last executing test programs: 3m34.065489961s ago: executing program 3 (id=4): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89fffe00120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x48) 3m32.550689574s ago: executing program 3 (id=10): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000001100000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f0000010000000010000000000000000000ff"], 0x30}}], 0x1, 0xa884) 3m32.368240224s ago: executing program 3 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) semget$private(0x0, 0x4, 0x400) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000000000088e17688a2002b01040a000002a257fc5ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc4607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9313033bf79ac2dfc061115003901000000000000ea000040000000000062068f5ee50ce5af9b1c568302ffff000800000000000000ba000840024f0298e9e90539062a80e605007f71174aa951f3403e5a1b47b63a6323", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2018000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000e3ff028008000500", @ANYRES16], 0x3c}}, 0x0) 3m16.655614114s ago: executing program 32 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) semget$private(0x0, 0x4, 0x400) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000000000088e17688a2002b01040a000002a257fc5ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc4607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9313033bf79ac2dfc061115003901000000000000ea000040000000000062068f5ee50ce5af9b1c568302ffff000800000000000000ba000840024f0298e9e90539062a80e605007f71174aa951f3403e5a1b47b63a6323", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2018000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000e3ff028008000500", @ANYRES16], 0x3c}}, 0x0) 2m54.507894919s ago: executing program 4 (id=108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x3, 0x8080000, 0x2000, &(0x7f00006af000/0x2000)=nil}) r2 = syz_io_uring_setup(0x301d, &(0x7f0000000300)={0x0, 0x0, 0x80}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5bf122949a57232867bc801ecedd32ef3cde00e07753c2e003769a66b6e25744181c64e40000f2a3105649c2a4358fb35ce0c3d6291a7f8c052dd5df56b81a2c5fd1002b37ee9b6015f9b7ab4b4068388bd4be06d4c8911c91cd2089e64617af33aaca7f803e60ae4158f849fff6d1154ac56d8a76", 0x75}, {&(0x7f0000000680)="c9f5041cabe1e3b074150f51f2bb2bab6597317e68ee409cbccbd8246799169235dcab788575ec56ea6d8bf86d17879a36b34217b382a18344a9225bd3279185411e2af393c01f46e25e053c8920fea170c7214d151f545da9aad6622377b20478c94cc560ba9e8f78983baf41c1986793d4a64043a0cad50df4808e1362f0bca7053131c1f16d0d407433b065a100f09069295b03f9217f0bb5d870a513815fe5a9ca55ce6b00441294827e8afd73f169148dc66c1c949f3a8e0021a48a6d323a052c63ed75a36056fad43907566321743f09b9478587ab3f", 0xd9}], 0x2}, 0x4) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x3}}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x1, 0x7f, 0x9}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000600)={'#! ', './file0'}, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) creat(&(0x7f00000004c0)='./file0\x00', 0x4) chmod(&(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) 2m50.792309563s ago: executing program 4 (id=113): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4094) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2}) 2m49.785270995s ago: executing program 4 (id=117): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0, 0x4d4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000180)={r5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800130000000000"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000080)) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000080)) 2m47.427341322s ago: executing program 4 (id=122): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) bind$unix(r3, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') io_setup(0x3, &(0x7f0000000180)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x40045109, &(0x7f0000001280)) 2m44.468689011s ago: executing program 4 (id=127): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x3d, 0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2) writev(r5, &(0x7f00000007c0)=[{&(0x7f00000001c0)="df0482e464044544f1d955178b0cb5e640bf1babb90455f4643c9038eb5d8fc3ddcbd04cbe5c30f05c4e5b82621c4e135cff6bb37a20961abc1ee7809132ee4730ba2f317da8c6a9fb5ced0781c2d03c89ea3ba6afcd27bf30fb086f6a5c2f798b9caf6f82b698dcbdb28cd0bd7e04d7c9f07d733bed40988ec4bb3a", 0x7c}, {&(0x7f0000000240)="2679b20125728ac1a7abf3c03e9025984c8332916a0c521d1a2556d1bc2f41d9eccbe010a1409d756898b371625a5df7745975877c60cffe4a882206b02e347844c67fb921232e22d98f38639b46435c", 0x50}, {&(0x7f00000000c0)="1483ba76509031528e703cfc3e9f3ba36fde1960", 0x14}, {&(0x7f0000000400)="92f3055de6b977b3475481ea5a4dfe25af300d489400c362d154c978e80691efd887536c6ea17077d9350c660f48a8a80e69008a33277a283a56bfcb24c30c68989f6765658c75aac65327f2cec31dd49c2475f2041d1350c8e321835431ce71a48d22dfa7f90f9d219307df6eda072fef01c423042a0bd4f32c98f4fb5144e540bd97e4a808b05d76767abb6a1ee2a89732c56b3b066db3c3b280db578c591b1a2d1d3f4ac349cd999b342ffa48fdd1f1cb951425eaa5af7be647ea3e6f8aedb3e35033d96f0a2fda2315d54dd7e3d6cb6f0cf85719d0ffe8cc6b51f97a17f26051f59b338f0c0fca9aff609da6942d4620509d53a3", 0xf6}, {&(0x7f0000000500)="0e457a082965916d5926d3f2262782c1aea01ea624f18a225440195b64a867849702c2397770d16f4306e74d6a21b2493fac097cd089a7c886d63c1944ca8c243da27230c0ca8b87d2953b1eb76df697daee9dd7c3280d4bfe4c8440b6dc232dab8679ed023c12da3de3bd8c6e85d143d35d8d290b476d0d20b2933723d8132006f70c25b3cbe185078cd0d8ea6bcaf09fe69c49efb5807578a9f4746ce67c2ec334d6eb5a7a31031995e2b94f636d1f762ca07272487803", 0xb8}, {&(0x7f00000005c0)="2d91f404fdcb18ddf5a44459bef84c57e5617390ea22961411fd9f86f5224eac6353faa6df49a5cc6d2a9496629c2c8afd2fe2c17c5c0859919208dbad9b2f7eeb5908bf10f00d8a21445288ed84b176", 0x50}, {&(0x7f0000000640)="88b3231b9798224fbb632a8867addef2079262ef3d940fbda5fb84af9e10d0bd1eee00f8d1c084", 0x27}, {&(0x7f0000000680)="20723a609230a16b6b63db2c565fc10b63cc1a9883a1dfa1a8f818c2c1f21d19f70e917abef2116576f44f0124babb01505c323eb76a2378ae96e0c7eb27ec43e78678bd4fd156250d4c4693bbfb20f5618c2134a79bb2492d6c0654ce5bd94a8691c0f85312a521af6a0a6056574d20ddde0f80ea17acd055b50399082e1755790c9affcc9f2c5040fa80d241e4ed06267a66493c2f159705aa87b8fcd3335b821c5081f03667bd8316916556e3df448d07f7b513b1711c59040feb50d32cc9280768906ae2a573fc385fe5eaad2309cbda79423526a2", 0xd7}, {&(0x7f0000000780)="07d31f1543538299d660db4fa36efa0d5906230f029fb45d62d7b80ecd2ba8", 0x1f}], 0x9) ioctl$TCFLSH(r0, 0x5608, 0x0) 2m43.019628183s ago: executing program 4 (id=136): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getgroups(0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x298000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x2, 0x8, 0x4, 0x0, 0x0, 0x90], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x10e, &(0x7f0000000140)={@local, @local, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00fd", 0xd0, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x67b5256dc7d9fe7e, 0x4, 0x4, 0x2, 0xb1, 0x8, 0x2, [@private1={0xfc, 