {&(0x7f0000003900)={0x10, 0x3f6}, 0x10}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8242, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x48, 0x2000) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000006c0)={0x52, 0xfffb, 0x0, {0x0, 0x1}, {0x4c, 0x1}, @period={0x58, 0x0, 0x400, 0x5, 0x2, {0xfffe, 0x20}, 0x0, 0x0}}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) write$cgroup_subtree(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r7, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 6.546944447s ago: executing program 3 (id=2879): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000", @ANYRES32=r3], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(0x0, 0x0) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/202) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="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", 0xff) r8 = dup(r1) close_range(0xffffffffffffffff, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x2, 0x0, {0x1, 0x1}}, 0x28) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x44, r10, 0x211, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfffffffd}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048012}, 0x4000004) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.496664341s ago: executing program 8 (id=2880): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x3516, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181041, 0x0) fchown(r2, 0xee01, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) connect$caif(r3, &(0x7f0000000140)=@util, 0x18) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x23e42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x80000001, 0x8000, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d52856bf3d3289737f0374c72a964a0244717deb7ba19bb3e7772fd29f35239d200", "24431a1e77a68e174ff10000000000000010e200", [0x4]}}) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010700001011fffc010000000000000000000000000000ff02000000000000000100000e22001090788275000180000000"], 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffff, 0xe7, 0xfffffffe, 0x2, 0xb, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0], 0x0) 5.86159927s ago: executing program 9 (id=2881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x1, @local, @remote, @link_local, @broadcast}}}}, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000440)) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x2]}, 0x8, 0x800) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) userfaultfd(0x80801) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x804) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') 3.872160479s ago: executing program 3 (id=2882): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040), 0x0) 3.149859766s ago: executing program 1 (id=2883): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x6b30, 0xde52, 0x41, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[]) io_uring_enter(r1, 0x7baf, 0xb538, 0x0, &(0x7f0000000140)={[0x5]}, 0x8) 3.048905055s ago: executing program 3 (id=2884): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000", @ANYRES32=r3], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r7, &(0x7f0000000040), 0x0, 0x4000001, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/202) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="50202b449ab4d04ff71971a19417a09928bc4275cf19dd0b250fb4ddcb4bfc97dc5ebafe3e3ae2d976f8759098fa5f4be7eff4f55653eefd88e036a2f105153ae024f421fa1b2317be9c3ed106a2a55bf57762f05dd49a757c4fa474f490da6f65a23e517063cfd66d8d76c6addd28dc841072420fcd1c4f119510e3c95fd418d522c72025fc300a2769fa8143c3bafd5c4aff9cce7f40a25c73273fdedd1da9e848c7dd1de80909d790b8a668cd67a4960da17686b029f6c87774772c767eb82dfb6454dd39dcb1fd29538566e5c0526821f29932c4b74abf4f7063ab88ece8bfe289c7ba8fae9fa5577943af0c59552dd81c24cab1d279669a6484f9f3ce", 0xff) r8 = dup(r1) close_range(0xffffffffffffffff, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x2, 0x0, {0x1, 0x1}}, 0x28) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x44, r10, 0x211, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfffffffd}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048012}, 0x4000004) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.04700703s ago: executing program 9 (id=2885): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0xfffffffffffffe2f) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0xc0) read$alg(r3, &(0x7f0000000040)=""/9, 0x9) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) 1.368260112s ago: executing program 3 (id=2886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x0, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0x9}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0xb8, 'a'}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x1, 0xb4, "e2dfca"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x4, 0xa, 0x27fb, 0xac, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x6, 0x2, {0x7, 0x25, 0x1, 0x1, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x41}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x24, 0x1, 0x8, 0x7, 'I', "b2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x9, 0x2, {0x7, 0x25, 0x1, 0x1, 0x9, 0x3ff}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fsync(r5) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000000040), 0x4) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 739.917061ms ago: executing program 4 (id=2887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r1, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r1, 0xfe01, 0x8, [0x81, 0x8, 0x4, 0x3, 0x8, 0x400, 0xc000, 0x7ff]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FICLONERANGE(r4, 0x4020940d, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)=0x0) r7 = syz_open_procfs$namespace(r6, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) 634.437506ms ago: executing program 8 (id=2888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xb, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) 422.446338ms ago: executing program 4 (id=2889): io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x1e82, 0x12, 0x2, 0x2e8}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setresuid(0x0, 0xee00, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) r6 = io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000080), 0x2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000002c00)) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 9 (id=2890): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f00000002c0)="8cd3f715ec863f81cd55e016dfadddde099afcc882892c66f06973de8edd099fb3abb606b98f0634948f4e972b1dcc5b99004666232a3fc386452d8fb006befb076517a30cbe0db88bca04ef748d1fbc5245027138e4385ae635a157983f5c4b42b6080097534c291ba16681ab31354d4227209e06a87f37d96b38452576091b879ce76a", &(0x7f0000000380)=""/179}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d0000480000000000059078ac1e00010a010100441405030000000000000000ac1e010100004000890bcee0000002e00000010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000a6780000"], 0x0) kernel console output (not intermixed with test programs): 41395][ T9399] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.771598][ T9399] usb 10-1: Product: syz [ 1119.792050][ T9399] usb 10-1: Manufacturer: syz [ 1119.799687][ T9399] usb 10-1: SerialNumber: syz [ 1119.838366][ T9399] usb 10-1: config 0 descriptor?? [ 1120.113450][ T9399] usb-storage 10-1:0.179: USB Mass Storage device detected [ 1120.131524][ T9399] usb-storage 10-1:0.179: device ignored [ 1120.321931][T10505] usb 10-1: USB disconnect, device number 12 [ 1120.703344][T13820] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1123.364554][T14983] lo speed is unknown, defaulting to 1000 [ 1125.020939][T10505] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1125.539465][T14983] lo speed is unknown, defaulting to 1000 [ 1126.989358][T15012] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd8": -EINTR [ 1131.453639][ T973] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1131.663179][ T973] usb 5-1: Using ep0 maxpacket: 32 [ 1131.680096][ T973] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1131.718538][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1131.773341][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.824642][ T973] usb 5-1: config 0 descriptor?? [ 1131.877916][ T973] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1132.504541][ T973] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1132.563528][ T973] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1132.586833][ T973] usb 5-1: media controller created [ 1132.621536][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 1132.875756][T15068] batadv_slave_1: entered promiscuous mode [ 1132.876865][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1132.926554][T15066] batadv_slave_1: left promiscuous mode [ 1133.663739][ T973] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1133.692761][ T973] error writing reg: 0xff, val: 0x00 [ 1133.834638][ T973] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1134.177283][ T973] usb 5-1: USB disconnect, device number 33 [ 1135.906721][T15090] Bluetooth: MGMT ver 1.23 [ 1135.949352][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1135.949374][ T29] audit: type=1326 audit(2000000241.360:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.9.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df8d0a9 code=0x7fc00000 [ 1136.163557][ T29] audit: type=1326 audit(2000000241.360:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.9.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f727df8d0a9 code=0x7fc00000 [ 1136.186228][ T29] audit: type=1326 audit(2000000241.360:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.9.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df8d0a9 code=0x7fc00000 [ 1136.209022][ T29] audit: type=1326 audit(2000000241.360:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.9.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df8d0a9 code=0x7fc00000 [ 1136.275260][ T29] audit: type=1326 audit(2000000241.360:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.9.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df8d0a9 code=0x7fc00000 [ 1136.395882][ T29] audit: type=1326 audit(2000000241.360:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.9.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df8d0a9 code=0x7fc00000 [ 1136.418040][ T29] audit: type=1326 audit(2000000241.360:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.9.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df8d0a9 code=0x7fc00000 [ 1136.705080][T15101] devtmpfs: Too few inodes for current use [ 1138.228731][T15109] program syz.9.2316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1138.267949][T15111] batadv_slave_1: entered promiscuous mode [ 1138.285189][T15110] batadv_slave_1: left promiscuous mode [ 1139.271468][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2320'. [ 1139.881920][T15129] mkiss: ax0: crc mode is auto. [ 1140.423152][T14889] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1140.765473][T14889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1140.810966][T14889] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1140.852257][T15148] FAULT_INJECTION: forcing a failure. [ 1140.852257][T15148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.903782][T14889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 5241, setting to 1024 [ 1140.920492][T15148] CPU: 1 UID: 0 PID: 15148 Comm: syz.4.2326 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1140.920527][T15148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1140.920550][T15148] Call Trace: [ 1140.920559][T15148] [ 1140.920570][T15148] dump_stack_lvl+0x241/0x360 [ 1140.920603][T15148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1140.920634][T15148] ? __pfx__printk+0x10/0x10 [ 1140.920676][T15148] ? snprintf+0xda/0x120 [ 1140.920702][T15148] should_fail_ex+0x40a/0x550 [ 1140.920740][T15148] _copy_to_user+0x31/0xb0 [ 1140.920772][T15148] simple_read_from_buffer+0xca/0x150 [ 1140.920811][T15148] proc_fail_nth_read+0x1e9/0x250 [ 1140.920852][T15148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1140.920892][T15148] ? rw_verify_area+0x243/0x630 [ 1140.920920][T15148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1140.920959][T15148] vfs_read+0x1f8/0xb40 [ 1140.920988][T15148] ? fdget_pos+0x254/0x320 [ 1140.921013][T15148] ? __pfx___mutex_lock+0x10/0x10 [ 1140.921043][T15148] ? __pfx_vfs_read+0x10/0x10 [ 1140.921073][T15148] ? __rcu_read_unlock+0xa1/0x110 [ 1140.921103][T15148] ? __fget_files+0x2a/0x410 [ 1140.921128][T15148] ? __fget_files+0x395/0x410 [ 1140.921150][T15148] ? __fget_files+0x2a/0x410 [ 1140.921187][T15148] ksys_read+0x18f/0x2b0 [ 1140.921219][T15148] ? __pfx_ksys_read+0x10/0x10 [ 1140.921249][T15148] ? do_syscall_64+0x100/0x230 [ 1140.921282][T15148] ? do_syscall_64+0xb6/0x230 [ 1140.921314][T15148] do_syscall_64+0xf3/0x230 [ 1140.921344][T15148] ? clear_bhb_loop+0x35/0x90 [ 1140.921381][T15148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.921412][T15148] RIP: 0033:0x7f172958babc [ 1140.921431][T15148] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1140.921450][T15148] RSP: 002b:00007f172a482030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1140.921473][T15148] RAX: ffffffffffffffda RBX: 00007f17297a5fa0 RCX: 00007f172958babc [ 1140.921490][T15148] RDX: 000000000000000f RSI: 00007f172a4820a0 RDI: 0000000000000004 [ 1140.921504][T15148] RBP: 00007f172a482090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.921517][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.921530][T15148] R13: 0000000000000000 R14: 00007f17297a5fa0 R15: 00007ffea4499d58 [ 1140.921563][T15148] [ 1141.160176][T14889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1141.587208][T14889] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1141.603219][T14889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.612405][T14889] usb 3-1: Product: syz [ 1141.621974][T14889] usb 3-1: Manufacturer: syz [ 1141.626818][T14889] usb 3-1: SerialNumber: syz [ 1141.643416][T14889] usb 3-1: config 0 descriptor?? [ 1141.693580][T15129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1141.701098][T15129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1142.007231][T14889] usb 3-1: ucan: probing device on interface #0 [ 1142.337094][T14889] usb 3-1: ucan: could not read protocol version, ret=-71 [ 1142.344499][T14889] usb 3-1: ucan: probe failed; try to update the device firmware [ 1142.367568][T14889] usb 3-1: USB disconnect, device number 43 [ 1143.037333][T15158] batadv_slave_1: entered promiscuous mode [ 1143.058325][T15157] batadv_slave_1: left promiscuous mode [ 1143.988554][T15171] [U] é [ 1144.656591][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1144.734458][T15186] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2336'. [ 1144.750270][T15196] ALSA: mixer_oss: invalid OSS volume 'P²7{*;à»é+§$p ' [ 1144.757610][T15196] ALSA: mixer_oss: invalid OSS volume '' [ 1144.763499][T15196] ALSA: mixer_oss: invalid OSS volume 'b$Kf®Í7?]ÿ˜‘æ3séX' [ 1144.770700][T15196] ALSA: mixer_oss: invalid OSS volume 'æƒKô×?Fõg' [ 1144.777362][T15196] ALSA: mixer_oss: invalid OSS volume '¢ðš.L!¼tã8©yª»à¿ÈW¶+ûÑ$N§½Jsœ' [ 1145.073598][T15201] ptrace attach of "./syz-executor exec"[12434] was attempted by " [ 1147.051380][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 60 seconds [ 1149.974702][ T29] audit: type=1326 audit(2000000255.390:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.008629][T15238] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 1150.048584][ T29] audit: type=1326 audit(2000000255.390:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.083298][T15238] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1150.111773][ T29] audit: type=1326 audit(2000000255.480:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.257836][ T29] audit: type=1326 audit(2000000255.480:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.280388][ T29] audit: type=1326 audit(2000000255.480:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.393122][ T29] audit: type=1326 audit(2000000255.480:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.439270][ T29] audit: type=1326 audit(2000000255.480:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.513190][ T29] audit: type=1326 audit(2000000255.480:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.573524][ T29] audit: type=1326 audit(2000000255.530:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.657923][ T29] audit: type=1326 audit(2000000255.530:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15236 comm="syz.2.