0x1, '\x00', 0x5}, @rand_addr=' \x01\x00']}, @fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x3, 0x67}, @srh={0x2b, 0xe, 0x4, 0x7, 0x1, 0x70, 0x6, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @fragment={0x2e, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x65}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000500)=0xc) keyctl$chown(0x4, 0x0, r6, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@host}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r6, &(0x7f0000000040)={0x4, 0x3, 0xc, 0x3, 0x8, 0x4, 0xffffffffefffffff, 0x7, 0x600000}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, 0x0) unlinkat(r0, &(0x7f0000000300)='./file0\x00', 0x0) 2m26.877318079s ago: executing program 33 (id=136): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getgroups(0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x298000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x2, 0x8, 0x4, 0x0, 0x0, 0x90], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x10e, &(0x7f0000000140)={@local, @local, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00fd", 0xd0, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x67b5256dc7d9fe7e, 0x4, 0x4, 0x2, 0xb1, 0x8, 0x2, [@private1={0xfc, 0x1, '\x00', 0x5}, @rand_addr=' \x01\x00']}, @fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x3, 0x67}, @srh={0x2b, 0xe, 0x4, 0x7, 0x1, 0x70, 0x6, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @fragment={0x2e, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x65}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000500)=0xc) keyctl$chown(0x4, 0x0, r6, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@host}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r6, &(0x7f0000000040)={0x4, 0x3, 0xc, 0x3, 0x8, 0x4, 0xffffffffefffffff, 0x7, 0x600000}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, 0x0) unlinkat(r0, &(0x7f0000000300)='./file0\x00', 0x0) 2m16.735359908s ago: executing program 1 (id=206): sync() 2m16.460848295s ago: executing program 1 (id=209): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x3, 0x4008, 0x9}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004200817a000000000000000033d700"], 0x14}, 0x1, 0x0, 0x0, 0x1010}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create(0x4) syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_io_uring_setup(0x10d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x22, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2m15.260066262s ago: executing program 1 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$ndb(&(0x7f0000002080), 0x0, 0x80083) ioctl$NBD_CLEAR_SOCK(r3, 0x125f) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000600fc000000000000000000000000000000140007"], 0x6c}}, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="200000002a00090000000000000000000400002c040019800800098086"], 0x20}, 0x1, 0x3000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x16, &(0x7f00000016c0)=ANY=[@ANYBLOB="18170000", @ANYRES32, @ANYBLOB="000000000000000018400000fbffffff0000000000000000852000000400000018230000", @ANYRES32, @ANYBLOB="00000000ff010000b7080000000000007b8af8ff00000000b708000079e6e30d7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000004054a786"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000040)='./file0\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 2m14.5711515s ago: executing program 1 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3011, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$unix(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)='\x00', 0x1}, {&(0x7f00000004c0)='<', 0x1}], 0x2}, 0x4041001) 2m14.325243995s ago: executing program 1 (id=217): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x23, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040084) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) eventfd(0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r8, 0xc, 0x1, '>'}, 0x9) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x2c00) 2m13.455503089s ago: executing program 1 (id=222): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x11, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) utime(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000400000140a030000000000000000000300000008000340000000000900010073797a31000000000900020073797a30000000007d6948074e4504dbb0e47afd82f6693b140000001100010000000000000000000000000a00"/140], 0x7c}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r4 = open(0x0, 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r9 = userfaultfd(0x801) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000780)=""/67, 0x43}], 0x5, &(0x7f0000001900)=""/222, 0xde}, 0x21) ioctl$UFFDIO_API(r9, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000808feff00080839426686e473"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x144}}, 0x0) 1m58.351940769s ago: executing program 34 (id=222): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x11, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) utime(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000400000140a030000000000000000000300000008000340000000000900010073797a31000000000900020073797a30000000007d6948074e4504dbb0e47afd82f6693b140000001100010000000000000000000000000a00"/140], 0x7c}}, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r4 = open(0x0, 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r9 = userfaultfd(0x801) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000780)=""/67, 0x43}], 0x5, &(0x7f0000001900)=""/222, 0xde}, 0x21) ioctl$UFFDIO_API(r9, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000808feff00080839426686e473"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="440100001d0000022abd7000fddbdf25080016000400000014000e00ffffffff000000671aa50000000000000000001001020063686163686132302d61726d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001dfb0577b843bf5a1caa9890f54280a75e00d1022e9d07ade56771345c3dc5b40cc03dacf1f1c8d0d793de76a76e1c2eb9fde905b0a55d7e38819fd298413c2a92d1b403d45f9bc4414ee9671f86d4ee10dd425ea5d044ac7d919037cf3ea169324bd8fa4148e199916d7799017dc1864b9a88b4122f2588fb13818f0c6ecc2a0e54200c0487beed85fc691409991b28149ea766b47237d25aac98a3dd3c8ae21a119ac0b729c2e04d144c7ade4c760309a7b90ee8ea6c925b4952a08001d0001000080"], 0x144}}, 0x0) 50.542541358s ago: executing program 7 (id=420): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x2010, r1, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080), 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x0, &(0x7f0000000100)}, 0x10) socket$alg(0x26, 0x5, 0x0) clock_gettime(0x3, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000640)="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", 0x1c3}, {&(0x7f0000000240)="4acf1aa075b5030ff0f59fa17b8c", 0xe}, {&(0x7f00000003c0)="554b500dc84578df6a7745fc20879f802d89403442ef72bdaf3a692f891692ec5b415829924c8f6d4d808eec85849f0351727c7d36dca57cdfd45ab3c079c9e43b3955136d3638f23c06857c6909d77d0b79eb1473445e6aedcc52bfa0e3c273d8ea9db38a99f6c370249becea02724f5ce25deb7716d58a10097970857db3185adfd2d56fa6434933dca3977f7a255b260c5a1262f95e54916795d4872315c8e394745f0e292aa8f3b7706b29b26a893e1007be3c3b9e18b2dbd58dbf25d0021a597725dc64faeb47", 0xc9}, {&(0x7f0000000840)="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", 0xfc}, {&(0x7f00000002c0)="185ea7bc574dc7e9df35795e8b7002c7abc34dd49c4ea0527917fc69ccb83af9b7c4f3917e738a47a2db43985f8eea725af981940783471023acd241568b50a8468a6eaf4886d6bf7c44a39bb098de815733330e8904bf2a94887270321045300f33f785f0f680041b13c7b6f4a50fded9bc71ca6b0e28c7", 0x78}], 0x1000000000000001) close_range(r3, 0xffffffffffffffff, 0x0) 49.148125733s ago: executing program 7 (id=423): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4090, 0xffa}], 0x1, 0x239, 0x0) pidfd_getfd(r0, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xb17c32413214ccde, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001100)=0x1, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) writev(r1, 0x0, 0x0) 47.848205511s ago: executing program 7 (id=428): open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0200000006"], 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3}) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x1e, &(0x7f00000043c0)=[{0x0, 0xf00, 0x0, 0x0, 0x0}], 0x1) 47.807583392s ago: executing program 7 (id=429): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x900000, 0x39565559, 0x2, @discrete={0x8, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xb0}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 47.369697517s ago: executing program 7 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) prlimit64(0x0, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x6, 0x0, &(0x7f00000007c0)="9f4494872191", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000000), 0x1}, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103000000efffffff", @ANYRES32=r5], 0x24}}, 0x48800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000380)={0x0, 'macvtap0\x00', {0x3}, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x3, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000b60000e23e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0xb6}) sync() 12.358809173s ago: executing program 6 (id=520): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x101, 0x2400) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, &(0x7f00000018c0)) read$usbfs(r4, &(0x7f0000000080)=""/61, 0x3d) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0xc0}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11.285014034s ago: executing program 2 (id=523): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x9b}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x61, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=@newtaction={0x2698, 0x30, 0xb, 0x0, 0x0, {}, [{0x2684, 0x1, [@m_police={0x2680, 0x10, 0x0, 0x0, {{0xb}, {0x2574, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x6, 0x8, 0x3, 0x8, 0x607, 0xffffffff, 0x7, 0x9, 0x5, 0x0, 0x9, 0x8, 0x8, 0x8, 0x3, 0x3, 0x6, 0x400, 0xf2f, 0x7, 0x1ff, 0xb3a, 0x3, 0x0, 0xc, 0xc, 0xffff, 0xfc19, 0x8, 0x9, 0x1e4, 0xfffffffd, 0x3, 0x7bf, 0x9, 0x4, 0x3, 0x2, 0x8, 0xfffffe00, 0x34, 0xb32, 0x0, 0x5, 0x10000, 0xd, 0x8b, 0x4, 0x4, 0xffffffff, 0x7fff, 0x9, 0x2, 0x81, 0xd, 0x2, 0x2, 0x7f, 0x6, 0xbf9, 0x2, 0x0, 0xe019, 0x22, 0x7, 0x9, 0x8001, 0x7fff, 0xff, 0x57f9, 0x7f, 0x4, 0x5, 0x2, 0xa, 0x193, 0x101, 0xfffffffe, 0x1, 0x5, 0x3fe00000, 0xa, 0x800, 0x0, 0x8, 0x80000000, 0x42, 0x5, 0xa1, 0x4, 0xffffff73, 0x4, 0x85a, 0x0, 0x0, 0x5, 0x80, 0x81, 0x0, 0x7f, 0x7ff, 0x6, 0x2, 0xa, 0x1000, 0x0, 0x9, 0x2, 0x61, 0x7, 0x200, 0x6, 0xb, 0x2000, 0xd, 0x0, 0x1, 0x8, 0x0, 0x0, 0x6, 0x1, 0x5, 0x0, 0xb, 0x3, 0x6, 0x0, 0x401, 0x3, 0x6, 0xff, 0x3, 0x8, 0xfffffffe, 0x1, 0x0, 0x76, 0x2, 0x3ffd, 0x9, 0x6, 0x1, 0x4, 0x9, 0x9, 0x56, 0x8, 0xfffffffe, 0x0, 0x7, 0x8001, 0x24, 0x2, 0x2, 0x2, 0x6, 0x6, 0x401, 0x6, 0xf0a, 0x6, 0x4, 0x5, 0x8fc, 0x1, 0x7fff, 0x8, 0x1, 0xf5, 0x1, 0x5, 0x4, 0x1, 0x3bf698aa, 0x2, 0x6, 0x8, 0x0, 0x1, 0xfffffff7, 0x6, 0x5, 0x6, 0x2, 0x2, 0x89, 0x3, 0xdfb9fb8a, 0x1, 0x80, 0xffffffff, 0x800, 0x2, 0x4a5, 0x10001, 0x7ff, 0x8000, 0x0, 0xfffffffc, 0x9, 0x9, 0x6, 0x2, 0x7, 0xfff, 0x1, 0x436, 0x7, 0x6, 0x6, 0x3, 0x9, 0x9, 0x543, 0x80, 0xfff, 0x7, 0xcce, 0x4, 0x9, 0x80000000, 0x7, 0x2, 0x401, 0x7, 0x5, 0x26e, 0xfffffff9, 0x800, 0xfffffffb, 0x3, 0xccb4, 0x77fe, 0x7, 0x6, 0x2, 0xd, 0x2, 0xd, 0x8001, 0xe8aa, 0xd, 0x1, 0x40, 0x2, 0x4, 0x7, 0x7fff, 0x9, 0x0, 0xd, 0x1, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x40000, 0x5, 0xff, 0xfff, 0x0, 0x2, 0x800, 0x6, 0x7, 0x6f, 0x9, 0x4, 0x7, 0xff, 0x2, 0x1ff, 0x7ff, 0x8, 0x7fff, 0x5, 0x2, 0x4, 0x6, 0xffff, 0x33, 0x3, 0xffffffff, 0x4, 0x2, 0x4, 0x3ff, 0x5, 0x6, 0x1, 0x4, 0x2, 0xb2, 0x8, 0x7fff, 0x0, 0x3, 0x6, 0x3, 0x20000000, 0x400, 0x8001, 0x2e, 0x1000, 0x5, 0x3, 0x10000, 0x3, 0x5, 0xc68, 0x8, 0x1ff, 0x215f, 0xfffffffb, 0x4, 0x4b2f6653, 0x8, 0x8, 0x1, 0x6, 0x6, 0xfffffffc, 0x4, 0x2a, 0x2a3c, 0x3, 0x8000, 0xe, 0x10, 0x8, 0xffff, 0x800, 0x2, 0x6, 0xfffffffe, 0x7fff, 0x400, 0x4, 0xff, 0x40, 0xc, 0x4, 0x8, 0x101, 0xa, 0x7, 0x9, 0x9, 0x5382bd82, 0x1, 0x6, 0x800, 0x8, 0x2, 0x5, 0x1, 0x7ff, 0x3c87e47d, 0x0, 0x5, 0x4, 0x9, 0x5, 0x8, 0xffffffff, 0x1, 0x270, 0xd487, 0xb, 0x7, 0x5, 0x7, 0xa0f, 0x7, 0x100, 0x2, 0xfffffffd, 0x80000000, 0xf, 0xffff7fff, 0x9, 0x3ff, 0x8000, 0xa46, 0x80000000, 0xffd, 0x7, 0x4, 0x5, 0x7, 0xf, 0x3, 0x2, 0x3, 0xffffffff, 0x1000, 0x4, 0x29e9, 0x9, 0xd, 0x3, 0xfffffffa, 0x6e8, 0x2, 0x7, 0x13, 0x7, 0x9, 0x8, 0x1, 0x1, 0x6, 0x9, 0x8000, 0xe, 0x9, 0xffffffff, 0x8, 0xd, 0xd, 0x40000, 0x80000000, 0x4, 0x80, 0xee9f, 0x9, 0x5, 0x4, 0x1, 0x1000000, 0x4, 0x9, 0xfff, 0xfffffffe, 0x5e57, 0x0, 0x2, 0x5, 0x7, 0x9, 0x371, 0x4, 0x8, 0x2, 0x9, 0x7, 0x6, 0x10, 0xce, 0x4, 0x0, 0x8, 0x0, 0x5, 0x8, 0xffff, 0xd, 0x400, 0x2, 0x7, 0x6, 0x7, 0x0, 0x5, 0x1ff, 0x5, 0x10, 0x5, 0x7, 0x2, 0x2, 0xfff, 0x2, 0x1, 0x3, 0x5, 0x3, 0x7, 0x0, 0x8, 0x10, 0x232, 0xf, 0x2, 0x9, 0x6, 0x80, 0xfffffff7, 0x9, 0x8, 0x3d8, 0x0, 0x6, 0x6, 0x2, 0x9, 0x1000, 0x7f, 0xfffffffa, 0x9, 0xd, 0x4, 0x7f, 0x1, 0x2, 0xfffffffb, 0x40, 0x10001, 0x6, 0x0, 0x984a74c3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x465ebefe, 0x20000000, 0x2d, 0x2, 0x6, {0x1, 0x1, 0x7, 0x7, 0x6, 0x401}, {0x6, 0x0, 0xff, 0x7f, 0x7471, 0x80000000}, 0x8, 0xfffff137, 0x40}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x6, 0x0, 0x0, 0xffff1033, 0x7, 0x3, 0x8, 0x1, 0x1, 0xd, 0x9, 0x40, 0x7, 0x0, 0x11e9, 0x86b, 0x2, 0x8, 0x0, 0xa5b5, 0x5, 0x8, 0xd3, 0x4, 0x4, 0x4, 0x9, 0x9, 0x3, 0xbcc5, 0xfffffffd, 0x6, 0xffff, 0x1ff, 0xe, 0x4, 0x3, 0xfffffff7, 0x9, 0xffffffff, 0xb, 0x7f, 0xff, 0xa, 0x3, 0x0, 0xd, 0x5, 0x6, 0x5, 0x3, 0xd7b, 0x10000000, 0x7, 0x0, 0x2, 0xff, 0x80, 0x2, 0x8b, 0x7fff, 0x0, 0x7, 0x10000, 0x4, 0x7, 0x7a4, 0x837f, 0x1c7, 0x7, 0x278a, 0xffffff00, 0xd, 0x2, 0x3cfb, 0x1000, 0x200, 0x5, 0x6, 0x10000, 0x2, 0x295d, 0xfffffffd, 0x3, 0x8, 0x2, 0x248, 0x200, 0x7, 0x7fff, 0x5, 0x7, 0x4, 0x7, 0xfffffff9, 0xfffffff2, 0x4, 0xfffffff7, 0x0, 0x2, 0xb, 0x5, 0x4, 0x6, 0x8, 0x7, 0xffff0001, 0x1, 0x6, 0xa, 0x8, 0xfffffffd, 0x5, 0xfffffff0, 0x8, 0x5, 0x9, 0x4, 0x5, 0x1, 0x40, 0x7ff, 0x0, 0x5, 0x7, 0x5, 0xbc4, 0x6, 0xfca, 0x101, 