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3891d8d0a9 code=0x7ffc0000 [ 1150.795796][T15247] lo speed is unknown, defaulting to 1000 [ 1150.876762][T15247] lo speed is unknown, defaulting to 1000 [ 1151.397196][T15255] ALSA: mixer_oss: invalid OSS volume 'P²7{*;à»é+§$p ' [ 1151.404353][T15255] ALSA: mixer_oss: invalid OSS volume '' [ 1151.410517][T15255] ALSA: mixer_oss: invalid OSS volume 'b$Kf®Í7?]ÿ˜‘æ3séX' [ 1151.417925][T15255] ALSA: mixer_oss: invalid OSS volume 'æƒKô×?Fõg' [ 1151.424669][T15255] ALSA: mixer_oss: invalid OSS volume '¢ðš.L!¼tã8©yª»à¿ÈW¶+ûÑ$N§½Jsœ' [ 1151.458152][ T973] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1151.642581][ T973] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1151.741554][ T973] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1151.912925][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1152.123573][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1152.166452][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1152.464930][ T973] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1152.588239][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.758185][ T973] usb 3-1: config 0 descriptor?? [ 1152.775146][T15251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1153.649458][ T973] usbhid 3-1:0.0: can't add hid device: -71 [ 1153.690249][ T973] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1154.068978][ T973] usb 3-1: USB disconnect, device number 44 [ 1157.699402][ T977] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1158.271895][ T977] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1158.483307][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.491381][ T977] usb 8-1: Product: syz [ 1159.290442][ T977] usb 8-1: Manufacturer: syz [ 1159.295759][ T977] usb 8-1: SerialNumber: syz [ 1159.304568][ T977] usb 8-1: config 0 descriptor?? [ 1159.330012][ T977] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 013 [ 1159.376045][T15313] lo speed is unknown, defaulting to 1000 [ 1159.409345][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2374'. [ 1159.743411][T14889] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1160.085525][ T977] i2c i2c-1: failure reading functionality [ 1160.093647][ T5912] IPVS: starting estimator thread 0... [ 1160.914339][T14889] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1160.922577][T14889] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.936536][ T977] i2c i2c-1: connected i2c-tiny-usb device [ 1160.957253][ T977] usb 8-1: USB disconnect, device number 13 [ 1161.061682][T15329] IPVS: using max 21 ests per chain, 50400 per kthread [ 1161.083118][T14889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1161.131797][T14889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1161.200779][T14889] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1161.335564][T15333] ALSA: mixer_oss: invalid OSS volume 'P²7{*;à»é+§$p ' [ 1161.343172][T15333] ALSA: mixer_oss: invalid OSS volume '' [ 1161.349273][T15333] ALSA: mixer_oss: invalid OSS volume 'b$Kf®Í7?]ÿ˜‘æ3séX' [ 1161.356576][T15333] ALSA: mixer_oss: invalid OSS volume 'æƒKô×?Fõg' [ 1161.363291][T15333] ALSA: mixer_oss: invalid OSS volume '¢ðš.L!¼tã8©yª»à¿ÈW¶+ûÑ$N§½Jsœ' [ 1161.374945][T14889] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1161.913279][T14889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.238244][T14889] usb 10-1: config 0 descriptor?? [ 1162.552135][T14889] usb 10-1: can't set config #0, error -71 [ 1162.638693][T14889] usb 10-1: USB disconnect, device number 13 [ 1164.541403][T15313] lo speed is unknown, defaulting to 1000 [ 1166.220082][ T977] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1166.229832][T15369] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1166.280595][T15369] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1166.418577][ T977] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1166.473278][ T977] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1166.573418][ T977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1166.896230][ T977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1167.170806][ T977] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1167.445463][ T977] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1167.463149][ T977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.473477][ T5912] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1167.622651][ T977] usb 10-1: config 0 descriptor?? [ 1167.738129][T15365] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1167.952795][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.981675][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.041758][ T5912] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.114912][ T5912] usb 8-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1168.149691][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.191398][ T5912] usb 8-1: config 0 descriptor?? [ 1168.218338][ T977] usbhid 10-1:0.0: can't add hid device: -71 [ 1168.227983][ T977] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1168.284199][ T977] usb 10-1: USB disconnect, device number 14 [ 1168.479201][T15376] pim6reg0: tun_chr_ioctl cmd 2147767519 [ 1169.556975][ T5912] uclogic 0003:5543:0003.0008: item 0 4 0 8 parsing failed [ 1169.606840][ T5912] uclogic 0003:5543:0003.0008: parse failed [ 1169.633698][ T5912] uclogic 0003:5543:0003.0008: probe with driver uclogic failed with error -22 [ 1170.508547][T15410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.257133][ T977] usb 8-1: USB disconnect, device number 14 [ 1172.371792][T15418] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20002 [ 1172.461931][T15420] ALSA: mixer_oss: invalid OSS volume 'P²7{*;à»é+§$p ' [ 1172.469168][T15420] ALSA: mixer_oss: invalid OSS volume '' [ 1172.474959][T15420] ALSA: mixer_oss: invalid OSS volume 'b$Kf®Í7?]ÿ˜‘æ3séX' [ 1172.482161][T15420] ALSA: mixer_oss: invalid OSS volume 'æƒKô×?Fõg' [ 1172.489061][T15420] ALSA: mixer_oss: invalid OSS volume '¢ðš.L!¼tã8©yª»à¿ÈW¶+ûÑ$N§½Jsœ' [ 1175.193291][ T5912] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1175.353576][ T977] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1175.374818][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1175.383694][ T5912] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 1175.437453][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.486099][ T5912] usb 3-1: config 0 descriptor?? [ 1176.483498][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 1176.491842][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1176.512213][ T977] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1176.524168][ T5912] usb 3-1: USB disconnect, device number 45 [ 1176.535043][ T977] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1176.575490][ T977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1176.600684][ T977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1176.634806][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2412'. [ 1176.650383][ T977] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1176.686794][ T977] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1176.692039][T15461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.717424][ T977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.771412][T15462] netlink: 'syz.7.2414': attribute type 1 has an invalid length. [ 1176.800157][T15462] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2414'. [ 1176.936381][ T977] usb 10-1: config 0 descriptor?? [ 1176.945076][T15465] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2414'. [ 1176.955696][T15449] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1177.532742][ T977] usbhid 10-1:0.0: can't add hid device: -71 [ 1177.552624][ T977] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1177.816455][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.816494][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 90 seconds [ 1177.833382][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.879730][ T977] usb 10-1: USB disconnect, device number 15 [ 1181.210906][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2423'. [ 1181.241887][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2423'. [ 1182.373279][ T5958] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1182.439530][T15514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.806382][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 1183.108277][ T5958] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1183.183217][ T5958] usb 3-1: config 179 has no interface number 0 [ 1183.189582][ T5958] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1183.415508][ T5958] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1183.428722][ T5958] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1183.450517][ T5958] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1183.480766][ T5958] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1183.523208][ T5958] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1183.543658][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.592368][T15520] qnx6: unable to read the first superblock [ 1183.603481][T15504] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1184.008496][T15504] ~6þ#: renamed from bridge_slave_0 (while UP) [ 1184.275907][T15530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1184.483619][T13569] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1184.688248][T13569] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1184.732376][T13569] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.823645][T13569] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1184.893848][T13569] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1185.013089][T13569] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1185.219745][T13569] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1185.301201][T13569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.017587][T13569] usb 10-1: config 0 descriptor?? [ 1186.056335][T15534] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1186.119369][T10505] usb 3-1: USB disconnect, device number 46 [ 1186.119438][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1186.119485][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1186.369782][T15556] lo speed is unknown, defaulting to 1000 [ 1186.532069][T13569] usbhid 10-1:0.0: can't add hid device: -71 [ 1186.538454][T13569] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1186.553358][T13569] usb 10-1: USB disconnect, device number 16 [ 1187.339968][T15556] lo speed is unknown, defaulting to 1000 [ 1187.484763][T15567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.143759][T15583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2446'. [ 1189.303915][T14889] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1190.959365][T14889] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1190.990350][T14889] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1191.102124][T14889] usb 10-1: Product: syz [ 1191.122477][T14889] usb 10-1: Manufacturer: syz [ 1191.208974][T14889] usb 10-1: SerialNumber: syz [ 1191.246594][T15590] lo speed is unknown, defaulting to 1000 [ 1191.905910][T14889] usb 10-1: can't set config #4, error -71 [ 1191.941389][T14889] usb 10-1: USB disconnect, device number 17 [ 1193.653503][T15590] lo speed is unknown, defaulting to 1000 [ 1193.787007][ T977] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1193.950884][ T977] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1193.965314][ T977] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1193.987465][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1194.010087][T15618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.058783][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1194.086806][T14889] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1194.657274][ T977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1194.686754][ T977] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1194.735929][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.794910][T14889] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1194.809114][ T977] usb 9-1: config 0 descriptor?? [ 1194.860869][T15601] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1194.867327][T14889] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 1194.909145][T14889] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1194.931301][T14889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1194.940731][T14889] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1194.980227][T14889] usb 3-1: Product: syz [ 1195.000474][T14889] usb 3-1: Manufacturer: syz [ 1195.013197][T14889] usb 3-1: SerialNumber: syz [ 1195.049393][T14889] cdc_mbim 3-1:1.0: skipping garbage [ 1195.423665][ T977] usbhid 9-1:0.0: can't add hid device: -71 [ 1195.430353][ T977] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1195.455696][T15615] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1195.463418][ T977] usb 9-1: USB disconnect, device number 10 [ 1196.318849][T15630] 9pnet: p9_errstr2errno: server reported unknown error Aôþp  [ 1196.576398][T15615] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1198.464093][ T977] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1199.163857][ T977] usb 10-1: config 0 has an invalid interface number: 95 but max is 0 [ 1199.172272][ T977] usb 10-1: config 0 has no interface number 0 [ 1199.188499][T14889] cdc_mbim 3-1:1.0: failed to get mac address [ 1199.203209][ T977] usb 10-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1199.212270][T14889] cdc_mbim 3-1:1.0: bind() failure [ 1199.269351][T14889] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1199.308680][ T977] usb 10-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1199.322131][T14889] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1199.327997][ T977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.871962][ T977] usb 10-1: Product: syz [ 1199.879726][T14889] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1199.892501][ T977] usb 10-1: Manufacturer: syz [ 1199.898582][T14889] usb 3-1: USB disconnect, device number 47 [ 1199.913202][ T977] usb 10-1: SerialNumber: syz [ 1199.948803][ T977] usb 10-1: config 0 descriptor?? [ 1199.953171][T15658] netlink: 'syz.2.2466': attribute type 1 has an invalid length. [ 1200.023694][T15640] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1200.060063][T15658] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2466'. [ 1200.087184][T15660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1200.811615][ T977] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1200.844700][ T977] usb 10-1: MIDIStreaming interface descriptor not found [ 1200.992209][ T977] usb 10-1: USB disconnect, device number 18 [ 1204.633504][T15677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2470'. [ 1205.891811][T14078] udevd[14078]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1206.211647][T15684] batadv_slave_1: entered promiscuous mode [ 1206.255735][T15684] batadv_slave_1: left promiscuous mode [ 1206.643244][ T5912] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1207.042299][T15692] syz.8.2474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1207.057621][T15692] CPU: 1 UID: 0 PID: 15692 Comm: syz.8.2474 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1207.057661][T15692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1207.057677][T15692] Call Trace: [ 1207.057687][T15692] [ 1207.057697][T15692] dump_stack_lvl+0x241/0x360 [ 1207.057731][T15692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1207.057756][T15692] ? __pfx__printk+0x10/0x10 [ 1207.057798][T15692] ? __rcu_read_unlock+0xa1/0x110 [ 1207.057833][T15692] warn_alloc+0x278/0x410 [ 1207.057864][T15692] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 1207.057893][T15692] ? __pfx_warn_alloc+0x10/0x10 [ 1207.057928][T15692] ? __pfx___schedule+0x10/0x10 [ 1207.057959][T15692] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1207.057995][T15692] __vmalloc_node_range_noprof+0x126/0x1380 [ 1207.058027][T15692] ? mark_lock+0x9a/0x360 [ 1207.058065][T15692] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1207.058100][T15692] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1207.058139][T15692] ? irqentry_exit+0x63/0x90 [ 1207.058169][T15692] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1207.058211][T15692] vmalloc_user_noprof+0x74/0x80 [ 1207.058238][T15692] ? xskq_create+0xb6/0x170 [ 1207.058259][T15692] xskq_create+0xb6/0x170 [ 1207.058283][T15692] xsk_init_queue+0xa1/0x100 [ 1207.058322][T15692] xsk_setsockopt+0x4aa/0x810 [ 