0x7, 0x80000001, 0x8, 0xd748, 0x3, 0x81, 0x2d7d, 0x4, 0xe, 0xc3195ac, 0xfd, 0x1c, 0x100, 0x1, 0xd11, 0x4233, 0xd, 0x0, 0x6, 0x0, 0x47a7, 0x3, 0x0, 0x6, 0x7, 0x0, 0x10, 0x2, 0x5, 0x7, 0x3, 0x6, 0xda5, 0xb, 0x8, 0x7, 0x7f, 0x101, 0x4, 0x5, 0x1, 0x8, 0xab, 0x9, 0x3, 0x4, 0x280000, 0x1, 0x2, 0xa3a0, 0x81, 0x1000, 0x5, 0xffffff81, 0x2, 0x0, 0x1ff8, 0x81, 0xaf, 0xc0000000, 0x5, 0x63e5b3a7, 0x50e, 0xfffffff8, 0x3, 0x1, 0x2982, 0x6, 0x4, 0x7, 0xb, 0x3, 0x7, 0xc, 0xbd2, 0x1000, 0x400, 0x0, 0x2, 0x40, 0x5, 0x9, 0x9, 0x9, 0x7, 0xfffffff7, 0x100, 0xfffffffc, 0x2, 0xc, 0x6, 0x80000000, 0x3, 0x8, 0x9, 0x10000, 0xc6, 0x0, 0xe9, 0xa6f0, 0x8, 0x1, 0x68b, 0x19f8, 0x9, 0x4, 0xff, 0x10000, 0x1, 0x9, 0x5, 0x8, 0x3, 0x7f, 0x2, 0x9, 0x785, 0xffff3100, 0xc, 0x5, 0x5, 0x3, 0x5, 0x3ff, 0x21ce]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb9, 0x5, 0x3, 0x5, 0x8586, 0x2, 0x4, 0x80, 0x4, 0xdc0, 0x8, 0xff, 0x7, 0x8d, 0x4, 0x7fff, 0x2, 0x1, 0x7, 0x4, 0x7, 0x9, 0x8, 0x80000001, 0x0, 0x800, 0x4df5, 0x7e99, 0x2, 0x1, 0xe11, 0x2, 0x5, 0x4, 0x1, 0x4, 0xd, 0x0, 0x4, 0x8, 0x27e5, 0xf, 0x7, 0x400, 0xe, 0x4, 0x6, 0x1ff, 0x6, 0x6, 0x3, 0x5, 0x401, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x318, 0x3, 0xffffff3b, 0x1ff, 0x9, 0x5, 0x3ff, 0x7, 0xfff, 0xfffffffe, 0x6, 0x3, 0x5, 0x5, 0x3, 0x8, 0x11b, 0x1eee, 0x4, 0x7, 0x34e, 0x1, 0x10001, 0x60b2, 0x9, 0x0, 0x8, 0x81, 0x7fff, 0x4, 0x2, 0x38f7, 0x1000, 0x7, 0x8, 0x5e2664b3, 0xfffffff9, 0x7, 0x6, 0x4, 0xfff, 0xdb0, 0x800, 0x7, 0x5, 0x9, 0x1, 0x3, 0x3, 0x9, 0x6, 0x2, 0x9, 0xfffffff8, 0x7, 0xdbe, 0x100, 0x2, 0x2, 0xde4f, 0x8, 0x0, 0x4, 0x5, 0xd8, 0x800, 0x4, 0x6, 0x8, 0x5, 0x6, 0x80000000, 0x101, 0x0, 0xac27, 0x5, 0x800, 0x3, 0x4, 0x3, 0x1, 0x1, 0x4, 0x1, 0x8, 0x5a0, 0x4, 0x2, 0x5, 0x7f, 0xfd95, 0x7, 0x7, 0xffffffd2, 0xfff, 0x0, 0x6, 0x7fffffff, 0x40, 0x8000, 0x0, 0x8000, 0x82, 0xfffff91a, 0xc0, 0x5, 0xe6, 0x8, 0x1, 0x2abd, 0x2, 0x8, 0x6, 0xe, 0x23b3, 0x6, 0xe50c, 0x0, 0x5, 0x1, 0x401, 0x3ff, 0x4, 0xf, 0x1, 0x2, 0x8, 0xfffeffff, 0x2, 0x4, 0x3, 0x2, 0x100, 0xd, 0x7, 0x2, 0x0, 0x1, 0x1000, 0x1, 0x1, 0x4, 0x0, 0x1000, 0x3, 0x0, 0x200, 0x7, 0x60000000, 0x0, 0x7, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0xa, 0x5, 0x4, 0x401, 0xffffff8f, 0x8, 0x3, 0x8, 0x7, 0xffff, 0x7d39, 0x9, 0x2, 0x4, 0x2, 0x401, 0x1, 0x12, 0x7, 0xfff, 0x6, 0x0, 0x3, 0x6, 0x2, 0x40f, 0x8, 0xfffffffc, 0x10, 0x7, 0x7ff, 0x8, 0x6, 0xffff1368, 0x3, 0x1, 0x5, 0xa, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0xb70, 0xffff, 0x2, 0x1ed, 0x3, 0x200, 0x2, 0x0, 0x5, 0x1, 0x40, 0x4, 0x1, 0x4, 0x3, 0xb, 0x9, 0x10001, 0x89b, 0x7ff, 0x2, 0x1, 0x1d, 0x7, 0x800, 0xde, 0xfffffff9, 0x8, 0x1d, 0xfffffffa, 0x6, 0x10000, 0x1, 0x424, 0x1, 0x80, 0x5, 0x1, 0x1, 0x2ac5, 0xff, 0x1, 0xffffffff, 0x9, 0x4, 0x0, 0x7, 0x7f, 0xa7, 0x3b2, 0x73, 0x9, 0x2, 0x54, 0xa, 0x0, 0x27, 0xfffffff8, 0xc7, 0x3, 0x10, 0xe9, 0x6, 0x0, 0x7dff, 0xfffffffb, 0x186, 0x104000, 0xe3b, 0xaed, 0x5, 0x6, 0x200, 0x10001, 0x2, 0x400, 0x0, 0x3, 0x9, 0x5, 0xb, 0x2, 0x8, 0x9, 0x1, 0x10000, 0x6, 0x2, 0x7, 0x10000, 0x1b4, 0x8, 0x0, 0x3, 0xffffffff, 0xa1, 0x7, 0xffffffff, 0x3, 0xffff0000, 0x6, 0x4, 0x1, 0xb3a6d58d, 0x4, 0x8, 0xa70, 0x2, 0x7, 0x800000, 0x1000, 0x7, 0x1, 0x46, 0xdb4, 0x8697, 0x8, 0x9, 0x8, 0x10000, 0x80, 0xc1a, 0x0, 0x1, 0x7f, 0x56, 0xfaeb, 0x1ffc00, 0xc, 0x0, 0x9, 0x6, 0x2, 0x8, 0x6, 0xcb4f, 0x8001, 0x9, 0x8, 0x4, 0x9, 0x7ff, 0xffff, 0x0, 0xfffffff7, 0x3ab, 0x1, 0x7, 0x1, 0xa51, 0x6, 0x4, 0x7c, 0x8, 0x200, 0x80, 0x4aeae398, 0x238, 0x8100, 0x40, 0x7, 0x0, 0xb81, 0x7, 0x1, 0x0, 0x1, 0x6, 0x8001, 0x6, 0x6, 0x7, 0x6, 0x80000001, 0xe, 0x3, 0xd, 0x2f48, 0xb8, 0x7, 0x8, 0xffff, 0x1000, 0x8, 0xb6, 0x1, 0x6, 0x7ff, 0x8000000, 0x8c, 0x6, 0x101, 0x0, 0x9, 0x5, 0x51, 0x4, 0x7fffffff, 0x92, 0x2, 0x2, 0x7, 0x0, 0x5, 0x3, 0x7, 0x4, 0x4, 0xfff, 0x2, 0x8, 0x10, 0xb, 0x8001, 0x101, 0x6, 0x9, 0x33f5, 0x2, 0xdf5, 0x3ff, 0x2, 0x1, 0x4, 0xfffffffa, 0xfffffff9, 0x1e39, 0x3, 0x7, 0x7, 0x6, 0x70400000, 0x6, 0x0, 0xf, 0x8, 0xc, 0x8001, 0x800, 0x1, 0xb21, 0x9, 0xffff, 0x5, 0xb68d, 0x1, 0x9, 0x100, 0x3, 0x4, 0x3, 0x3, 0x100, 0x4b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7fffffff, 0x8, 0x7, 0x7, 0x5a9f, 0x6, 0x8, 0x80000001, 0x1, 0xa, 0x0, 0x9c, 0x5, 0xe5, 0x0, 0x2c53, 0x0, 0x0, 0x5, 0x9, 0x1, 0x4, 0x3, 0x4, 0xe8, 0xfffffff8, 0x7, 0x4a9e, 0x78e08e2c, 0x1, 0x5, 0x502201d4, 0x9, 0x5, 0xeb6, 0x1, 0x8, 0x0, 0x0, 0x6, 0x1ff, 0xffffffff, 0x800, 0x1, 0x80, 0x6, 0x1000, 0x80000000, 0x99, 0x1, 0x726, 0x6, 0x247, 0x3, 0x10, 0x7dd2, 0x9, 0x5, 0xfffffffd, 0xfd, 0x4, 0x2, 0x7, 0xbc, 0x4, 0x80000000, 0x8, 0xffff, 0x4, 0x0, 0xffffe5e6, 0x269, 0x0, 0xd8, 0x4, 0x7, 0x2e, 0x2, 0x5, 0x4e, 0x6, 0x9e, 0x1, 0x653, 0x7, 0xcd, 0x0, 0x4, 0x4, 0xdb, 0x0, 0x2, 0x7f, 0x6, 0x7fff, 0x4, 0x3, 0x7, 0x101, 0x80000001, 0x1, 0x2, 0x81, 0x0, 0x4, 0x3, 0xff, 0x5, 0x2, 0x5, 0x2, 0x6535, 0x9, 0xe13, 0x8, 0x8, 0x6, 0x7f, 0x7, 0x8, 0x6, 0x2, 0x86a, 0x8, 0x438, 0x9248, 0x81, 0x8001, 0xffff0001, 0x252, 0x8000, 0x6, 0x4, 0xac, 0x8, 0x9, 0x5, 0x7, 0x7, 0x6, 0x10000, 0xf1, 0x3d, 0x8, 0x6, 0xdc, 0x2, 0x1, 0xab64, 0x6, 0xa1ffbfc8, 0xf84f, 0x4, 0x800, 0x1, 0x1, 0x6, 0x3, 0x2, 0x1, 0x6, 0xc0, 0x1, 0x1, 0x80000001, 0x6, 0x3, 0x10001, 0x7, 0x67, 0x0, 0x5, 0x0, 0x16c, 0xd3, 0x1, 0xffff, 0x0, 0x5, 0xfffffff7, 0x9007a82, 0x7, 0x2, 0x8000, 0x827c, 0x6, 0x5, 0x1, 0x5, 0x3, 0x1, 0x96b, 0xfffffffb, 0x0, 0xffff, 0x7f, 0x7fffffff, 0x1ac, 0x7, 0x4, 0x97, 0x3, 0x33, 0x81, 0xfffff800, 0x401, 0x0, 0xcc02, 0x1ff, 0x80000001, 0x80000000, 0x2, 0x0, 0x400000, 0x6, 0x3, 0x0, 0xb2c8, 0x200, 0x10, 0x89, 0x0, 0x2, 0x80, 0x71, 0x8, 0xd70, 0x9, 0x5, 0x3, 0x8000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x2, 0x2, 0x9, 0xa6c, 0xfffffe01, 0x0, 0xe, 0xfffffffa, 0x5, 0x1, 0x1df546b2, 0x7, 0xf, 0x6, 0x7ff, 0x6, 0xfffffd48, 0x23a, 0x1ff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x1000, 0xffffffff, 0x0, 0x5, 0x0, 0x200, 0x4, 0x0, 0x2, 0x4, 0xe, 0x5, 0x6, 0x7, 0x400, 0x4, 0x31, 0x9, 0x8, 0x221, 0xa54, 0xfffffffd, 0x400, 0x800, 0x1, 0x7, 0x0, 0x2, 0x4, 0x5, 0x7f, 0x1, 0x6, 0x3, 0x0, 0x80000001, 0x6, 0x10, 0x96e4, 0x0, 0x7ff, 0x28882c15, 0x2, 0x5, 0x512, 0x9, 0x771, 0x81, 0x6, 0xfffffff8, 0x8, 0x1, 0x0, 0x8001, 0xf1, 0x8000, 0x0, 0xfffffffe, 0x4, 0x5, 0x2, 0x4, 0x1, 0x1, 0xfffff800, 0xf6, 0xfffffff8, 0x7fffffff, 0x5, 0x5, 0xfffffcbd, 0x30a3, 0xc8b, 0x8, 0x3, 0xffff3e25, 0x2, 0x1, 0x3ac8, 0x2c34, 0x4ac2, 0x958b, 0x1, 0x81, 0x5, 0xffffffff, 0x6, 0x576, 0x2, 0x2, 0x5, 0x7, 0x8000, 0x1, 0x5, 0x200, 0x52c4, 0x8, 0x779, 0xff, 0x2000, 0x0, 0x3, 0x0, 0xffffffff, 0x800, 0x6, 0x4, 0x6, 0x8, 0xfffffff8, 0x8, 0x0, 0x9, 0x3, 0xb57a, 0x6ed, 0x2, 0x5, 0xc, 0x0, 0x7, 0x4, 0x8, 0x8, 0x8, 0x1000, 0x1000, 0x200, 0x8, 0x80000000, 0x2, 0x6, 0x7, 0x14, 0x9, 0x10001, 0x8, 0x3, 0x6, 0xe, 0xffffffff, 0x244c, 0xbe0, 0x7, 0x9, 0xffffffff, 0x6, 0x725c, 0x4, 0x3e2b, 0x6, 0x7, 0x9, 0x7, 0x7fff, 0xfe32, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0xc, 0x3, 0xad, 0x2, 0x2, 0x8, 0x8, 0x4, 0x7, 0x395, 0x3, 0x5, 0xe, 0x8, 0x0, 0x40, 0x4, 0x4, 0x4, 0x0, 0xfffffaf4, 0x1, 0x4, 0x0, 0x6, 0xa5f, 0x6, 0x40, 0x1, 0x400, 0x7, 0x1, 0x6, 0x2, 0x7, 0x2, 0x3, 0xffffffff, 