1207.058359][T15692] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1207.058398][T15692] ? do_sock_setsockopt+0x136/0x720 [ 1207.058429][T15692] ? security_socket_setsockopt+0x18/0x2a0 [ 1207.058464][T15692] ? __pfx_bpf_lsm_socket_setsockopt+0x10/0x10 [ 1207.058497][T15692] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1207.058530][T15692] do_sock_setsockopt+0x3af/0x720 [ 1207.058569][T15692] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1207.058608][T15692] ? __fget_files+0x395/0x410 [ 1207.058631][T15692] ? __fget_files+0x2a/0x410 [ 1207.058672][T15692] __x64_sys_setsockopt+0x1ee/0x280 [ 1207.058712][T15692] do_syscall_64+0xf3/0x230 [ 1207.058742][T15692] ? clear_bhb_loop+0x35/0x90 [ 1207.058779][T15692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.058810][T15692] RIP: 0033:0x7f87a338d0a9 [ 1207.058830][T15692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.058850][T15692] RSP: 002b:00007f87a41dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1207.058875][T15692] RAX: ffffffffffffffda RBX: 00007f87a35a6160 RCX: 00007f87a338d0a9 [ 1207.058892][T15692] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1207.058906][T15692] RBP: 00007f87a340e2a0 R08: 0000000000000052 R09: 0000000000000000 [ 1207.058921][T15692] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.058936][T15692] R13: 0000000000000000 R14: 00007f87a35a6160 R15: 00007fff33e51c28 [ 1207.058970][T15692] [ 1207.059006][T15692] Mem-Info: [ 1207.337368][T15692] active_anon:385 inactive_anon:8637 isolated_anon:0 [ 1207.337368][T15692] active_file:13551 inactive_file:47643 isolated_file:0 [ 1207.337368][T15692] unevictable:768 dirty:124 writeback:0 [ 1207.337368][T15692] slab_reclaimable:6629 slab_unreclaimable:109159 [ 1207.337368][T15692] mapped:33252 shmem:4346 pagetables:1128 [ 1207.337368][T15692] sec_pagetables:0 bounce:0 [ 1207.337368][T15692] kernel_misc_reclaimable:0 [ 1207.337368][T15692] free:1295818 free_pcp:404 free_cma:0 [ 1207.382965][T15692] Node 0 active_anon:1540kB inactive_anon:34548kB active_file:53832kB inactive_file:190572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132708kB dirty:496kB writeback:0kB shmem:15848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11968kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no [ 1207.415731][T15692] Node 1 active_anon:0kB inactive_anon:0kB active_file:372kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:300kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1207.446115][T15692] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.473218][T15692] lowmem_reserve[]: 0 2490 2490 0 0 [ 1207.478470][T15692] Node 0 DMA32 free:1258548kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:34516kB active_file:53556kB inactive_file:190520kB unevictable:1536kB writepending:496kB present:3129332kB managed:2550364kB mlocked:0kB bounce:0kB free_pcp:1588kB local_pcp:896kB free_cma:0kB [ 1207.543095][T15692] lowmem_reserve[]: 0 0 0 0 0 [ 1207.547929][T15692] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:276kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1207.574788][T15692] lowmem_reserve[]: 0 0 0 0 0 [ 1207.579517][T15692] Node 1 Normal free:3909364kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:372kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.608367][T15692] lowmem_reserve[]: 0 0 0 0 0 [ 1207.613128][T15692] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1207.625837][T15692] Node 0 DMA32: 389*4kB (UE) 289*8kB (UME) 614*16kB (UME) 487*32kB (UME) 295*64kB (UME) 162*128kB (UME) 99*256kB (UME) 58*512kB (UME) 42*1024kB (UME) 7*2048kB (UM) 263*4096kB (UM) = 1258524kB [ 1207.644878][T15692] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1207.656409][T15692] Node 1 Normal: 225*4kB (UME) 64*8kB (UME) 51*16kB (UME) 214*32kB (UME) 100*64kB (UME) 33*128kB (UE) 20*256kB (UME) 13*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 945*4096kB (M) = 3909364kB [ 1207.675161][T15692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1207.684742][T15692] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1207.694059][T15692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1207.722830][T15692] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1207.732350][T15692] 65541 total pagecache pages [ 1207.737106][T15692] 0 pages in swap cache [ 1207.741266][T15692] Free swap = 124848kB [ 1207.745488][T15692] Total swap = 124996kB [ 1207.749643][T15692] 2097051 pages RAM [ 1207.753467][T15692] 0 pages HighMem/MovableOnly [ 1207.758157][T15692] 427736 pages reserved [ 1207.762302][T15692] 0 pages cma reserved [ 1207.893406][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 120 seconds [ 1207.907385][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.939845][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1207.962064][ T5912] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 1207.971490][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.984249][ T5912] usb 5-1: config 0 descriptor?? [ 1209.630732][ T5912] wacom 0003:056A:0027.0009: unknown main item tag 0x0 [ 1209.641533][ T5912] wacom 0003:056A:0027.0009: unknown main item tag 0x0 [ 1209.648597][ T5912] wacom 0003:056A:0027.0009: unknown main item tag 0x0 [ 1209.661442][ T5912] wacom 0003:056A:0027.0009: unknown main item tag 0x0 [ 1209.703267][ T5912] wacom 0003:056A:0027.0009: unknown main item tag 0x0 [ 1209.714246][T15702] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 1209.754611][ T5912] wacom 0003:056A:0027.0009: unknown main item tag 0x0 [ 1209.761844][T15702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2478'. [ 1209.791461][ T5912] wacom 0003:056A:0027.0009: unknown main item tag 0x0 [ 1209.806928][ T5912] wacom 0003:056A:0027.0009: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 1209.865786][ T5912] wacom 0003:056A:0027.0009: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.4-1/input0 [ 1210.074874][ T5912] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0027.0009/input/input25 [ 1211.525665][ T5912] usb 5-1: USB disconnect, device number 34 [ 1211.547337][T15715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.861854][T15716] lo speed is unknown, defaulting to 1000 [ 1212.396439][T15721] FAULT_INJECTION: forcing a failure. [ 1212.396439][T15721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.437708][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.8.2483 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1212.437740][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1212.437754][T15721] Call Trace: [ 1212.437763][T15721] [ 1212.437773][T15721] dump_stack_lvl+0x241/0x360 [ 1212.437804][T15721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.437827][T15721] ? __pfx__printk+0x10/0x10 [ 1212.437862][T15721] ? __pfx_lock_release+0x10/0x10 [ 1212.437904][T15721] should_fail_ex+0x40a/0x550 [ 1212.437939][T15721] _copy_from_user+0x2d/0xb0 [ 1212.437968][T15721] copy_msghdr_from_user+0xae/0x680 [ 1212.438001][T15721] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1212.438025][T15721] ? __fget_files+0x2a/0x410 [ 1212.438051][T15721] ? __fget_files+0x2a/0x410 [ 1212.438083][T15721] __sys_sendmsg+0x209/0x350 [ 1212.438123][T15721] ? __pfx___sys_sendmsg+0x10/0x10 [ 1212.438169][T15721] ? do_sys_openat2+0x17a/0x1d0 [ 1212.438218][T15721] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1212.438250][T15721] ? do_syscall_64+0x100/0x230 [ 1212.438283][T15721] ? do_syscall_64+0xb6/0x230 [ 1212.438314][T15721] do_syscall_64+0xf3/0x230 [ 1212.438348][T15721] ? clear_bhb_loop+0x35/0x90 [ 1212.438383][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.438413][T15721] RIP: 0033:0x7f87a338d0a9 [ 1212.438432][T15721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.438451][T15721] RSP: 002b:00007f87a421f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.438475][T15721] RAX: ffffffffffffffda RBX: 00007f87a35a5fa0 RCX: 00007f87a338d0a9 [ 1212.438491][T15721] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1212.438505][T15721] RBP: 00007f87a421f090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.438519][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.438533][T15721] R13: 0000000000000000 R14: 00007f87a35a5fa0 R15: 00007fff33e51c28 [ 1212.438564][T15721] [ 1212.639594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.725812][T15722] batadv_slave_1: entered promiscuous mode [ 1212.732428][T15722] batadv_slave_1: left promiscuous mode [ 1212.925559][T15716] lo speed is unknown, defaulting to 1000 [ 1214.565865][T15740] netlink: 'syz.2.2486': attribute type 1 has an invalid length. [ 1214.574246][T15740] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2486'. [ 1216.483171][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1216.483189][ T29] audit: type=1326 audit(2000000321.870:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.7.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1367d8d0a9 code=0x7fc00000 [ 1216.873395][ T5884] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1217.174967][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2494'. [ 1217.603219][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 1217.614489][ T5884] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 1217.663276][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.703536][ T5884] usb 3-1: config 0 descriptor?? [ 1217.742207][ T5884] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1217.781477][ T5884] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1217.801767][ T5884] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 1218.105018][ T5912] usb 3-1: USB disconnect, device number 48 [ 1220.523253][T15781] batadv_slave_1: entered promiscuous mode [ 1220.549029][T15781] batadv_slave_1: left promiscuous mode [ 1222.515136][T15797] lo speed is unknown, defaulting to 1000 [ 1224.323468][T15404] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1225.431588][T15404] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1225.447902][T15404] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.458933][T15404] usb 10-1: Product: syz [ 1225.467926][T15404] usb 10-1: Manufacturer: syz [ 1225.472687][T15404] usb 10-1: SerialNumber: syz [ 1225.486589][T15404] usb 10-1: config 0 descriptor?? [ 1225.534817][T15803] lo speed is unknown, defaulting to 1000 [ 1225.547130][T15797] lo speed is unknown, defaulting to 1000 [ 1226.125531][T15404] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1228.468379][T15404] usb 10-1: USB disconnect, device number 19 [ 1228.700853][T15823] 9pnet_fd: Insufficient options for proto=fd [ 1229.096170][T15803] lo speed is unknown, defaulting to 1000 [ 1230.471521][T15841] batadv_slave_1: entered promiscuous mode [ 1230.579145][T15840] batadv_slave_1: left promiscuous mode [ 1232.114914][T15857] xt_limit: Overflow, try lower: 0/0 [ 1232.825259][T10505] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1234.002875][T10505] usb 10-1: device descriptor read/all, error -71 [ 1235.154966][T15886] batadv_slave_1: entered promiscuous mode [ 1235.554196][T15884] batadv_slave_1: left promiscuous mode [ 1236.241038][ T5912] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1237.098956][T15902] netlink: 'syz.2.2529': attribute type 1 has an invalid length. [ 1237.107469][T15902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2529'. [ 1237.593140][ T5912] usb 9-1: Using ep0 maxpacket: 16 [ 1237.635708][ T5912] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1237.646081][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1237.658438][ T5912] usb 9-1: can't read configurations, error -71 [ 1237.976598][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 150 seconds [ 1239.257609][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.264280][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.495106][T15404] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1239.844180][T15929] batadv_slave_1: entered promiscuous mode [ 1239.859419][T15928] batadv_slave_1: left promiscuous mode [ 1239.876621][T15404] usb 3-1: not running at top speed; connect to a high speed hub [ 1239.927868][T15404] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1240.036922][T15404] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1240.130900][T15404] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1240.252029][T15404] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.40 [ 1240.268053][T15404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.275057][T15935] loop5: detected capacity change from 0 to 8 [ 1240.276830][T15404] usb 3-1: Product: syz [ 1240.443131][T15404] usb 3-1: Manufacturer: Љ [ 1240.447617][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.457182][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.457940][T15404] usb 3-1: SerialNumber: syz [ 1240.475280][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.484534][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.494075][T15916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1240.496801][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.510512][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.519211][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.528466][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.541276][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.550537][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.558847][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.568165][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.577411][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.583749][T15916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1240.586674][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.618083][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.627409][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.638862][T15935] ldm_validate_partition_table(): Disk read failed. [ 1240.663531][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.672778][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.681520][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1240.690814][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1240.704524][T15935] Dev loop5: unable to read RDB block 0 [ 1240.717849][T15935] loop5: unable to read partition table [ 1240.733385][T15935] loop5: partition table beyond EOD, truncated [ 1240.756019][T15935] loop_reread_partitions: partition scan of loop5 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1240.825387][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2543'. [ 1240.951272][T15943] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.136332][T15916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.387959][T15943] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2545'. [ 1241.437000][T15916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.927564][T15404] usbhid 3-1:1.0: can't add hid device: -71 [ 1241.933737][T15404] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1241.956998][T15404] usb 3-1: USB disconnect, device number 49 [ 1242.531944][T15963] xt_TCPMSS: Only works on TCP SYN packets [ 1243.217690][T15970] lo speed is unknown, defaulting to 1000 [ 1244.493410][T15970] lo speed is unknown, defaulting to 1000 [ 1244.663341][T15988] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.082358][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2562'. [ 1247.201542][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 1247.230516][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2559'. [ 1247.258959][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2560'. [ 1247.312371][T16011] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2560'. [ 1249.077786][T16037] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.652689][T16048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1250.890922][T16072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1250.904264][T16072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1250.921948][T16072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1250.939091][T16072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1250.951967][T16072] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1250.959913][T16072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1250.971180][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2576'. [ 1251.041113][T16071] lo speed is unknown, defaulting to 1000 [ 1251.049824][T16066] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2576'. [ 1251.781589][T16082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.035339][T16084] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 1252.307726][T16092] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2584'. [ 1252.337053][T16071] lo speed is unknown, defaulting to 1000 [ 1253.185735][T13820] Bluetooth: hci4: command tx timeout [ 1253.709622][T16071] chnl_net:caif_netlink_parms(): no params data found [ 1253.763329][T16103] input: syz0 as /devices/virtual/input/input28 [ 1254.304722][T16071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.311898][T16071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.355499][T16071] bridge_slave_0: entered allmulticast mode [ 1254.362773][T16071] bridge_slave_0: entered promiscuous mode [ 1254.439595][T16071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.510243][T16071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.572724][T16071] bridge_slave_1: entered allmulticast mode [ 1254.622609][T16071] bridge_slave_1: entered promiscuous mode [ 1254.862890][T16071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.926609][T16071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.037290][T16071] team0: Port device team_slave_0 added [ 1255.049180][T16071] team0: Port device team_slave_1 added [ 1255.063148][T13569] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1255.207876][T16126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1255.238091][T16071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.253243][T13820] Bluetooth: hci4: command tx timeout [ 1255.337327][T13569] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1255.346466][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.402582][T13569] usb 5-1: config 0 has no interface number 0 [ 1255.405748][T16130] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 1255.408946][T13569] usb 5-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1255.431472][T16071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.442237][T13569] usb 5-1: config 0 interface 188 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 1255.488865][T16071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.525912][T13569] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 1255.585627][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.648772][T13569] usb 5-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1255.767476][T13569] usb 5-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 1255.811559][T16071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.839733][T13569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.225173][T13569] usb 5-1: Product: syz [ 1256.229489][T13569] usb 5-1: Manufacturer: syz [ 1256.263186][T13569] usb 5-1: SerialNumber: syz [ 1256.286638][T13569] usb 5-1: config 0 descriptor?? [ 1256.294566][T16121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1256.313873][T13569] option 5-1:0.188: GSM modem (1-port) converter detected [ 1256.471145][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'. [ 1256.519649][T16071] hsr_slave_0: entered promiscuous mode [ 1256.535871][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2593'. [ 1256.545281][T16071] hsr_slave_1: entered promiscuous mode [ 1256.593965][T16071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1256.615444][T16071] Cannot create hsr debugfs directory [ 1256.647697][T16121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.656509][T16121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.798281][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.807534][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.816647][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.825728][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.834775][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.843833][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.852814][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.861867][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.870977][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1256.880036][T16142] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1257.356317][T13820] Bluetooth: hci4: command tx timeout [ 1257.389017][ T973] usb 5-1: USB disconnect, device number 35 [ 1257.414463][ T973] option 5-1:0.188: device disconnected [ 1258.003357][T16154] FAULT_INJECTION: forcing a failure. [ 1258.003357][T16154] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.056821][T16154] CPU: 1 UID: 0 PID: 16154 Comm: syz.8.2600 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1258.056852][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1258.056866][T16154] Call Trace: [ 1258.056874][T16154] [ 1258.056884][T16154] dump_stack_lvl+0x241/0x360 [ 1258.056917][T16154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.056939][T16154] ? __pfx__printk+0x10/0x10 [ 1258.056988][T16154] should_fail_ex+0x40a/0x550 [ 1258.057024][T16154] should_failslab+0xac/0x100 [ 1258.057058][T16154] ? skb_clone+0x20c/0x390 [ 1258.057077][T16154] kmem_cache_alloc_noprof+0x70/0x380 [ 1258.057118][T16154] skb_clone+0x20c/0x390 [ 1258.057142][T16154] __netlink_deliver_tap+0x3c4/0x7f0 [ 1258.057177][T16154] ? netlink_deliver_tap+0x2e/0x1b0 [ 1258.057198][T16154] netlink_deliver_tap+0x19d/0x1b0 [ 1258.057220][T16154] netlink_unicast+0x7c4/0x990 [ 1258.057262][T16154] ? __pfx_netlink_unicast+0x10/0x10 [ 1258.057291][T16154] ? __virt_addr_valid+0x45f/0x530 [ 1258.057325][T16154] ? __phys_addr_symbol+0x2f/0x70 [ 1258.057355][T16154] ? __check_object_size+0x47a/0x730 [ 1258.057394][T16154] netlink_sendmsg+0x8de/0xcb0 [ 1258.057430][T16154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.057488][T16154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.057509][T16154] __sock_sendmsg+0x221/0x270 [ 1258.057539][T16154] ____sys_sendmsg+0x53a/0x860 [ 1258.057582][T16154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1258.057613][T16154] ? __fget_files+0x2a/0x410 [ 1258.057639][T16154] ? __fget_files+0x2a/0x410 [ 1258.057671][T16154] __sys_sendmsg+0x269/0x350 [ 1258.057710][T16154] ? __pfx___sys_sendmsg+0x10/0x10 [ 1258.057762][T16154] ? do_sys_openat2+0x17a/0x1d0 [ 1258.057813][T16154] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1258.057851][T16154] ? do_syscall_64+0x100/0x230 [ 1258.057883][T16154] ? do_syscall_64+0xb6/0x230 [ 1258.057914][T16154] do_syscall_64+0xf3/0x230 [ 1258.057942][T16154] ? clear_bhb_loop+0x35/0x90 [ 1258.057977][T16154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.058006][T16154] RIP: 0033:0x7f87a338d0a9 [ 1258.058026][T16154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.058043][T16154] RSP: 002b:00007f87a421f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.058067][T16154] RAX: ffffffffffffffda RBX: 00007f87a35a5fa0 RCX: 00007f87a338d0a9 [ 1258.058083][T16154] RDX: 0000000020000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 1258.058097][T16154] RBP: 00007f87a421f090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.058111][T16154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.058124][T16154] R13: 0000000000000000 R14: 00007f87a35a5fa0 R15: 00007fff33e51c28 [ 1258.058157][T16154] [ 1259.421738][T13820] Bluetooth: hci4: command tx timeout [ 1260.916506][ T29] audit: type=1326 audit(2000000366.330:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1260.938102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.996266][ T29] audit: type=1326 audit(2000000366.330:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1261.017854][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.246209][ T29] audit: type=1326 audit(2000000366.330:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1261.267722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.319334][ T29] audit: type=1326 audit(2000000366.330:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1261.341586][ T29] audit: type=1326 audit(2000000366.330:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1261.384609][ T29] audit: type=1326 audit(2000000366.330:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1261.416048][ T29] audit: type=1326 audit(2000000366.330:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1261.437819][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.523502][ T29] audit: type=1326 audit(2000000366.330:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1261.587686][ T29] audit: type=1326 audit(2000000366.330:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1262.453482][ T29] audit: type=1326 audit(2000000366.330:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16175 comm="syz.8.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a338d0a9 code=0x7ffc0000 [ 1263.220177][T16195] devtmpfs: Too few inodes for current use [ 1263.629607][T16200] FAULT_INJECTION: forcing a failure. [ 1263.629607][T16200] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.331855][T16200] CPU: 0 UID: 0 PID: 16200 Comm: syz.4.2614 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1264.331885][T16200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1264.331897][T16200] Call Trace: [ 1264.331915][T16200] [ 1264.331924][T16200] dump_stack_lvl+0x241/0x360 [ 1264.331952][T16200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1264.331971][T16200] ? __pfx__printk+0x10/0x10 [ 1264.332001][T16200] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1264.332032][T16200] ? __pfx___might_resched+0x10/0x10 [ 1264.332060][T16200] should_fail_ex+0x40a/0x550 [ 1264.332091][T16200] should_failslab+0xac/0x100 [ 1264.332122][T16200] ? ep_insert+0x4d7/0x1ab0 [ 1264.332148][T16200] kmem_cache_alloc_noprof+0x70/0x380 [ 1264.332186][T16200] ep_insert+0x4d7/0x1ab0 [ 1264.332226][T16200] ? __pfx_ep_insert+0x10/0x10 [ 1264.332252][T16200] ? __pfx___mutex_lock+0x10/0x10 [ 1264.332289][T16200] ? bpf_lsm_capable+0x9/0x10 [ 1264.332325][T16200] do_epoll_ctl+0x8bc/0xf80 [ 1264.332359][T16200] __x64_sys_epoll_ctl+0x161/0x1a0 [ 1264.332389][T16200] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1264.332418][T16200] ? do_syscall_64+0x100/0x230 [ 1264.332448][T16200] ? do_syscall_64+0xb6/0x230 [ 1264.332473][T16200] do_syscall_64+0xf3/0x230 [ 1264.332495][T16200] ? clear_bhb_loop+0x35/0x90 [ 1264.332523][T16200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.332547][T16200] RIP: 0033:0x7f172958d0a9 [ 1264.332564][T16200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.332579][T16200] RSP: 002b:00007f172a482038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1264.332598][T16200] RAX: ffffffffffffffda RBX: 00007f17297a5fa0 RCX: 00007f172958d0a9 [ 1264.332612][T16200] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1264.332623][T16200] RBP: 00007f172a482090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.332634][T16200] R10: 0000400000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1264.332645][T16200] R13: 0000000000000000 R14: 00007f17297a5fa0 R15: 00007ffea4499d58 [ 1264.332672][T16200] [ 1267.073993][T16220] sz1: rxe_newlink: already configured on lo [ 1267.127885][T16220] »»»»»»: renamed from lo (while UP) [ 1267.850805][T16212] netdevsim netdevsim9: Direct firmware load for . [ 1267.850805][T16212] failed with error -2 [ 1267.903488][T16212] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1267.903488][T16212] [ 1268.054442][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 180 seconds [ 1268.663879][T16225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2622'. [ 1268.680724][T16071] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1268.826031][T16071] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1268.937515][T16071] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1269.119813][T16071] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1270.453452][ T5958] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1270.688752][ T5958] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1270.807631][ T5958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.089525][ T5958] usb 10-1: config 0 descriptor?? [ 1271.273982][T16071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.364533][T16071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.444069][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.451427][T13718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.478484][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.485712][ T7725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.636677][ T5958] [drm:udl_init] *ERROR* Selecting channel failed [ 1272.223053][ T5958] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1272.240186][ T5958] [drm] Initialized udl on minor 2 [ 1272.266036][T16272] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2632'. [ 1272.287205][ T5958] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1272.347165][ T5958] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1272.405681][T16272] input: syz1 as /devices/virtual/input/input30 [ 1272.423458][ T5958] usb 10-1: USB disconnect, device number 22 [ 1272.432632][T15404] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1272.463749][T15404] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1272.789652][T16071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.545396][T16071] veth0_vlan: entered promiscuous mode [ 1273.617943][T16071] veth1_vlan: entered promiscuous mode [ 1273.739702][T16071] veth0_macvtap: entered promiscuous mode [ 1273.787332][T16071] veth1_macvtap: entered promiscuous mode [ 1273.927354][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.973510][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.998974][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.583034][T16304] syz.9.2637: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1274.598240][T16304] CPU: 1 UID: 0 PID: 16304 Comm: syz.9.2637 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1274.598273][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1274.598289][T16304] Call Trace: [ 1274.598300][T16304] [ 1274.598311][T16304] dump_stack_lvl+0x241/0x360 [ 1274.598345][T16304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.598369][T16304] ? __pfx__printk+0x10/0x10 [ 1274.598413][T16304] ? __rcu_read_unlock+0xa1/0x110 [ 1274.598448][T16304] warn_alloc+0x278/0x410 [ 1274.598479][T16304] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 1274.598508][T16304] ? __pfx_warn_alloc+0x10/0x10 [ 1274.598537][T16304] ? kasan_save_track+0x3f/0x80 [ 1274.598566][T16304] ? __kasan_kmalloc+0x98/0xb0 [ 1274.598597][T16304] ? xsk_setsockopt+0x4aa/0x810 [ 1274.598630][T16304] ? do_sock_setsockopt+0x3af/0x720 [ 1274.598662][T16304] ? __x64_sys_setsockopt+0x1ee/0x280 [ 1274.598693][T16304] ? do_syscall_64+0xf3/0x230 [ 1274.598720][T16304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.598762][T16304] __vmalloc_node_range_noprof+0x126/0x1380 [ 1274.598829][T16304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1274.598863][T16304] ? __kasan_kmalloc+0x98/0xb0 [ 1274.598900][T16304] vmalloc_user_noprof+0x74/0x80 [ 1274.598928][T16304] ? xskq_create+0xb6/0x170 [ 1274.598950][T16304] xskq_create+0xb6/0x170 [ 1274.598974][T16304] xsk_init_queue+0xa1/0x100 [ 1274.599014][T16304] xsk_setsockopt+0x4aa/0x810 [ 1274.599052][T16304] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1274.599103][T16304] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1274.599137][T16304] do_sock_setsockopt+0x3af/0x720 [ 1274.599177][T16304] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1274.599210][T16304] ? __rcu_read_unlock+0xa1/0x110 [ 1274.599244][T16304] ? __fget_files+0x395/0x410 [ 1274.599265][T16304] ? __fget_files+0x2a/0x410 [ 1274.599298][T16304] __x64_sys_setsockopt+0x1ee/0x280 [ 1274.599347][T16304] do_syscall_64+0xf3/0x230 [ 1274.599377][T16304] ? clear_bhb_loop+0x35/0x90 [ 1274.599413][T16304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.599445][T16304] RIP: 0033:0x7f727df8d0a9 [ 1274.599466][T16304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.599485][T16304] RSP: 002b:00007f727ed28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1274.599510][T16304] RAX: ffffffffffffffda RBX: 00007f727e1a6240 RCX: 00007f727df8d0a9 [ 1274.599528][T16304] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1274.599542][T16304] RBP: 00007f727e00e2a0 R08: 0000000000000052 R09: 0000000000000000 [ 1274.599557][T16304] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1274.599571][T16304] R13: 0000000000000000 R14: 00007f727e1a6240 R15: 00007fff1dc3aef8 [ 1274.599605][T16304] [ 1274.684193][T15404] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1274.687302][T16304] Mem-Info: [ 1274.697694][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.697716][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.697737][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.697773][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.697790][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.697810][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.697827][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.697848][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.697864][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.699425][T16071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.704087][T16304] active_anon:363 