0x5, 0x100, 0x6, 0x0, 0x80, 0xc7, 0x7, 0x8, 0x6, 0x1000, 0x6735b9e0, 0x2, 0x4, 0x5, 0x3, 0x6, 0x1, 0x7, 0x2, 0x8, 0x3ff, 0xfffffffd, 0x7fffffff, 0xe3, 0x5, 0x1, 0x2, 0x6, 0x4, 0x40, 0x6, 0x4, 0x2, 0x7, 0xfffffffe, 0x0, 0x0, 0xb967, 0x1, 0x4, 0x7, 0xc9ae, 0x3, 0x3, 0x3, 0x9, 0x1ff, 0x5, 0x0, 0xffffffff, 0x2, 0x0, 0x1, 0x400]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x2, 0xf5, 0x7ff, 0xe0000000, 0xeec, 0x8, 0x2, 0xfd2, 0x8000, 0x2aee, 0x2, 0x400, 0x55, 0x1, 0x18b, 0x80000000, 0x2, 0x2, 0x0, 0x3, 0x5, 0x0, 0x7, 0x7fffffff, 0x2de, 0x7, 0xe, 0x1, 0x49, 0x8, 0x1, 0x4, 0x4ac5cf5e, 0x5, 0x3, 0x7fff, 0x6, 0x4, 0x4, 0x1, 0x6, 0x1, 0x1, 0x1, 0x9, 0xb, 0x7fffffff, 0x0, 0x6, 0x10001, 0xfab00000, 0x9, 0xfffffff8, 0x7, 0x7, 0x4, 0xff, 0x0, 0x0, 0x639, 0x40, 0xe556, 0x101, 0xd, 0x8, 0x0, 0x0, 0x7, 0x3, 0x81, 0x1, 0x3, 0x7fff, 0x9, 0xf, 0x2, 0xd, 0x5, 0x100, 0x9, 0x1, 0x1, 0x8, 0x3ff, 0xffff, 0xd, 0x6, 0x5, 0x4f, 0x743c, 0x6, 0x4, 0x2, 0x6549, 0xdb2b, 0x0, 0x801, 0x8, 0x5d52, 0xffffff4f, 0x10001, 0x1000, 0xd, 0xde6, 0xfffff800, 0x1, 0x3, 0x6, 0x3, 0xffffffff, 0x800, 0x10, 0x663, 0x401, 0x0, 0x101, 0x7f, 0x4d, 0x800, 0x8a7e, 0x3, 0x1, 0x8000, 0xff, 0x80, 0x5, 0x8, 0x4, 0x61, 0x7fffffff, 0x1, 0xf, 0x9, 0x0, 0x7, 0x5, 0x0, 0x6, 0xb5, 0x4, 0x0, 0x7, 0x5, 0x200, 0x0, 0x2, 0x2, 0x1, 0x100, 0x6, 0x8, 0x7614, 0x7, 0x9, 0x7, 0x9, 0x2, 0x7, 0x0, 0xffffffff, 0xca, 0xfffffff0, 0x2, 0xf, 0x0, 0x0, 0xa, 0x1, 0xfffffff9, 0x0, 0x77, 0x80, 0x100, 0x3ff, 0x8, 0x120000, 0x1, 0x0, 0x5, 0x5, 0x80000001, 0x9a45, 0x1, 0x200, 0x1000, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x6, 0x7fff, 0x7, 0x6ab, 0x1, 0xb7, 0x0, 0x7ff, 0x2, 0x5, 0x9, 0x3, 0x77, 0xfffffff4, 0x4, 0x9, 0x8, 0xfff, 0x3, 0x2, 0x8, 0x82, 0x6, 0x5, 0x5, 0x7, 0x9, 0x80000000, 0x6, 0x1, 0x0, 0x100, 0x8, 0x903, 0xb5bb, 0x800, 0x1, 0xfffffff7, 0x5, 0xf19, 0x8, 0x0, 0x9, 0x9, 0x1, 0x6, 0x1, 0x1, 0x40, 0x100, 0xfffffffc, 0x1, 0x6, 0x10001, 0x7, 0x8da, 0xff, 0xc328, 0x0, 0x6, 0x1, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x3, 0x6, 0x80000001, 0xba51, {0x5, 0x0, 0x2, 0x3, 0x6, 0xfff}, {0x14, 0x0, 0x57, 0x2, 0x8, 0x4}, 0x8, 0x400, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffeffffffa, 0x7, 0x7, 0x3, {0xf, 0x0, 0x7fff, 0x8, 0x8, 0xfff}, {0x40, 0x1, 0xaf22, 0xd799, 0x6, 0x4}, 0x9, 0xd0f, 0x81}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff1f71, 0xffffffffffffffff, 0xd, 0x91, 0x3, {0x9, 0x1, 0x2, 0xf, 0x3, 0x4f}, {0x3, 0x2, 0x40, 0x7, 0xff, 0x5}, 0x9, 0x6, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x59, 0x3, 0xffffff5d, 0x7, 0x7, 0xdb5, 0x3c, 0xfffffffe, 0xe30f, 0x1ff, 0xfffffffb, 0x7, 0x6, 0x5, 0xec3a, 0x8, 0x1, 0x6, 0x6, 0x1, 0x400, 0x5, 0x9, 0xe4b, 0xf6, 0x2, 0x1000, 0x6, 0x100, 0x4, 0x649, 0x8, 0x1, 0x3ff, 0x8000, 0x7, 0x4, 0xfffffff1, 0x80, 0x5, 0x2322, 0xffff60e1, 0x4, 0x6, 0xbc5, 0x0, 0x3, 0x1, 0x10000, 0x6, 0xfffffffe, 0x0, 0x1, 0x7f, 0x1, 0x8000, 0xef, 0x0, 0xe, 0x6, 0x101, 0x72cb, 0x8, 0x4, 0x8001, 0x211f, 0x349, 0x3, 0x8, 0xa6e1, 0x1, 0xffffffff, 0x3ff, 0x32, 0x1f9, 0x7, 0xfffffffd, 0xfffffffc, 0x80, 0xd711, 0x6, 0xc, 0x1e0f, 0x0, 0x1, 0x1, 0x2, 0x4, 0x0, 0x400, 0xc, 0xbed, 0xfffff001, 0x2, 0x2, 0xfff, 0x2, 0x1f2d, 0x4, 0x7, 0x9504, 0x100, 0x3ec8f16a, 0x9, 0x1, 0x2cb, 0x3ff, 0x3, 0x5, 0xfff, 0x1, 0xd9, 0x40000000, 0x6, 0x10040000, 0x9, 0x4, 0x7, 0xc, 0x33, 0x2, 0x7fff, 0x2, 0x2, 0x4, 0x8, 0x0, 0x1c4b8b04, 0xc, 0x4, 0xd, 0xa8, 0x5, 0x3, 0x0, 0xa, 0x62a, 0x10, 0x9, 0x3, 0x3, 0x3, 0x5, 0x2, 0x0, 0xffffffb4, 0x4, 0x2, 0x1, 0x80000001, 0x7fffffff, 0xe91d, 0x81, 0x200, 0xd, 0xfffffff9, 0x2, 0x0, 0x7fffffff, 0x9, 0xc, 0x5, 0x2, 0x200, 0x7ff, 0x80, 0xffff, 0x9, 0x8001, 0x4, 0x4, 0x401, 0x10, 0x7, 0x8, 0xffffffff, 0x1, 0x5, 0x9, 0x0, 0xc, 0xc, 0x3, 0x1, 0x3ff, 0xfffffffc, 0x10001, 0x7, 0x4, 0x2, 0x7, 0x1ff, 0x2, 0x40, 0x6, 0x5, 0x2, 0x3, 0x6, 0x101, 0x8, 0x9, 0x6, 0x0, 0xa, 0x7, 0x8, 0xc434, 0xd0, 0x1, 0x1c8, 0x2f5, 0x7, 0x205, 0x7ff, 0xffffffff, 0x7, 0x0, 0xd, 0x0, 0x1, 0x1005, 0x40, 0x3c1, 0x66, 0x200, 0xffff, 0x7fff, 0x2b95d88, 0xd, 0xf0d, 0xffffffff, 0x6, 0xcb3, 0x3, 0x4, 0xc8, 0x6f, 0x4, 0x3, 0xffff, 0x89, 0x4, 0x1, 0x6, 0x0, 0x3ff, 0x3, 0x3b16, 0x9, 0x1, 0x4, 0x9]}]]}, {0xe4, 0x6, "fd70b96112ac77e3f4ba72818bd0c5c0245cde701e1adb7ba61da6737c5213888cb14ef6fa40a648d92a3eb2edd60353acd14419ea92918a1738e5d4964797f8597f3e121f1065672da28e9cba131d0ee6fb956efee333233fbe71c40e0cddbc141207788ca002cdac1c7f410c054c2c79bffbd6eafa346d6029549a024afe11ab01648803b73f2ac6364787103e6868e2c7ffa5f1fb2beaf65631f9eac8761635600d4d7d75bd3cce2573e48166009fae5a3548f5b89bb05aeed7e5152b68855f3d326b929661b252a6e9ab544c57f3c665d6cd71bd239bfaae9c1640187bfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2698}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.079515592s ago: executing program 5 (id=524): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/meminfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) capset(&(0x7f0000000000)={0x19980330}, 0x0) socket$inet(0x2, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x2, 0x32314d4e, 0x7, 0x0, [{}, {0x0, 0x6}, {0x4, 0xfffffffc}, {0x5329, 0x20000}, {}, {0x9}], 0x4e, 0x3}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000280)={@empty, 0x1, 0x0, 0x40, 0x0, [{@multicast1}, {@private}, {@broadcast}, {@dev}]}}) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, '\x00', 0x2}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="3eef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 10.257830219s ago: executing program 2 (id=526): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) sendmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000340)="7037533e7eac28b898157c0fb27d33d07926807b1149ac56b537e21510f8a176fe44998cc11c6f981efb0397883db80d31429dc06d2477138a5e8e617f69abeae28f68844991939ab5fad8e78766541204d4efa912123c9461c72d43937ed1f41a67dc5719c22d608b06aaf6785674928f57515947cbb88bb36a920edd83f6106f3d7636491dd3fdbdc74bbfb0cc9d24863391911ef2706bffdf1db4", 0x9c}, {&(0x7f0000000400)="ac10ed0f15946417ac2efd40e5cc2b66121c000000000000000000", 0x1b}, {&(0x7f0000000440)="0daeed6ddc4760d19c533b", 0xb}, {&(0x7f0000000480)="46a9c0a37d07274d3a3a4811d52ea65790c18d6e4082ad9e64a6cfb09292527b3d814d85e93684fd625ca7c5510268d8c0f8037c18e07945c93a05ef3ed4735c2c39036983835cb98fd0af7438527d03b9bfeb8b95132cd124356cfac3491aefc36d08d2076e61d190d30137787a684a1017e9a7647e28c23a8b8de1045c768d", 0x80}, {&(0x7f0000000580)="84d9b8804a366db46b54182c5bc7c980898071f6f11a61bed8062d8afada446263f507f93709aacecf7bb85d403da5c9438d2025ae15bdc044d5a6152586b692a2f33dbef5d91017b1efa739edf0cde07a3b43d23cc66e6f993e03743c27450a17ceda36f60ed1f29af89f12716cb6e7a2ca4c8d13197e393ebf1c697f155c4b8b22ba94d4bb0a0d26ad5f274470bd12e849831006f7dd26d0fd44fe37352ce9abb7", 0xa2}, {&(0x7f0000000640)="909de39d8fe5a3abec6f3801208131ebeb1de5a9b2a4bbd6d4af4b358ce6c4725f27e0b478b66f99af21dce93dde065f969c7727a0eb6f2b6ca9df9e4e9869b6f270e25b51142ce8e2d6941ea3", 0x4d}, {&(0x7f0000000500)="2dfc1f891ff4968229e0929e1ce6ee369adc4f83cb5298c00f7df53e", 0x1c}, {&(0x7f00000006c0)="bec8e3966d0369943b0e45", 0xb}, {&(0x7f0000000700)="a6f1", 