inactive_anon:11866 isolated_anon:0 [ 1274.704087][T16304] active_file:13617 inactive_file:47612 isolated_file:0 [ 1274.704087][T16304] unevictable:768 dirty:98 writeback:0 [ 1274.704087][T16304] slab_reclaimable:6638 slab_unreclaimable:111822 [ 1274.704087][T16304] mapped:47581 shmem:7178 pagetables:1191 [ 1274.704087][T16304] sec_pagetables:0 bounce:0 [ 1274.704087][T16304] kernel_misc_reclaimable:0 [ 1274.704087][T16304] free:1275525 free_pcp:2361 free_cma:0 [ 1274.704150][T16304] Node 0 active_anon:1452kB inactive_anon:47460kB active_file:54096kB inactive_file:190448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:189992kB dirty:392kB writeback:0kB shmem:27176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:4764kB sec_pagetables:0kB all_unreclaimable? no [ 1274.704207][T16304] Node 1 active_anon:0kB inactive_anon:4kB active_file:372kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:332kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1274.704261][T16304] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.704322][T16304] lowmem_reserve[]: 0 2490 2490 0 0 [ 1274.704379][T16304] Node 0 DMA32 free:1177852kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:1448kB inactive_anon:47428kB active_file:53820kB inactive_file:190396kB unevictable:1536kB writepending:392kB present:3129332kB managed:2550364kB mlocked:0kB bounce:0kB free_pcp:9000kB local_pcp:8160kB free_cma:0kB [ 1274.704443][T16304] lowmem_reserve[]: [ 1274.733354][T16291] pim6reg0: tun_chr_ioctl cmd 2147767519 [ 1274.734203][T16304] 0 [ 1274.828869][ T5958] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1274.842612][T16304] 0 [ 1274.873062][T15404] usb 5-1: Using ep0 maxpacket: 8 [ 1274.878766][T16304] 0 0 0 [ 1274.886530][T15404] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1274.892316][T16304] [ 1274.922932][T15404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.932478][T16304] Node 0 [ 1274.969590][T15404] usb 5-1: Product: syz [ 1274.973126][T16304] Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:276kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1274.973184][T16304] lowmem_reserve[]: [ 1274.991362][T15404] usb 5-1: Manufacturer: syz [ 1275.081486][T16304] 0 [ 1275.123432][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 1275.169561][T16304] 0 0 0 0 [ 1275.257304][T16304] Node 1 Normal free:3908888kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:372kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:440kB local_pcp:0kB free_cma:0kB [ 1275.286449][T16304] lowmem_reserve[]: 0 0 0 0 0 [ 1275.291245][T16304] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1275.304328][T16304] Node 0 DMA32: 35*4kB (UME) 241*8kB (UME) 220*16kB (UE) 249*32kB (UME) 247*64kB (UME) 158*128kB (UME) 64*256kB (UME) 41*512kB (UME) 19*1024kB (UME) 7*2048kB (UM) 260*4096kB (M) = 1185716kB [ 1275.323417][T16304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1275.334433][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.335730][T16304] Node 1 Normal: 222*4kB (UE) 62*8kB (UME) 51*16kB (UME) 206*32kB (UE) 97*64kB (UE) 33*128kB (UE) 20*256kB (UME) 13*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 945*4096kB (M) = 3908888kB [ 1275.363454][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.364356][T16304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.383714][T16304] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1275.393489][T16304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.404224][T16304] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1275.413726][T16304] 68427 total pagecache pages [ 1275.416120][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.418437][T16304] 0 pages in swap cache [ 1275.433311][T16304] Free swap = 124832kB [ 1275.434285][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1275.437476][T16304] Total swap = 124996kB [ 1275.454795][T16304] 2097051 pages RAM [ 1275.458630][T16304] 0 pages HighMem/MovableOnly [ 1275.463406][T16304] 427736 pages reserved [ 1275.467175][T15404] usb 5-1: SerialNumber: syz [ 1275.467615][T16304] 0 pages cma reserved [ 1275.492609][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.504516][T15404] usb 5-1: config 0 descriptor?? [ 1275.524753][ T5958] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1275.549059][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.578141][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.613004][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.622904][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.634067][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.644360][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.655524][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.671946][ T5958] usb 3-1: config 0 descriptor?? [ 1275.683502][T16071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.709084][T16071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.722069][T15404] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1275.731383][T16071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.755530][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1275.782303][T16071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.792865][T16071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.802448][T16071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.811402][T16071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.507527][ T973] Process accounting resumed [ 1276.575551][ T5958] usbhid 3-1:0.0: can't add hid device: -71 [ 1276.581802][ T5958] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1276.598895][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.626196][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.636090][ T5958] usb 3-1: USB disconnect, device number 50 [ 1276.733296][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.763549][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.831460][T15404] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1278.227980][T13820] Bluetooth: hci4: command tx timeout [ 1278.961665][ T5884] usb 5-1: USB disconnect, device number 36 [ 1281.033071][T16345] »»»»»» speed is unknown, defaulting to 1000 [ 1281.316079][T16347] netlink: 'syz.9.2651': attribute type 1 has an invalid length. [ 1281.336090][T16347] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2651'. [ 1281.587960][T16345] »»»»»» speed is unknown, defaulting to 1000 [ 1283.381759][T16367] pim6reg0: tun_chr_ioctl cmd 2147767519 [ 1286.672094][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'. [ 1287.576359][T16396] netlink: 'syz.8.2665': attribute type 10 has an invalid length. [ 1287.852737][T16396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.871086][T16396] bond0: (slave team0): Enslaving as an active interface with an up link [ 1291.000564][T16431] FAULT_INJECTION: forcing a failure. [ 1291.000564][T16431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.051347][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.4.2675 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1291.051378][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1291.051393][T16431] Call Trace: [ 1291.051401][T16431] [ 1291.051411][T16431] dump_stack_lvl+0x241/0x360 [ 1291.051442][T16431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1291.051464][T16431] ? __pfx__printk+0x10/0x10 [ 1291.051504][T16431] ? snprintf+0xda/0x120 [ 1291.051529][T16431] should_fail_ex+0x40a/0x550 [ 1291.051564][T16431] _copy_to_user+0x31/0xb0 [ 1291.051594][T16431] simple_read_from_buffer+0xca/0x150 [ 1291.051632][T16431] proc_fail_nth_read+0x1e9/0x250 [ 1291.051669][T16431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1291.051707][T16431] ? rw_verify_area+0x243/0x630 [ 1291.051733][T16431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1291.051770][T16431] vfs_read+0x1f8/0xb40 [ 1291.051798][T16431] ? fdget_pos+0x254/0x320 [ 1291.051821][T16431] ? __pfx___mutex_lock+0x10/0x10 [ 1291.051849][T16431] ? __pfx_vfs_read+0x10/0x10 [ 1291.051881][T16431] ? __fget_files+0x2a/0x410 [ 1291.051905][T16431] ? __fget_files+0x395/0x410 [ 1291.051925][T16431] ? __fget_files+0x2a/0x410 [ 1291.051957][T16431] ksys_read+0x18f/0x2b0 [ 1291.051986][T16431] ? __pfx_ksys_read+0x10/0x10 [ 1291.052014][T16431] ? do_syscall_64+0x100/0x230 [ 1291.052045][T16431] ? do_syscall_64+0xb6/0x230 [ 1291.052076][T16431] do_syscall_64+0xf3/0x230 [ 1291.052111][T16431] ? clear_bhb_loop+0x35/0x90 [ 1291.052146][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.052175][T16431] RIP: 0033:0x7f172958babc [ 1291.052194][T16431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1291.052211][T16431] RSP: 002b:00007f172a482030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1291.052234][T16431] RAX: ffffffffffffffda RBX: 00007f17297a5fa0 RCX: 00007f172958babc [ 1291.052249][T16431] RDX: 000000000000000f RSI: 00007f172a4820a0 RDI: 0000000000000004 [ 1291.052263][T16431] RBP: 00007f172a482090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.052276][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.052289][T16431] R13: 0000000000000000 R14: 00007f17297a5fa0 R15: 00007ffea4499d58 [ 1291.052321][T16431] [ 1291.274988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.734620][T16448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input31 [ 1291.820629][T16447] pim6reg0: tun_chr_ioctl cmd 2147767519 [ 1291.983495][T15404] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1292.313344][T15404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.346606][T15404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.406344][T15404] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1292.644274][T15404] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.662610][T15404] usb 10-1: config 0 descriptor?? [ 1292.829577][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 1292.839823][T16448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2678'. [ 1293.324280][T15404] hid-led 0003:0FC5:B080.000A: unknown main item tag 0x0 [ 1294.262829][T15404] usb 10-1: USB disconnect, device number 23 [ 1294.265096][ T5884] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1294.483144][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 1294.504344][ T5884] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1294.537725][ T5884] usb 5-1: config 179 has no interface number 0 [ 1294.562689][ T5884] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1294.605408][ T5884] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1294.655519][ T5884] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1294.687586][ T5884] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1294.773306][ T5884] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1294.860775][ T5884] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1294.891596][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.983516][T16462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1295.323533][T16490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.332547][T16490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.463617][T10505] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input32 [ 1295.859761][ T5884] usb 5-1: USB disconnect, device number 37 [ 1295.859824][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1295.874195][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1296.041095][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2696'. [ 1296.683290][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2696'. [ 1297.112630][T16517] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2701'. [ 1298.133752][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 210 seconds [ 1298.654233][ T5884] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1298.986132][ T5884] usb 9-1: Using ep0 maxpacket: 16 [ 1299.017548][ T5884] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1299.182135][ T5884] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1299.266223][ T5884] usb 9-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 1299.293218][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.331098][ T5884] usb 9-1: Product: syz [ 1299.338267][ T5884] usb 9-1: Manufacturer: syz [ 1299.349133][ T5884] usb 9-1: SerialNumber: syz [ 1300.662115][ T5884] usbhid 9-1:1.0: can't add hid device: -71 [ 1300.678502][ T5884] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1300.711160][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.717962][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.760709][ T5884] usb 9-1: USB disconnect, device number 13 [ 1301.538882][T16566] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1301.538882][T16566] The task syz.4.2716 (16566) triggered the difference, watch for misbehavior. [ 1303.018761][T16582] netlink: 'syz.9.2719': attribute type 39 has an invalid length. [ 1303.280830][T16584] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2720'. [ 1303.330404][T16584] gretap0: entered promiscuous mode [ 1303.649051][T16592] devtmpfs: Too few inodes for current use [ 1305.073385][ T5958] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1305.372214][ T5958] usb 5-1: device descriptor read/64, error -71 [ 1306.164071][ T5958] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1306.483242][ T5958] usb 5-1: device descriptor read/64, error -71 [ 1306.591224][T16626] SET target dimension over the limit! [ 1306.685196][ T5958] usb usb5-port1: attempt power cycle [ 1306.755403][T16627] netlink: 'syz.8.2731': attribute type 39 has an invalid length. [ 1307.054480][ T5958] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1307.101318][ T5958] usb 5-1: device descriptor read/8, error -71 [ 1307.313189][T15404] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1307.343224][ T9399] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1307.353091][ T5958] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1307.373884][ T5958] usb 5-1: device descriptor read/8, error -71 [ 1307.470647][T15404] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1307.497779][ T5958] usb usb5-port1: unable to enumerate USB device [ 1307.506352][T15404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.523120][ T9399] usb 3-1: Using ep0 maxpacket: 16 [ 1307.533323][ T9399] usb 3-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 1307.553253][ T9399] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.564921][T15404] usb 4-1: config 0 descriptor?? [ 1307.613178][ T9399] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 1307.644772][ T9399] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1307.668219][ T9399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1307.694914][ T9399] usb 3-1: SerialNumber: syz [ 1307.820666][ T9399] cdc_subset 3-1:1.0: probe with driver cdc_subset failed with error -22 [ 1308.534254][T15404] usb 4-1: can't set first interface for hiFace device. [ 1308.571110][T15404] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1308.605317][ T5884] usb 3-1: USB disconnect, device number 51 [ 1308.649285][T15404] usb 4-1: USB disconnect, device number 13 [ 1311.105362][T16670] devtmpfs: Too few inodes for current use [ 1311.244208][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1311.244228][ T29] audit: type=1326 audit(2000000416.650:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1311.405983][ T29] audit: type=1326 audit(2000000416.650:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1311.548045][ T29] audit: type=1326 audit(2000000416.650:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1311.714470][ T29] audit: type=1326 audit(2000000416.650:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1311.779553][ T29] audit: type=1326 audit(2000000416.650:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1311.843999][ T29] audit: type=1326 audit(2000000416.650:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1311.865675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.918418][ T29] audit: type=1326 audit(2000000416.650:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1311.997172][ T29] audit: type=1326 audit(2000000416.650:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1312.672290][ T29] audit: type=1326 audit(2000000416.650:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1312.863651][ T29] audit: type=1326 audit(2000000416.650:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16652 