0x2}, {&(0x7f0000000740)="0d148d3e0fa00bd3e6d96139a186f8261967ed77bbf5c87a5ed674d0bde61c3934d4cf343477a5ef627c8582a5423f6ba3b166ea8020745621f37e10337b4ed9ab04fb0630b8d0a616fe3236b78d10d1fe5225ff4909eac32b7932229ee65ae436c4f2", 0x63}], 0xa, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x158}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000009c0)="3046c1c12f48743b3506cddcb0f4d7f8c9924647eaf5e0a26475014ddc0cb1b23185000bfd32090c062c6dc138dfa07a0a833f87afb306b899", 0x39}, {&(0x7f0000000a00)="a41b290b6a0850352eef3b4699b9550bdb358acdb31d629ab4d5b7957a41b8db0f94838c9544198af8accd1571f39b384cd38ead2fdefe92405fb9a197757b3db9bc5b4ab7634d214a2d6d81f4373ce92f5221287a810ca77256570edd006b231ec0b0aa91547d792dd6a6cf3b8748c66a405fb15991507cdaa2317dff8513399a5e7f7315475ea006c661e89043098adf51534444c7d85ee6d6fc2458c8b1613806a0f8ba2fadd9f8db981e2acee66a868aca", 0xb3}, {&(0x7f0000000ac0)="9010a9a131493d61df392e79837d8678d9eaab9f513fa943d42dd4c12de78cc906d13e25876a4c41c596c04761db615ece558de647e34856e803b0ea203ff041250bdee30b6a46a8b266e751468ef2c67908020d8a7b89573eededd9f0f93f9f7ff525906cc0c93ffb94767fe6f1b8333ed7f1d6c936a6adbc07b4bb987f93c6fcea300fabff4c2881ab", 0x8a}, {&(0x7f0000001f40)="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", 0xfc}, {&(0x7f0000000cc0)="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", 0x181}], 0x5}}], 0x2, 0x44880) 9.986149215s ago: executing program 5 (id=527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000300)=""/104, 0x68) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./bus\x00') getdents(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYRES32=r7], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000002, 0x12, r8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x10012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0xc, &(0x7f0000000000)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800a00010072616e67650000003400028008000140000000000800024000000000040004801c00038015000100f06d66991216953e9a9fb1ce13bf9a03e20000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000af91f1c42ed37ff7c0a32e77e09bd6da765784bfe5c561963d4f71a1f6c6a373840815abb7e057061a68690c9528db21b31a37ba24916617321d0d111040dba7947839b8e2ff5dcf24d1fbc3c3ac3"], 0x9c}}, 0x200000d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 9.896102672s ago: executing program 2 (id=528): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x810, 0xffffffffffffffff, 0x8000000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb2ad, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000540)={&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/8, 0x8}], 0x2, &(0x7f0000000500)=""/44, 0x2c}, 0x10000) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000001c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) getpid() fcntl$getown(0xffffffffffffffff, 0x9) r4 = getpid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="f30de7"], 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000f9fda264000000009900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018500000080000000000000000000000852000008e"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x17, &(0x7f0000000180)=""/23, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 8.767904444s ago: executing program 6 (id=530): socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010400000000000000020000000505000400000000040900020073797a30000000000500010007000000050005000a0000"], 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x1a, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0x10000000d59f83, 0x19f6, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x2, 0xb9f, 0xf, 0x38, {0x8, 0x3}, 0xd1, 0x9}}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @local}}}, 0x32) connect$pppl2tp(r2, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x3, 0x0, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4) 8.52767385s ago: executing program 5 (id=531): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x810, 0xffffffffffffffff, 0x8000000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb2ad, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000540)={&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/8, 0x8}], 0x2, &(0x7f0000000500)=""/44, 0x2c}, 0x10000) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000001c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) getpid() fcntl$getown(0xffffffffffffffff, 0x9) r4 = getpid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="f30de7"], 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000f9fda264000000009900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018500000080000000000000000000000852000008e"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x17, &(0x7f0000000180)=""/23, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 6.916417933s ago: executing program 0 (id=532): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008"], 0x40}}, 0x0) (fail_nth: 1) 5.010370366s ago: executing program 2 (id=533): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) r0 = gettid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) write$cgroup_devices(r2, &(0x7f0000000080)={'a', ' *:* ', 'm\x00'}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x88082) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000010000304000000008080030000000000", @ANYRES32=0x0, @ANYBLOB="0000000000800000380012800b00010069703667726500002800028014000600fe80000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="060002003700000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x68}, 0x1, 0xba01}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120379000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BLKRRPART(r3, 0x125f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="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", 0x6dc}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000500053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008011, r2, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0xd41, 0x0, 0x0, 0xfffffa37, 0x0, 0xffffffff, 0x7fffffff], [0x6, 0x2, 0x0, 0x0, 0x8001, 0x3], [0x6, 0x0, 0x80000004, 0x7, 0x0, 0xffffffff, 0x8, 0x6]], '\x00', [{0x0, 0x6}, {0x1, 0x1}, {0x5}, {0x7, 0x0, 0x0, 0x1, 0x1}, {0x80000004, 0xffffffff, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x0, 0x5}, {0x8000000, 0x8f96}, {}, {0x0, 0x803}, {}, {0x0, 0x7}], '\x00', 0x1000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5.00961604s ago: executing program 6 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80040000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) sendmsg$FOU_CMD_GET(r8, 0x0, 0xc8c0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.952289341s ago: executing program 0 (id=535): r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002280)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000140)=""/63, 0x3f}], 0x51}, 0x2) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000400)={&(0x7f0000000600)=""/134, 0x86}) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0xfa, @dev={0xfe, 0x80, '\x00', 0x3b}}, 