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37bf8d0a9 code=0x7ffc0000 [ 1313.077439][ T5958] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1313.209492][T16689] fuse: Bad value for 'fd' [ 1313.390139][ T5958] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1313.933471][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.304241][ T5958] usb 4-1: config 0 descriptor?? [ 1314.653204][T15404] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1314.735187][ T5958] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1314.780642][ T5958] [drm] Initialized udl on minor 2 [ 1314.828580][T15404] usb 10-1: device descriptor read/64, error -71 [ 1314.946455][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.984509][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.798506][T16680] delete_channel: no stack [ 1316.003801][T15404] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1316.014694][ T5958] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1316.023613][ T5958] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1316.037903][ T5912] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1316.055067][ T5958] usb 4-1: USB disconnect, device number 14 [ 1316.061387][ T5912] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1316.072567][T16700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1316.163920][T15404] usb 10-1: device descriptor read/64, error -71 [ 1316.293384][T15404] usb usb10-port1: attempt power cycle [ 1316.633322][T15404] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1316.714978][T15404] usb 10-1: device descriptor read/8, error -71 [ 1317.003228][T15404] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1317.064075][T15404] usb 10-1: device descriptor read/8, error -71 [ 1317.173605][T15404] usb usb10-port1: unable to enumerate USB device [ 1317.853336][ T977] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1318.883103][ T977] usb 9-1: Using ep0 maxpacket: 8 [ 1319.003310][ T977] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1319.023095][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.048780][ T977] usb 9-1: Product: syz [ 1319.062676][ T977] usb 9-1: Manufacturer: syz [ 1319.092901][ T977] usb 9-1: SerialNumber: syz [ 1319.118604][ T977] usb 9-1: config 0 descriptor?? [ 1319.353724][ T977] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1319.594280][T16713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.733696][T16713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.043192][T10505] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1321.323329][T10505] usb 4-1: device descriptor read/64, error -71 [ 1322.053311][T10505] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1322.154226][ T977] usb write operation failed. (-71) [ 1322.205037][ T977] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1322.265501][ T977] dvbdev: DVB: registering new adapter (Terratec H7) [ 1322.316706][ T977] usb 9-1: media controller created [ 1322.323793][ T977] usb read operation failed. (-71) [ 1322.376698][ T977] usb write operation failed. (-71) [ 1322.383837][T10505] usb 4-1: device descriptor read/64, error -71 [ 1322.404290][ T977] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1322.525100][T10505] usb usb4-port1: attempt power cycle [ 1323.196586][ T977] usb 9-1: USB disconnect, device number 14 [ 1323.404530][T10505] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1323.464987][T10505] usb 4-1: device descriptor read/8, error -71 [ 1324.925886][T16777] xt_CT: No such helper "syz0" [ 1325.093243][T10505] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1325.313744][T10505] usb 4-1: Using ep0 maxpacket: 32 [ 1325.332480][T10505] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 1325.363059][T10505] usb 4-1: config 4 has no interface number 0 [ 1325.369985][T10505] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.403908][T10505] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.438388][T10505] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1325.474433][T10505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.566572][T10505] hub 4-1:4.128: USB hub found [ 1325.789572][T10505] hub 4-1:4.128: config failed, can't read hub descriptor (err -90) [ 1326.339167][ T5950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.404745][ T5950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.500207][T13820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1326.516804][T13820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1326.540868][T13820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1326.568925][T13820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1326.578896][T13820] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1326.590758][T13820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1327.124523][T10505] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1327.480503][T10505] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1327.516068][T10505] usb 9-1: config 0 has an invalid interface number: 2 but max is -1 [ 1327.556418][T10505] usb 9-1: config 0 has an invalid interface number: 2 but max is -1 [ 1327.611018][T10505] usb 9-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 1327.666423][T10505] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1327.712230][T10505] usb 9-1: config 0 has no interface number 0 [ 1327.722206][T10505] usb 9-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1327.747308][T10505] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1327.769734][T10505] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.785076][T10505] usb 9-1: Product: syz [ 1327.789831][T10505] usb 9-1: Manufacturer: syz [ 1327.804446][T10505] usb 9-1: SerialNumber: syz [ 1327.824177][T10505] usb 9-1: config 0 descriptor?? [ 1328.061656][T10505] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1328.085601][T10505] usb 9-1: MIDIStreaming interface descriptor not found [ 1328.194065][T10505] usb 9-1: USB disconnect, device number 15 [ 1328.229515][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 240 seconds [ 1328.281763][ T5950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.366814][ T5950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.383280][T14889] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1328.395110][T13820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1328.414618][T13820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1328.429487][T13820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1328.444164][T13820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1328.457090][T13820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1328.467905][T13820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1328.480006][T13569] usb 4-1: USB disconnect, device number 19 [ 1328.555668][T14055] udevd[14055]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.651354][ T5950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.663129][T14889] usb 10-1: Using ep0 maxpacket: 16 [ 1328.678431][ T5950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.689913][T14889] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.689952][T14889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1328.689987][T14889] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1328.690013][T14889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.692375][T14889] usb 10-1: config 0 descriptor?? [ 1328.724225][T13820] Bluetooth: hci1: command tx timeout [ 1328.739701][T16793] »»»»»» speed is unknown, defaulting to 1000 [ 1329.389602][ T5950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.394837][T14889] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1329.421377][T14889] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1329.431818][ T5950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.433147][T14889] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1329.481973][T14889] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1329.491483][T14889] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1329.543266][T16793] »»»»»» speed is unknown, defaulting to 1000 [ 1329.543424][T16802] »»»»»» speed is unknown, defaulting to 1000 [ 1329.623123][T14889] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 1329.812679][T13569] usb 10-1: USB disconnect, device number 28 [ 1330.034398][ T5950] bridge_slave_1: left allmulticast mode [ 1330.043381][ T5950] bridge_slave_1: left promiscuous mode [ 1330.052408][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.095173][ T5950] bridge_slave_0: left allmulticast mode [ 1330.111333][ T5950] bridge_slave_0: left promiscuous mode [ 1330.124223][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.693072][T13820] Bluetooth: hci0: command tx timeout [ 1330.778985][T13820] Bluetooth: hci1: command tx timeout [ 1331.331804][T16825] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2784'. [ 1332.773289][T16072] Bluetooth: hci0: command tx timeout [ 1332.853142][T16072] Bluetooth: hci1: command tx timeout [ 1333.368273][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.381357][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.392329][ T5950] bond0 (unregistering): Released all slaves [ 1333.407551][ T5950] bond1 (unregistering): Released all slaves [ 1333.639348][ T5950] bond2 (unregistering): Released all slaves [ 1333.650806][ T5950] bond3 (unregistering): Released all slaves [ 1333.662901][ T5950] bond4 (unregistering): Released all slaves [ 1333.676988][ T5950] bond5 (unregistering): Released all slaves [ 1333.705189][T16802] »»»»»» speed is unknown, defaulting to 1000 [ 1333.718354][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2787'. [ 1333.728868][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2787'. [ 1333.753255][T16828] tipc: Started in network mode [ 1333.772380][T16828] tipc: Node identity ac1414aa, cluster identity 4711 [ 1333.796000][T16828] tipc: Enabled bearer , priority 10 [ 1335.007935][T16072] Bluetooth: hci0: command tx timeout [ 1335.022520][T16072] Bluetooth: hci1: command tx timeout [ 1335.982682][T14889] tipc: Node number set to 2886997162 [ 1335.999735][T16793] chnl_net:caif_netlink_parms(): no params data found [ 1337.269736][T16072] Bluetooth: hci0: command tx timeout [ 1340.316320][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.327945][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.337100][T16793] bridge_slave_0: entered allmulticast mode [ 1340.352381][T16793] bridge_slave_0: entered promiscuous mode [ 1340.393426][T16802] chnl_net:caif_netlink_parms(): no params data found [ 1340.477448][ T5950] hsr_slave_0: left promiscuous mode [ 1340.504048][ T5950] hsr_slave_1: left promiscuous mode [ 1340.530153][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.548838][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.594281][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.601831][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.815808][ T5950] veth1_macvtap: left promiscuous mode [ 1340.822192][ T5950] veth0_macvtap: left promiscuous mode [ 1340.837113][ T5950] veth1_vlan: left promiscuous mode [ 1340.852237][ T5950] veth0_vlan: left promiscuous mode [ 1341.698393][T16893] netlink: 'syz.9.2803': attribute type 1 has an invalid length. [ 1341.711204][T16893] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2803'. [ 1342.467274][ T5950] team0 (unregistering): Port device team_slave_1 removed [ 1342.654263][ T5950] team0 (unregistering): Port device team_slave_0 removed [ 1345.335027][T12564] smc: removing ib device sz1 [ 1345.341709][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.364327][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.371671][T16793] bridge_slave_1: entered allmulticast mode [ 1345.409829][T16793] bridge_slave_1: entered promiscuous mode [ 1345.445920][T13569] »»»»»» speed is unknown, defaulting to 1000 [ 1345.453707][T13569] infiniband syú2: ib_query_port failed (-19) [ 1346.108894][T16916] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2807'. [ 1347.314679][T16793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.302619][T16793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.977496][T16793] team0: Port device team_slave_0 added [ 1349.994999][T16939] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2814'. [ 1350.174655][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.201634][T16802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.219566][T16802] bridge_slave_0: entered allmulticast mode [ 1350.307170][T16802] bridge_slave_0: entered promiscuous mode [ 1350.343346][T16793] team0: Port device team_slave_1 added [ 1350.519112][T16802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.553240][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.560585][T16802] bridge_slave_1: entered allmulticast mode [ 1350.601148][T16802] bridge_slave_1: entered promiscuous mode [ 1350.678248][T16793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.687356][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.714835][T16793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.731890][T16793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.741478][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.768757][T16793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.835428][T16802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.877865][T16793] hsr_slave_0: entered promiscuous mode [ 1350.892333][T16793] hsr_slave_1: entered promiscuous mode [ 1350.912439][T16802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.007059][T16802] team0: Port device team_slave_0 added [ 1351.027334][ T5950] IPVS: stop unused estimator thread 0... [ 1351.050492][T16802] team0: Port device team_slave_1 added [ 1351.152831][T16802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.166257][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.193504][T16802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.216205][T16802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.228608][T16802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.267146][T16802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.531094][T16802] hsr_slave_0: entered promiscuous mode [ 1351.540042][T16802] hsr_slave_1: entered promiscuous mode [ 1351.547126][T16802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1351.556054][T16802] Cannot create hsr debugfs directory [ 1351.743249][ T9399] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1351.913374][ T9399] usb 4-1: Using ep0 maxpacket: 8 [ 1351.927524][ T9399] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1351.967767][ T9399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.967801][ T9399] usb 4-1: Product: syz [ 1351.967820][ T9399] usb 4-1: Manufacturer: syz [ 1351.967840][ T9399] usb 4-1: SerialNumber: syz [ 1352.083971][ T9399] usb 4-1: config 0 descriptor?? [ 1352.716637][T16970] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1352.716699][T16970] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1352.716716][T16970] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1352.872445][T16972] [U] W!TÁÍ—Ž}Ý©ÏS…L^Ï=ÍÝ [ 1353.218100][ T9399] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1354.184832][T16960] [U] ' [ 1354.188231][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1354.196008][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1354.204155][ T9399] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1354.220312][ T9399] usb 4-1: USB disconnect, device number 20 [ 1354.345752][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2824'. [ 1355.038157][T16793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1355.097771][T16793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1355.238420][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2825'. [ 1356.333580][T16793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1356.346643][T16793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1357.917593][T16802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1357.986763][T16802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1358.047369][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.066227][T16802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1358.173441][T16802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1358.244116][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.260050][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.260150][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.293956][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 270 seconds [ 1358.299709][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.299773][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.722362][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.835415][T16802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.877298][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.884628][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.932245][T17035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33 [ 1361.036175][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.043442][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.128235][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.240822][T16802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1362.085691][T17042] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 1362.183505][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.230727][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2835'. [ 1362.296221][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2835'. [ 1362.716459][T16802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.756038][T17058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1362.923618][ T5884] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1362.944732][T16793] veth0_vlan: entered promiscuous mode [ 1362.979352][T16793] veth1_vlan: entered promiscuous mode [ 1363.001168][T16802] veth0_vlan: entered promiscuous mode [ 1363.045595][T16802] veth1_vlan: entered promiscuous mode [ 1363.083729][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 1363.095004][T16793] veth0_macvtap: entered promiscuous mode [ 1363.101587][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1363.142441][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1363.184625][T16793] veth1_macvtap: entered promiscuous mode [ 1363.195183][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1363.214646][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.229549][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1363.240980][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.252894][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1363.266711][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.278802][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.299528][ T5884] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1363.308766][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.323006][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.343039][ T5884] usb 4-1: Product: syz [ 1363.354200][ T5884] usb 4-1: Manufacturer: syz [ 1363.370026][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.380698][ T5884] usb 4-1: SerialNumber: syz [ 1363.398588][ T5884] usb 4-1: config 0 descriptor?? [ 1363.414950][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.450059][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.473473][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.504563][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.525653][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.540981][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.554790][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.567393][T16802] veth0_macvtap: entered promiscuous mode [ 1363.680392][T16802] veth1_macvtap: entered promiscuous mode [ 1363.843322][T16072] Bluetooth: hci1: command 0x080f tx timeout [ 1363.911413][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1363.920046][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.939593][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.949706][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.960387][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1363.966848][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.799477][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.909888][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.065215][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.227223][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.409971][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.477838][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.490215][T16793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.566834][T16793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.697698][T16793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.707031][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1365.713279][T16793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.725018][T16793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.748994][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.783003][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.800748][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.811454][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.832737][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.843558][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.853806][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.865599][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.876647][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.083281][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.103098][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.122319][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.158201][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.137124][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 1367.148391][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.155303][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.162681][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.170927][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.177319][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.178852][T16802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.229834][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.238083][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.246785][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.257223][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.394699][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.417070][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.424526][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.431140][ T5884] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1367.438497][ T5884] input input34: Timeout waiting for response from device. [ 1367.552270][ T5884] usb 4-1: USB disconnect, device number 21 [ 1367.569945][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.653047][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.693203][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.751735][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.763359][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.774744][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.800549][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.811572][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.857116][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.875663][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.886435][T16802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.901272][T16802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.928307][T16802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.966851][T16802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.040284][T16802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.058014][T16802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.067122][T16802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.293220][T16072] Bluetooth: hci5: command 0x0c1a tx timeout [ 1368.480947][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.531996][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.649563][ T7738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.681146][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.687070][ T7738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.722655][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.858706][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.925176][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.330107][T17122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.166809][T17134] VFS: could not find a valid V7 on nullb0. [ 1374.218900][T17140] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input35 [ 1374.348670][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'. [ 1374.463903][T17134] XFS (nullb0): Invalid superblock magic number [ 1374.821662][T16072] Bluetooth: hci0: link tx timeout [ 1374.827807][T16072] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1376.692757][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 1376.743044][T17133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2859'. [ 1376.873258][T16072] Bluetooth: hci0: command 0x0406 tx timeout [ 1376.995006][T17167] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2867'. [ 1378.566421][T10505] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1378.894825][T10505] usb 4-1: device descriptor read/64, error -71 [ 1379.364049][T10505] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1379.713071][T10505] usb 4-1: device descriptor read/64, error -71 [ 1379.867177][T10505] usb usb4-port1: attempt power cycle [ 1381.033925][T10505] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1381.973041][T10505] usb 4-1: device descriptor read/8, error -71 [ 1385.293126][ T5958] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1385.476113][ T5958] usb 9-1: device descriptor read/64, error -71 [ 1386.236254][ T5958] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1388.223103][ T973] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1388.374245][ T58] block nbd0: Possible stuck request ffff888025ace000: control (read@0,4096B). Runtime 300 seconds [ 1388.583513][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 1388.648798][ T973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1388.707638][ T973] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 1388.752805][ T973] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1388.852008][ T973] usb 4-1: config 1 has no interface number 3 [ 1388.928047][ T973] usb 4-1: too many endpoints for config 1 interface 4 altsetting 184: 97, using maximum allowed: 30 [ 1388.993445][ T973] usb 4-1: config 1 interface 4 altsetting 184 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1389.070614][ T973] usb 4-1: config 1 interface 4 has no altsetting 0 [ 1389.133150][ T973] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1389.169960][ T973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1389.213170][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.221427][ T973] usb 4-1: Product: syz [ 1389.298399][ T973] usb 4-1: Manufacturer: syz [ 1389.303709][ T973] usb 4-1: SerialNumber: syz [ 1390.161138][ T6600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.293909][ T30] INFO: task syz.7.2521:15871 blocked for more than 143 seconds. [ 1390.303657][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1390.311490][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1390.320955][ T30] task:syz.7.2521 state:D stack:27552 pid:15871 tgid:15865 ppid:11225 task_flags:0x400140 flags:0x00004004 [ 1390.334001][ T30] Call Trace: [ 1390.337413][ T30] [ 1390.340441][ T30] __schedule+0x18bc/0x4c40 [ 1390.347409][ T30] ? __pfx___schedule+0x10/0x10 [ 1390.352520][ T30] ? __pfx_lock_release+0x10/0x10 [ 1390.358451][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1390.364986][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1390.371025][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1390.378536][ T30] ? schedule+0x90/0x320 [ 1390.383370][ T30] schedule+0x14b/0x320 [ 1390.387736][ T30] schedule_preempt_disabled+0x13/0x30 [ 1390.394180][ T30] __mutex_lock+0x817/0x1010 [ 1390.398962][ T30] ? __mutex_lock+0x602/0x1010 [ 1390.405431][ T30] ? sync_bdevs+0x1ae/0x340 [ 1390.410162][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1390.416019][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1390.421214][ T30] ? __pfx_lock_release+0x10/0x10 [ 1390.427183][ T30] ? iput+0x3b4/0xa50 [ 1390.431415][ T30] sync_bdevs+0x1ae/0x340 [ 1390.436795][ T30] ksys_sync+0xe2/0x1c0 [ 1390.441180][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1390.446766][ T30] ? do_syscall_64+0x100/0x230 [ 1390.451795][ T30] ? do_syscall_64+0xb6/0x230 [ 1390.473282][ T30] __do_sys_sync+0xe/0x20 [ 1390.477739][ T30] do_syscall_64+0xf3/0x230 [ 1390.482316][ T30] ? clear_bhb_loop+0x35/0x90 [ 1390.488075][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.494480][ T30] RIP: 0033:0x7f1367d8d0a9 [ 1390.499022][ T30] RSP: 002b:00007f1365bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1390.508459][ T30] RAX: ffffffffffffffda RBX: 00007f1367fa6080 RCX: 00007f1367d8d0a9 [ 1390.517110][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1390.525361][ T30] RBP: 00007f1367fa6080 R08: 0000000000000000 R09: 0000000000000000 [ 1390.536877][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.548520][ T30] R13: 0000000000000000 R14: 00007f1367fa6080 R15: 00007fffed6fcc68 [ 1390.556844][ T30] [ 1390.583054][ T30] INFO: task syz.7.2521:15873 blocked for more than 143 seconds. [ 1390.590956][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1390.600438][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1390.610720][ T30] task:syz.7.2521 state:D stack:24856 pid:15873 tgid:15865 ppid:11225 task_flags:0x400040 flags:0x00004004 [ 1390.623156][ T30] Call Trace: [ 1390.626629][ T30] [ 1390.629738][ T30] __schedule+0x18bc/0x4c40 [ 1390.634662][ T30] ? __pfx___schedule+0x10/0x10 [ 1390.639707][ T30] ? __pfx_lock_release+0x10/0x10 [ 1390.645033][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1390.651143][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1390.658206][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1390.664798][ T30] ? schedule+0x90/0x320 [ 1390.669250][ T30] schedule+0x14b/0x320 [ 1390.674651][ T30] schedule_preempt_disabled+0x13/0x30 [ 1390.680353][ T30] __mutex_lock+0x817/0x1010 [ 1390.685233][ T30] ? __mutex_lock+0x602/0x1010 [ 1390.690224][ T30] ? sync_bdevs+0x1ae/0x340 [ 1390.695112][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1390.700342][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1390.706786][ T30] ? __pfx_lock_release+0x10/0x10 [ 1390.714095][ T30] ? iput+0x3b4/0xa50 [ 1390.718306][ T30] sync_bdevs+0x1ae/0x340 [ 1390.722828][ T30] ksys_sync+0xe2/0x1c0 [ 1390.727320][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1390.732275][ T30] __do_sys_sync+0xe/0x20 [ 1390.737005][ T30] do_syscall_64+0xf3/0x230 [ 1390.741668][ T30] ? clear_bhb_loop+0x35/0x90 [ 1390.747861][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.755925][ T30] RIP: 0033:0x7f1367d8d0a9 [ 1390.760536][ T30] RSP: 002b:00007f1365bd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1390.769289][ T30] RAX: ffffffffffffffda RBX: 00007f1367fa6160 RCX: 00007f1367d8d0a9 [ 1390.777585][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1390.785917][ T30] RBP: 00007f1367fa6160 R08: 0000000000000000 R09: 0000000000000000 [ 1390.794229][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.802347][ T30] R13: 0000000000000000 R14: 00007f1367fa6160 R15: 00007fffed6fcc68 [ 1390.810757][ T30] [ 1390.815281][ T30] INFO: task syz.7.2521:15877 blocked for more than 143 seconds. [ 1390.823236][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1390.831067][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1390.839932][ T30] task:syz.7.2521 state:D stack:25680 pid:15877 tgid:15865 ppid:11225 task_flags:0x400140 flags:0x00004004 [ 1390.852286][ T30] Call Trace: [ 1390.855777][ T30] [ 1390.858892][ T30] __schedule+0x18bc/0x4c40 [ 1390.863845][ T30] ? __pfx___schedule+0x10/0x10 [ 1390.868894][ T30] ? __pfx_lock_release+0x10/0x10 [ 1390.874146][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1390.880282][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1390.886420][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1390.893213][ T30] ? schedule+0x90/0x320 [ 1390.898036][ T30] schedule+0x14b/0x320 [ 1390.902385][ T30] schedule_preempt_disabled+0x13/0x30 [ 1390.908253][ T30] __mutex_lock+0x817/0x1010 [ 1390.913117][ T30] ? __mutex_lock+0x602/0x1010 [ 1390.918922][ T30] ? sync_bdevs+0x1ae/0x340 [ 1390.923897][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1390.929155][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1390.935689][ T30] ? __pfx_lock_release+0x10/0x10 [ 1390.941009][ T30] ? iput+0x3b4/0xa50 [ 1390.945335][ T30] sync_bdevs+0x1ae/0x340 [ 1390.949859][ T30] ksys_sync+0xe2/0x1c0 [ 1390.954268][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1390.959308][ T30] __do_sys_sync+0xe/0x20 [ 1390.963904][ T30] do_syscall_64+0xf3/0x230 [ 1390.968602][ T30] ? clear_bhb_loop+0x35/0x90 [ 