0x1c) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000614000118852fbd7000fbdb25e769dee13780fa75b5f90100010000003d032708c0a8c2de4067a39fa7a557c8267a0c74cd4a2a5ef20e8815f5b5f483a29d9e3cd8a04a093302ac428599eee3"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4.630611546s ago: executing program 0 (id=536): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x9b}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x61, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=@newtaction={0x2698, 0x30, 0xb, 0x0, 0x0, {}, [{0x2684, 0x1, [@m_police={0x2680, 0x10, 0x0, 0x0, {{0xb}, {0x2574, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x6, 0x8, 0x3, 0x8, 0x607, 0xffffffff, 0x7, 0x9, 0x5, 0x0, 0x9, 0x8, 0x8, 0x8, 0x3, 0x3, 0x6, 0x400, 0xf2f, 0x7, 0x1ff, 0xb3a, 0x3, 0x0, 0xc, 0xc, 0xffff, 0xfc19, 0x8, 0x9, 0x1e4, 0xfffffffd, 0x3, 0x7bf, 0x9, 0x4, 0x3, 0x2, 0x8, 0xfffffe00, 0x34, 0xb32, 0x0, 0x5, 0x10000, 0xd, 0x8b, 0x4, 0x4, 0xffffffff, 0x7fff, 0x9, 0x2, 0x81, 0xd, 0x2, 0x2, 0x7f, 0x6, 0xbf9, 0x2, 0x0, 0xe019, 0x22, 0x7, 0x9, 0x8001, 0x7fff, 0xff, 0x57f9, 0x7f, 0x4, 0x5, 0x2, 0xa, 0x193, 0x101, 0xfffffffe, 0x1, 0x5, 0x3fe00000, 0xa, 0x800, 0x0, 0x8, 0x80000000, 0x42, 0x5, 0xa1, 0x4, 0xffffff73, 0x4, 0x85a, 0x0, 0x0, 0x5, 0x80, 0x81, 0x0, 0x7f, 0x7ff, 0x6, 0x2, 0xa, 0x1000, 0x0, 0x9, 0x2, 0x61, 0x7, 0x200, 0x6, 0xb, 0x2000, 0xd, 0x0, 0x1, 0x8, 0x0, 0x0, 0x6, 0x1, 0x5, 0x0, 0xb, 0x3, 0x6, 0x0, 0x401, 0x3, 0x6, 0xff, 0x3, 0x8, 0xfffffffe, 0x1, 0x0, 0x76, 0x2, 0x3ffd, 0x9, 0x6, 0x1, 0x4, 0x9, 0x9, 0x56, 0x8, 0xfffffffe, 0x0, 0x7, 0x8001, 0x24, 0x2, 0x2, 0x2, 0x6, 0x6, 0x401, 0x6, 0xf0a, 0x6, 0x4, 0x5, 0x8fc, 0x1, 0x7fff, 0x8, 0x1, 0xf5, 0x1, 0x5, 0x4, 0x1, 0x3bf698aa, 0x2, 0x6, 0x8, 0x0, 0x1, 0xfffffff7, 0x6, 0x5, 0x6, 0x2, 0x2, 0x89, 0x3, 0xdfb9fb8a, 0x1, 0x80, 0xffffffff, 0x800, 0x2, 0x4a5, 0x10001, 0x7ff, 0x8000, 0x0, 0xfffffffc, 0x9, 0x9, 0x6, 0x2, 0x7, 0xfff, 0x1, 0x436, 0x7, 0x6, 0x6, 0x3, 0x9, 0x9, 0x543, 0x80, 0xfff, 0x7, 0xcce, 0x4, 0x9, 0x80000000, 0x7, 0x2, 0x401, 0x7, 0x5, 0x26e, 0xfffffff9, 0x800, 0xfffffffb, 0x3, 0xccb4, 0x77fe, 0x7, 0x6, 0x2, 0xd, 0x2, 0xd, 0x8001, 0xe8aa, 0xd, 0x1, 0x40, 0x2, 0x4, 0x7, 0x7fff, 0x9, 0x0, 0xd, 0x1, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x40000, 0x5, 0xff, 0xfff, 0x0, 0x2, 0x800, 0x6, 0x7, 0x6f, 0x9, 0x4, 0x7, 0xff, 0x2, 0x1ff, 0x7ff, 0x8, 0x7fff, 0x5, 0x2, 0x4, 0x6, 0xffff, 0x33, 0x3, 0xffffffff, 0x4, 0x2, 0x4, 0x3ff, 0x5, 0x6, 0x1, 0x4, 0x2, 0xb2, 0x8, 0x7fff, 0x0, 0x3, 0x6, 0x3, 0x20000000, 0x400, 0x8001, 0x2e, 0x1000, 0x5, 0x3, 0x10000, 0x3, 0x5, 0xc68, 0x8, 0x1ff, 0x215f, 0xfffffffb, 0x4, 0x4b2f6653, 0x8, 0x8, 0x1, 0x6, 0x6, 0xfffffffc, 0x4, 0x2a, 0x2a3c, 0x3, 0x8000, 0xe, 0x10, 0x8, 0xffff, 0x800, 0x2, 0x6, 0xfffffffe, 0x7fff, 0x400, 0x4, 0xff, 0x40, 0xc, 0x4, 0x8, 0x101, 0xa, 0x7, 0x9, 0x9, 0x5382bd82, 0x1, 0x6, 0x800, 0x8, 0x2, 0x5, 0x1, 0x7ff, 0x3c87e47d, 0x0, 0x5, 0x4, 0x9, 0x5, 0x8, 0xffffffff, 0x1, 0x270, 0xd487, 0xb, 0x7, 0x5, 0x7, 0xa0f, 0x7, 0x100, 0x2, 0xfffffffd, 0x80000000, 0xf, 0xffff7fff, 0x9, 0x3ff, 0x8000, 0xa46, 0x80000000, 0xffd, 0x7, 0x4, 0x5, 0x7, 0xf, 0x3, 0x2, 0x3, 0xffffffff, 0x1000, 0x4, 0x29e9, 0x9, 0xd, 0x3, 0xfffffffa, 0x6e8, 0x2, 0x7, 0x13, 0x7, 0x9, 0x8, 0x1, 0x1, 0x6, 0x9, 0x8000, 0xe, 0x9, 0xffffffff, 0x8, 0xd, 0xd, 0x40000, 0x80000000, 0x4, 0x80, 0xee9f, 0x9, 0x5, 0x4, 0x1, 0x1000000, 0x4, 0x9, 0xfff, 0xfffffffe, 0x5e57, 0x0, 0x2, 0x5, 0x7, 0x9, 0x371, 0x4, 0x8, 0x2, 0x9, 0x7, 0x6, 0x10, 0xce, 0x4, 0x0, 0x8, 0x0, 0x5, 0x8, 0xffff, 0xd, 0x400, 0x2, 0x7, 0x6, 0x7, 0x0, 0x5, 0x1ff, 0x5, 0x10, 0x5, 0x7, 0x2, 0x2, 0xfff, 0x2, 0x1, 0x3, 0x5, 0x3, 0x7, 0x0, 0x8, 0x10, 0x232, 0xf, 0x2, 0x9, 0x6, 0x80, 0xfffffff7, 0x9, 0x8, 0x3d8, 0x0, 0x6, 0x6, 0x2, 0x9, 0x1000, 0x7f, 0xfffffffa, 0x9, 0xd, 0x4, 0x7f, 0x1, 0x2, 0xfffffffb, 0x40, 0x10001, 0x6, 0x0, 0x984a74c3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x465ebefe, 0x20000000, 0x2d, 0x2, 0x6, {0x1, 0x1, 0x7, 0x7, 0x6, 0x401}, {0x6, 0x0, 0xff, 0x7f, 0x7471, 0x80000000}, 0x8, 0xfffff137, 0x40}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x6, 0x0, 0x0, 0xffff1033, 0x7, 0x3, 0x8, 0x1, 0x1, 0xd, 0x9, 0x40, 0x7, 0x0, 0x11e9, 0x86b, 0x2, 0x8, 0x0, 0xa5b5, 0x5, 0x8, 0xd3, 0x4, 0x4, 0x4, 0x9, 0x9, 0x3, 0xbcc5, 0xfffffffd, 0x6, 0xffff, 0x1ff, 0xe, 0x4, 0x3, 0xfffffff7, 0x9, 0xffffffff, 0xb, 0x7f, 0xff, 0xa, 0x3, 0x0, 0xd, 0x5, 0x6, 0x5, 0x3, 0xd7b, 0x10000000, 0x7, 0x0, 0x2, 0xff, 0x80, 0x2, 0x8b, 0x7fff, 0x0, 0x7, 0x10000, 0x4, 0x7, 0x7a4, 0x837f, 0x1c7, 0x7, 0x278a, 0xffffff00, 0xd, 0x2, 0x3cfb, 0x1000, 0x200, 0x5, 0x6, 0x10000, 0x2, 0x295d, 0xfffffffd, 0x3, 0x8, 0x2, 0x248, 0x200, 0x7, 0x7fff, 0x5, 0x7, 0x4, 0x7, 0xfffffff9, 0xfffffff2, 0x4, 0xfffffff7, 0x0, 0x2, 0xb, 0x5, 0x4, 0x6, 0x8, 0x7, 0xffff0001, 0x1, 0x6, 0xa, 0x8, 0xfffffffd, 0x5, 0xfffffff0, 0x8, 0x5, 0x9, 0x4, 0x5, 0x1, 0x40, 0x7ff, 0x0, 0x5, 0x7, 0x5, 0xbc4, 0x6, 0xfca, 0x101, 0x7, 0x80000001, 0x8, 0xd748, 0x3, 0x81, 0x2d7d, 0x4, 0xe, 0xc3195ac, 0xfd, 0x1c, 0x100, 0x1, 0xd11, 0x4233, 0xd, 0x0, 0x6, 0x0, 0x47a7, 0x3, 0x0, 0x6, 0x7, 0x0, 0x10, 0x2, 0x5, 0x7, 0x3, 0x6, 0xda5, 0xb, 0x8, 0x7, 0x7f, 0x101, 0x4, 0x5, 0x1, 0x8, 0xab, 0x9, 0x3, 0x4, 0x280000, 0x1, 0x2, 0xa3a0, 0x81, 0x1000, 0x5, 0xffffff81, 0x2, 0x0, 0x1ff8, 0x81, 0xaf, 0xc0000000, 0x5, 0x63e5b3a7, 0x50e, 0xfffffff8, 0x3, 0x1, 0x2982, 0x6, 0x4, 0x7, 0xb, 0x3, 0x7, 0xc, 0xbd2, 0x1000, 0x400, 0x0, 0x2, 0x40, 0x5, 0x9, 0x9, 0x9, 0x7, 0xfffffff7, 0x100, 0xfffffffc, 0x2, 0xc, 0x6, 0x80000000, 0x3, 0x8, 0x9, 0x10000, 0xc6, 0x0, 0xe9, 0xa6f0, 0x8, 0x1, 0x68b, 0x19f8, 0x9, 0x4, 0xff, 0x10000, 0x1, 0x9, 0x5, 0x8, 0x3, 0x7f, 0x2, 0x9, 0x785, 0xffff3100, 0xc, 0x5, 0x5, 0x3, 0x5, 0x3ff, 0x21ce]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb9, 0x5, 0x3, 0x5, 0x8586, 0x2, 0x4, 0x80, 0x4, 0xdc0, 0x8, 0xff, 0x7, 0x8d, 0x4, 0x7fff, 0x2, 0x1, 0x7, 0x4, 0x7, 0x9, 0x8, 0x80000001, 0x0, 0x800, 0x4df5, 0x7e99, 0x2, 0x1, 0xe11, 0x2, 0x5, 0x4, 0x1, 0x4, 0xd, 0x0, 0x4, 0x8, 0x27e5, 0xf, 0x7, 0x400, 0xe, 0x4, 0x6, 0x1ff, 0x6, 0x6, 0x3, 0x5, 0x401, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x318, 0x3, 0xffffff3b, 0x1ff, 0x9, 0x5, 0x3ff, 0x7, 0xfff, 0xfffffffe, 0x6, 0x3, 0x5, 0x5, 0x3, 0x8, 0x11b, 0x1eee, 0x4, 0x7, 0x34e, 0x1, 0x10001, 0x60b2, 0x9, 0x0, 0x8, 0x81, 0x7fff, 0x4, 0x2, 0x38f7, 0x1000, 0x7, 0x8, 0x5e2664b3, 0xfffffff9, 0x7, 0x6, 0x4, 0xfff, 0xdb0, 0x800, 0x7, 0x5, 0x9, 0x1, 0x3, 0x3, 0x9, 0x6, 0x2, 0x9, 0xfffffff8, 0x7, 0xdbe, 0x100, 0x2, 0x2, 0xde4f, 0x8, 0x0, 0x4, 0x5, 0xd8, 0x800, 0x4, 0x6, 0x8, 0x5, 0x6, 0x80000000, 0x101, 0x0, 0xac27, 0x5, 0x800, 0x3, 0x4, 0x3, 0x1, 0x1, 0x4, 0x1, 0x8, 0x5a0, 0x4, 0x2, 0x5, 0x7f, 0xfd95, 0x7, 0x7, 0xffffffd2, 0xfff, 0x0, 0x6, 0x7fffffff, 0x40, 0x8000, 0x0, 0x8000, 0x82, 0xfffff91a, 0xc0, 0x5, 0xe6, 0x8, 0x1, 0x2abd, 0x2, 0x8, 0x6, 0xe, 0x23b3, 0x6, 0xe50c, 0x0, 0x5, 0x1, 0x401, 0x3ff, 0x4, 0xf, 0x1, 0x2, 0x8, 0xfffeffff, 0x2, 0x4, 0x3, 0x2, 0x100, 0xd, 0x7, 0x2, 0x0, 0x1, 0x1000, 0x1, 0x1, 0x4, 0x0, 0x1000, 0x3, 0x0, 0x200, 0x7, 0x60000000, 0x0, 0x7, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0xa, 0x5, 0x4, 0x401, 0xffffff8f, 0x8, 0x3, 0x8, 