1390.973537][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.979644][ T30] RIP: 0033:0x7f1367d8d0a9 [ 1390.984332][ T30] RSP: 002b:00007f13657b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1390.993041][ T30] RAX: ffffffffffffffda RBX: 00007f1367fa6240 RCX: 00007f1367d8d0a9 [ 1391.001152][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1391.009544][ T30] RBP: 00007f1367fa6240 R08: 0000000000000000 R09: 0000000000000000 [ 1391.019481][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.027720][ T30] R13: 0000000000000000 R14: 00007f1367fa6240 R15: 00007fffed6fcc68 [ 1391.036280][ T30] [ 1391.039451][ T30] INFO: task syz.7.2521:15882 blocked for more than 144 seconds. [ 1391.047573][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1391.055414][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.064348][ T30] task:syz.7.2521 state:D stack:27408 pid:15882 tgid:15865 ppid:11225 task_flags:0x400040 flags:0x00004004 [ 1391.077957][ T30] Call Trace: [ 1391.081392][ T30] [ 1391.084492][ T30] __schedule+0x18bc/0x4c40 [ 1391.089412][ T30] ? __pfx___schedule+0x10/0x10 [ 1391.094542][ T30] ? __pfx_lock_release+0x10/0x10 [ 1391.099773][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1391.105913][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1391.112053][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1391.118646][ T30] ? schedule+0x90/0x320 [ 1391.124126][ T30] schedule+0x14b/0x320 [ 1391.128492][ T30] schedule_preempt_disabled+0x13/0x30 [ 1391.134219][ T30] __mutex_lock+0x817/0x1010 [ 1391.139008][ T30] ? __mutex_lock+0x602/0x1010 [ 1391.144282][ T30] ? sync_bdevs+0x1ae/0x340 [ 1391.148963][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1391.154313][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1391.159537][ T30] ? __pfx_lock_release+0x10/0x10 [ 1391.164846][ T30] ? iput+0x3b4/0xa50 [ 1391.169072][ T30] sync_bdevs+0x1ae/0x340 [ 1391.176272][ T30] ksys_sync+0xe2/0x1c0 [ 1391.180554][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1391.193309][ T30] __do_sys_sync+0xe/0x20 [ 1391.197732][ T30] do_syscall_64+0xf3/0x230 [ 1391.202314][ T30] ? clear_bhb_loop+0x35/0x90 [ 1391.221757][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.228363][ T30] RIP: 0033:0x7f1367d8d0a9 [ 1391.232841][ T30] RSP: 002b:00007f136538f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1391.241761][ T30] RAX: ffffffffffffffda RBX: 00007f1367fa6320 RCX: 00007f1367d8d0a9 [ 1391.250037][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1391.258306][ T30] RBP: 00007f1367fa6320 R08: 0000000000000000 R09: 0000000000000000 [ 1391.266975][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.275480][ T30] R13: 0000000000000001 R14: 00007f1367fa6320 R15: 00007fffed6fcc68 [ 1391.283864][ T30] [ 1391.287487][ T30] INFO: task syz.7.2521:15883 blocked for more than 144 seconds. [ 1391.297299][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1391.305227][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.316324][ T30] task:syz.7.2521 state:D stack:25024 pid:15883 tgid:15865 ppid:11225 task_flags:0x400140 flags:0x00004004 [ 1391.329069][ T30] Call Trace: [ 1391.332414][ T30] [ 1391.336166][ T30] __schedule+0x18bc/0x4c40 [ 1391.340782][ T30] ? __pfx___schedule+0x10/0x10 [ 1391.351185][ T30] ? __pfx_lock_release+0x10/0x10 [ 1391.356488][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1391.362450][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1391.368655][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1391.375540][ T30] ? schedule+0x90/0x320 [ 1391.379868][ T30] schedule+0x14b/0x320 [ 1391.384295][ T30] schedule_preempt_disabled+0x13/0x30 [ 1391.389819][ T30] __mutex_lock+0x817/0x1010 [ 1391.397225][ T30] ? __mutex_lock+0x602/0x1010 [ 1391.402155][ T30] ? sync_bdevs+0x1ae/0x340 [ 1391.410335][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1391.422420][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1391.430228][ T30] ? __pfx_lock_release+0x10/0x10 [ 1391.435810][ T30] ? iput+0x3b4/0xa50 [ 1391.439855][ T30] sync_bdevs+0x1ae/0x340 [ 1391.444423][ T30] ksys_sync+0xe2/0x1c0 [ 1391.448636][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1391.453617][ T30] ? do_syscall_64+0x100/0x230 [ 1391.458538][ T30] ? do_syscall_64+0xb6/0x230 [ 1391.464179][ T30] __do_sys_sync+0xe/0x20 [ 1391.468567][ T30] do_syscall_64+0xf3/0x230 [ 1391.473356][ T30] ? clear_bhb_loop+0x35/0x90 [ 1391.478128][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.484434][ T30] RIP: 0033:0x7f1367d8d0a9 [ 1391.488898][ T30] RSP: 002b:00007f1364f6c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1391.498144][ T30] RAX: ffffffffffffffda RBX: 00007f1367fa6400 RCX: 00007f1367d8d0a9 [ 1391.506372][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1391.515003][ T30] RBP: 00007f1367fa6400 R08: 0000000000000000 R09: 0000000000000000 [ 1391.523175][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.531609][ T30] R13: 0000000000000000 R14: 00007f1367fa6400 R15: 00007fffed6fcc68 [ 1391.539766][ T30] [ 1391.548296][ T30] [ 1391.548296][ T30] Showing all locks held in the system: [ 1391.556347][ T30] 1 lock held by khungtaskd/30: [ 1391.561241][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1391.588584][ T30] 5 locks held by kworker/1:2/973: [ 1391.595538][ T30] 1 lock held by udevd/5196: [ 1391.601103][ T973] usb 4-1: can't set config #1, error -71 [ 1391.601483][ T30] 2 locks held by getty/5583: [ 1391.612589][ T30] #0: ffff88803694a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1391.622820][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 1391.660385][ T30] 3 locks held by kworker/1:6/5884: [ 1391.675760][ T30] 6 locks held by kworker/u8:13/6600: [ 1391.681215][ T30] #0: ffff88801bef3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 1391.702441][ T30] #1: ffffc9001c97fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 1391.723084][ T30] #2: ffffffff8feb6310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 1391.737106][ T973] usb 4-1: USB disconnect, device number 26 [ 1391.737495][ T30] #3: ffff88807f9d70e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1391.784222][ T30] #4: ffff88807f9d6250 (&devlink->lock_key#15){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1391.804311][ T30] #5: ffffffff8fec2ac8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xa4/0x620 [ 1391.820575][ T30] 3 locks held by kworker/u8:26/7750: [ 1391.826640][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 1391.839284][ T30] #1: ffffc900034b7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 1391.850717][ T30] #2: ffffffff8fec2ac8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1391.860130][ T30] 3 locks held by kworker/1:1/13569: [ 1391.871306][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 1391.883664][ T30] #1: ffffc900043efc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 1391.894178][ T30] #2: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 1391.905598][ T30] 1 lock held by udevd/14046: [ 1391.910294][ T30] #0: ffff88805de404c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 1391.919904][ T30] 1 lock held by syz.7.2521/15871: [ 1391.925173][ T30] #0: ffff88805de404c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 1391.935120][ T30] 1 lock held by syz.7.2521/15873: [ 1391.940492][ T30] #0: ffff88805de404c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 1391.950364][ T30] 1 lock held by syz.7.2521/15877: [ 1391.955642][ T30] #0: ffff88805de404c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 1391.966543][ T30] 1 lock held by syz.7.2521/15882: [ 1391.971694][ T30] #0: ffff88805de404c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 1391.981344][ T30] 1 lock held by syz.7.2521/15883: [ 1391.986898][ T30] #0: ffff88805de404c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 1391.996613][ T30] 4 locks held by kworker/u8:6/17027: [ 1392.002019][ T30] #0: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1392.012099][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 1392.024057][ T30] #2: ffff8880b872a398 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x972/0x10e0 [ 1392.034504][ T30] #3: ffffffff9a82a4c0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580 [ 1392.045908][ T30] 2 locks held by syz.3.2886/17231: [ 1392.051157][ T30] #0: ffff88807c004a08 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 1392.064955][ T30] #1: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 1392.076181][ T30] 2 locks held by syz.8.2888/17234: [ 1392.081507][ T30] #0: ffff888036410d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 1392.091717][ T30] #1: ffff888036410078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 1392.101545][ T30] 1 lock held by iou-sqp-17237/17238: [ 1392.107089][ T30] #0: ffffffff8fec2ac8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1392.118515][ T30] [ 1392.120938][ T30] ============================================= [ 1392.120938][ T30] [ 1392.133933][ T30] NMI backtrace for cpu 0 [ 1392.133951][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1392.133973][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1392.133986][ T30] Call Trace: [ 1392.133993][ T30] [ 1392.134002][ T30] dump_stack_lvl+0x241/0x360 [ 1392.134030][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1392.134050][ T30] ? __pfx__printk+0x10/0x10 [ 1392.134091][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1392.134118][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1392.134136][ T30] ? _printk+0xd5/0x120 [ 1392.134164][ T30] ? __pfx__printk+0x10/0x10 [ 1392.134201][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1392.134226][ T30] ? __pfx__printk+0x10/0x10 [ 1392.134256][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1392.134284][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1392.134310][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1392.134334][ T30] watchdog+0x1058/0x10a0 [ 1392.134363][ T30] ? watchdog+0x1ea/0x10a0 [ 1392.134395][ T30] ? __pfx_watchdog+0x10/0x10 [ 1392.134422][ T30] kthread+0x7a9/0x920 [ 1392.134449][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.134479][ T30] ? __pfx_watchdog+0x10/0x10 [ 1392.134506][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.134532][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.134563][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.134590][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.134611][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1392.134635][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.134664][ T30] ret_from_fork+0x4b/0x80 [ 1392.134689][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.134717][ T30] ret_from_fork_asm+0x1a/0x30 [ 1392.134754][ T30] [ 1392.134762][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1392.311446][ C1] NMI backtrace for cpu 1 [ 1392.311463][ C1] CPU: 1 UID: 0 PID: 17027 Comm: kworker/u8:6 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1392.311484][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1392.311496][ C1] Workqueue: bat_events batadv_nc_worker [ 1392.311531][ C1] RIP: 0010:__lock_acquire+0x950/0x2100 [ 1392.311560][ C1] Code: 8c e8 34 be e4 ff 48 ba 00 00 00 00 00 fc ff df 90 0f 0b 90 90 90 31 db 48 8d ab c4 00 00 00 48 89 e8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 91 00 00 00 0f b6 6d 00 40 84 ed 74 32 0f b6 44 24 28 [ 1392.311575][ C1] RSP: 0018:ffffc90003d3f850 EFLAGS: 00000803 [ 1392.311590][ C1] RAX: 0000000000000000 RBX: ffffffff93ee50a0 RCX: ffffffff819cbbf2 [ 1392.311603][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff94511928 [ 1392.311615][ C1] RBP: ffffffff93ee5164 R08: ffffffff9451192f R09: 1ffffffff28a2325 [ 1392.311628][ C1] R10: dffffc0000000000 R11: fffffbfff28a2326 R12: 0000000000000000 [ 1392.311640][ C1] R13: ffff88805d1f8b10 R14: 0000000000000000 R15: ffff88805d1f8b10 [ 1392.311653][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1392.311667][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1392.311679][ C1] CR2: 0000400000032000 CR3: 000000000e938000 CR4: 00000000003526f0 [ 1392.311695][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1392.311705][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1392.311716][ C1] Call Trace: [ 1392.311723][ C1] [ 1392.311731][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1392.311750][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1392.311775][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1392.311800][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1392.311821][ C1] ? nmi_handle+0x14f/0x5a0 [ 1392.311846][ C1] ? nmi_handle+0x2a/0x5a0 [ 1392.311871][ C1] ? __lock_acquire+0x950/0x2100 [ 1392.311895][ C1] ? default_do_nmi+0x63/0x160 [ 1392.311923][ C1] ? exc_nmi+0x123/0x1f0 [ 1392.311949][ C1] ? end_repeat_nmi+0xf/0x53 [ 1392.311978][ C1] ? __lock_acquire+0x8a2/0x2100 [ 1392.312003][ C1] ? __lock_acquire+0x950/0x2100 [ 1392.312028][ C1] ? __lock_acquire+0x950/0x2100 [ 1392.312053][ C1] ? __lock_acquire+0x950/0x2100 [ 1392.312077][ C1] [ 1392.312084][ C1] [ 1392.312098][ C1] lock_acquire+0x1ed/0x550 [ 1392.312121][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1392.312150][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1392.312185][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1392.312210][ C1] ? __pfx_lock_release+0x10/0x10 [ 1392.312236][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1392.312264][ C1] batadv_nc_worker+0xec/0x610 [ 1392.312288][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1392.312312][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1392.312337][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 1392.312359][ C1] process_scheduled_works+0xabe/0x18e0 [ 1392.312391][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1392.312416][ C1] ? assign_work+0x364/0x3d0 [ 1392.312438][ C1] worker_thread+0x870/0xd30 [ 1392.312463][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1392.312484][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1392.312508][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1392.312529][ C1] kthread+0x7a9/0x920 [ 1392.312553][ C1] ? __pfx_kthread+0x10/0x10 [ 1392.312578][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1392.312599][ C1] ? __pfx_kthread+0x10/0x10 [ 1392.312622][ C1] ? __pfx_kthread+0x10/0x10 [ 1392.312648][ C1] ? __pfx_kthread+0x10/0x10 [ 1392.312671][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.312689][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1392.312710][ C1] ? __pfx_kthread+0x10/0x10 [ 1392.312735][ C1] ret_from_fork+0x4b/0x80 [ 1392.312756][ C1] ? __pfx_kthread+0x10/0x10 [ 1392.312780][ C1] ret_from_fork_asm+0x1a/0x30 [ 1392.312807][ C1] [ 1392.313998][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1392.314019][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 1392.314046][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1392.314062][ T30] Call Trace: [ 1392.314072][ T30] [ 1392.314084][ T30] dump_stack_lvl+0x241/0x360 [ 1392.314115][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1392.314140][ T30] ? __pfx__printk+0x10/0x10 [ 1392.314174][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1392.314218][ T30] ? vscnprintf+0x5d/0x90 [ 1392.314245][ T30] panic+0x349/0x880 [ 1392.314283][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1392.314310][ T30] ? __pfx_panic+0x10/0x10 [ 1392.314344][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1392.314372][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1392.314411][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1392.314445][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1392.314472][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1392.314500][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1392.314529][ T30] watchdog+0x1097/0x10a0 [ 1392.314565][ T30] ? watchdog+0x1ea/0x10a0 [ 1392.314606][ T30] ? __pfx_watchdog+0x10/0x10 [ 1392.314639][ T30] kthread+0x7a9/0x920 [ 1392.314672][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.314710][ T30] ? __pfx_watchdog+0x10/0x10 [ 1392.314743][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.314776][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.314814][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.314846][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1392.314874][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1392.314903][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.314945][ T30] ret_from_fork+0x4b/0x80 [ 1392.314974][ T30] ? __pfx_kthread+0x10/0x10 [ 1392.315010][ T30] ret_from_fork_asm+0x1a/0x30 [ 1392.315053][ T30] [ 1392.860974][ T30] Kernel Offset: disabled [ 1392.865306][ T30] Rebooting in 86400 seconds..