0x7, 0xffff, 0x7d39, 0x9, 0x2, 0x4, 0x2, 0x401, 0x1, 0x12, 0x7, 0xfff, 0x6, 0x0, 0x3, 0x6, 0x2, 0x40f, 0x8, 0xfffffffc, 0x10, 0x7, 0x7ff, 0x8, 0x6, 0xffff1368, 0x3, 0x1, 0x5, 0xa, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0xb70, 0xffff, 0x2, 0x1ed, 0x3, 0x200, 0x2, 0x0, 0x5, 0x1, 0x40, 0x4, 0x1, 0x4, 0x3, 0xb, 0x9, 0x10001, 0x89b, 0x7ff, 0x2, 0x1, 0x1d, 0x7, 0x800, 0xde, 0xfffffff9, 0x8, 0x1d, 0xfffffffa, 0x6, 0x10000, 0x1, 0x424, 0x1, 0x80, 0x5, 0x1, 0x1, 0x2ac5, 0xff, 0x1, 0xffffffff, 0x9, 0x4, 0x0, 0x7, 0x7f, 0xa7, 0x3b2, 0x73, 0x9, 0x2, 0x54, 0xa, 0x0, 0x27, 0xfffffff8, 0xc7, 0x3, 0x10, 0xe9, 0x6, 0x0, 0x7dff, 0xfffffffb, 0x186, 0x104000, 0xe3b, 0xaed, 0x5, 0x6, 0x200, 0x10001, 0x2, 0x400, 0x0, 0x3, 0x9, 0x5, 0xb, 0x2, 0x8, 0x9, 0x1, 0x10000, 0x6, 0x2, 0x7, 0x10000, 0x1b4, 0x8, 0x0, 0x3, 0xffffffff, 0xa1, 0x7, 0xffffffff, 0x3, 0xffff0000, 0x6, 0x4, 0x1, 0xb3a6d58d, 0x4, 0x8, 0xa70, 0x2, 0x7, 0x800000, 0x1000, 0x7, 0x1, 0x46, 0xdb4, 0x8697, 0x8, 0x9, 0x8, 0x10000, 0x80, 0xc1a, 0x0, 0x1, 0x7f, 0x56, 0xfaeb, 0x1ffc00, 0xc, 0x0, 0x9, 0x6, 0x2, 0x8, 0x6, 0xcb4f, 0x8001, 0x9, 0x8, 0x4, 0x9, 0x7ff, 0xffff, 0x0, 0xfffffff7, 0x3ab, 0x1, 0x7, 0x1, 0xa51, 0x6, 0x4, 0x7c, 0x8, 0x200, 0x80, 0x4aeae398, 0x238, 0x8100, 0x40, 0x7, 0x0, 0xb81, 0x7, 0x1, 0x0, 0x1, 0x6, 0x8001, 0x6, 0x6, 0x7, 0x6, 0x80000001, 0xe, 0x3, 0xd, 0x2f48, 0xb8, 0x7, 0x8, 0xffff, 0x1000, 0x8, 0xb6, 0x1, 0x6, 0x7ff, 0x8000000, 0x8c, 0x6, 0x101, 0x0, 0x9, 0x5, 0x51, 0x4, 0x7fffffff, 0x92, 0x2, 0x2, 0x7, 0x0, 0x5, 0x3, 0x7, 0x4, 0x4, 0xfff, 0x2, 0x8, 0x10, 0xb, 0x8001, 0x101, 0x6, 0x9, 0x33f5, 0x2, 0xdf5, 0x3ff, 0x2, 0x1, 0x4, 0xfffffffa, 0xfffffff9, 0x1e39, 0x3, 0x7, 0x7, 0x6, 0x70400000, 0x6, 0x0, 0xf, 0x8, 0xc, 0x8001, 0x800, 0x1, 0xb21, 0x9, 0xffff, 0x5, 0xb68d, 0x1, 0x9, 0x100, 0x3, 0x4, 0x3, 0x3, 0x100, 0x4b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7fffffff, 0x8, 0x7, 0x7, 0x5a9f, 0x6, 0x8, 0x80000001, 0x1, 0xa, 0x0, 0x9c, 0x5, 0xe5, 0x0, 0x2c53, 0x0, 0x0, 0x5, 0x9, 0x1, 0x4, 0x3, 0x4, 0xe8, 0xfffffff8, 0x7, 0x4a9e, 0x78e08e2c, 0x1, 0x5, 0x502201d4, 0x9, 0x5, 0xeb6, 0x1, 0x8, 0x0, 0x0, 0x6, 0x1ff, 0xffffffff, 0x800, 0x1, 0x80, 0x6, 0x1000, 0x80000000, 0x99, 0x1, 0x726, 0x6, 0x247, 0x3, 0x10, 0x7dd2, 0x9, 0x5, 0xfffffffd, 0xfd, 0x4, 0x2, 0x7, 0xbc, 0x4, 0x80000000, 0x8, 0xffff, 0x4, 0x0, 0xffffe5e6, 0x269, 0x0, 0xd8, 0x4, 0x7, 0x2e, 0x2, 0x5, 0x4e, 0x6, 0x9e, 0x1, 0x653, 0x7, 0xcd, 0x0, 0x4, 0x4, 0xdb, 0x0, 0x2, 0x7f, 0x6, 0x7fff, 0x4, 0x3, 0x7, 0x101, 0x80000001, 0x1, 0x2, 0x81, 0x0, 0x4, 0x3, 0xff, 0x5, 0x2, 0x5, 0x2, 0x6535, 0x9, 0xe13, 0x8, 0x8, 0x6, 0x7f, 0x7, 0x8, 0x6, 0x2, 0x86a, 0x8, 0x438, 0x9248, 0x81, 0x8001, 0xffff0001, 0x252, 0x8000, 0x6, 0x4, 0xac, 0x8, 0x9, 0x5, 0x7, 0x7, 0x6, 0x10000, 0xf1, 0x3d, 0x8, 0x6, 0xdc, 0x2, 0x1, 0xab64, 0x6, 0xa1ffbfc8, 0xf84f, 0x4, 0x800, 0x1, 0x1, 0x6, 0x3, 0x2, 0x1, 0x6, 0xc0, 0x1, 0x1, 0x80000001, 0x6, 0x3, 0x10001, 0x7, 0x67, 0x0, 0x5, 0x0, 0x16c, 0xd3, 0x1, 0xffff, 0x0, 0x5, 0xfffffff7, 0x9007a82, 0x7, 0x2, 0x8000, 0x827c, 0x6, 0x5, 0x1, 0x5, 0x3, 0x1, 0x96b, 0xfffffffb, 0x0, 0xffff, 0x7f, 0x7fffffff, 0x1ac, 0x7, 0x4, 0x97, 0x3, 0x33, 0x81, 0xfffff800, 0x401, 0x0, 0xcc02, 0x1ff, 0x80000001, 0x80000000, 0x2, 0x0, 0x400000, 0x6, 0x3, 0x0, 0xb2c8, 0x200, 0x10, 0x89, 0x0, 0x2, 0x80, 0x71, 0x8, 0xd70, 0x9, 0x5, 0x3, 0x8000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x2, 0x2, 0x9, 0xa6c, 0xfffffe01, 0x0, 0xe, 0xfffffffa, 0x5, 0x1, 0x1df546b2, 0x7, 0xf, 0x6, 0x7ff, 0x6, 0xfffffd48, 0x23a, 0x1ff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x1000, 0xffffffff, 0x0, 0x5, 0x0, 0x200, 0x4, 0x0, 0x2, 0x4, 0xe, 0x5, 0x6, 0x7, 0x400, 0x4, 0x31, 0x9, 0x8, 0x221, 0xa54, 0xfffffffd, 0x400, 0x800, 0x1, 0x7, 0x0, 0x2, 0x4, 0x5, 0x7f, 0x1, 0x6, 0x3, 0x0, 0x80000001, 0x6, 0x10, 0x96e4, 0x0, 0x7ff, 0x28882c15, 0x2, 0x5, 0x512, 0x9, 0x771, 0x81, 0x6, 0xfffffff8, 0x8, 0x1, 0x0, 0x8001, 0xf1, 0x8000, 0x0, 0xfffffffe, 0x4, 0x5, 0x2, 0x4, 0x1, 0x1, 0xfffff800, 0xf6, 0xfffffff8, 0x7fffffff, 0x5, 0x5, 0xfffffcbd, 0x30a3, 0xc8b, 0x8, 0x3, 0xffff3e25, 0x2, 0x1, 0x3ac8, 0x2c34, 0x4ac2, 0x958b, 0x1, 0x81, 0x5, 0xffffffff, 0x6, 0x576, 0x2, 0x2, 0x5, 0x7, 0x8000, 0x1, 0x5, 0x200, 0x52c4, 0x8, 0x779, 0xff, 0x2000, 0x0, 0x3, 0x0, 0xffffffff, 0x800, 0x6, 0x4, 0x6, 0x8, 0xfffffff8, 0x8, 0x0, 0x9, 0x3, 0xb57a, 0x6ed, 0x2, 0x5, 0xc, 0x0, 0x7, 0x4, 0x8, 0x8, 0x8, 0x1000, 0x1000, 0x200, 0x8, 0x80000000, 0x2, 0x6, 0x7, 0x14, 0x9, 0x10001, 0x8, 0x3, 0x6, 0xe, 0xffffffff, 0x244c, 0xbe0, 0x7, 0x9, 0xffffffff, 0x6, 0x725c, 0x4, 0x3e2b, 0x6, 0x7, 0x9, 0x7, 0x7fff, 0xfe32, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0xc, 0x3, 0xad, 0x2, 0x2, 0x8, 0x8, 0x4, 0x7, 0x395, 0x3, 0x5, 0xe, 0x8, 0x0, 0x40, 0x4, 0x4, 0x4, 0x0, 0xfffffaf4, 0x1, 0x4, 0x0, 0x6, 0xa5f, 0x6, 0x40, 0x1, 0x400, 0x7, 0x1, 0x6, 0x2, 0x7, 0x2, 0x3, 0xffffffff, 0x5, 0x100, 0x6, 0x0, 0x80, 0xc7, 0x7, 0x8, 0x6, 0x1000, 0x6735b9e0, 0x2, 0x4, 0x5, 0x3, 0x6, 0x1, 0x7, 0x2, 0x8, 0x3ff, 0xfffffffd, 0x7fffffff, 0xe3, 0x5, 0x1, 0x2, 0x6, 0x4, 0x40, 0x6, 0x4, 0x2, 0x7, 0xfffffffe, 0x0, 0x0, 0xb967, 0x1, 0x4, 0x7, 0xc9ae, 0x3, 0x3, 0x3, 0x9, 0x1ff, 0x5, 0x0, 0xffffffff, 0x2, 0x0, 0x1, 0x400]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x2, 0xf5, 0x7ff, 0xe0000000, 0xeec, 0x8, 0x2, 0xfd2, 0x8000, 0x2aee, 0x2, 0x400, 0x55, 0x1, 0x18b, 0x80000000, 0x2, 0x2, 0x0, 0x3, 0x5, 0x0, 0x7, 0x7fffffff, 0x2de, 0x7, 0xe, 0x1, 0x49, 0x8, 0x1, 0x4, 0x4ac5cf5e, 0x5, 0x3, 0x7fff, 0x6, 0x4, 0x4, 0x1, 0x6, 0x1, 0x1, 0x1, 0x9, 0xb, 0x7fffffff, 0x0, 0x6, 0x10001, 0xfab00000, 0x9, 0xfffffff8, 0x7, 0x7, 0x4, 0xff, 0x0, 0x0, 0x639, 0x40, 0xe556, 0x101, 0xd, 0x8, 0x0, 0x0, 0x7, 0x3, 0x81, 0x1, 0x3, 0x7fff, 0x9, 0xf, 0x2, 0xd, 0x5, 0x100, 0x9, 0x1, 0x1, 0x8, 0x3ff, 0xffff, 0xd, 0x6, 0x5, 0x4f, 0x743c, 0x6, 0x4, 0x2, 0x6549, 0xdb2b, 0x0, 0x801, 0x8, 0x5d52, 0xffffff4f, 0x10001, 0x1000, 0xd, 0xde6, 0xfffff800, 0x1, 0x3, 0x6, 0x3, 0xffffffff, 0x800, 0x10, 0x663, 0x401, 0x0, 0x101, 0x7f, 0x4d, 0x800, 0x8a7e, 0x3, 0x1, 0x8000, 0xff, 0x80, 0x5, 0x8, 0x4, 0x61, 0x7fffffff, 0x1, 0xf, 0x9, 0x0, 0x7, 0x5, 0x0, 0x6, 0xb5, 0x4, 0x0, 0x7, 0x5, 0x200, 0x0, 0x2, 0x2, 0x1, 0x100, 0x6, 0x8, 0x7614, 0x7, 0x9, 0x7, 0x9, 0x2, 0x7, 0x0, 0xffffffff, 0xca, 0xfffffff0, 0x2, 0xf, 0x0, 0x0, 0xa, 0x1, 0xfffffff9, 0x0, 0x77, 0x80, 0x100, 0x3ff, 0x8, 0x120000, 0x1, 0x0, 0x5, 0x5, 0x80000001, 0x9a45, 0x1, 0x200, 0x1000, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x6, 0x7fff, 0x7, 0x6ab, 0x1, 0xb7, 0x0, 0x7ff, 0x2, 0x5, 0x9, 0x3, 0x77, 0xfffffff4, 0x4, 0x9, 0x8, 0xfff, 0x3, 0x2, 0x8, 0x82, 0x6, 0x5, 0x5, 0x7, 0x9, 0x80000000, 0x6, 0x1, 0x0, 0x100, 0x8, 0x903, 0xb5bb, 0x800, 0x1, 0xfffffff7, 0x5, 0xf19, 0x8, 0x0, 0x9, 0x9, 0x1, 0x6, 0x1, 0x1, 0x40, 0x100, 0xfffffffc, 0x1, 0x6, 0x10001, 0x7, 0x8da, 0xff, 0xc328, 0x0, 0x6, 0x1, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x3, 0x6, 0x80000001, 0xba51, {0x5, 0x0, 0x2, 0x3, 0x6, 0xfff}, {0x14, 0x0, 0x57, 0x2, 0x8, 0x4}, 0x8, 0x400, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffeffffffa, 0x7, 0x7, 0x3, {0xf, 0x0, 0x7fff, 0x8, 0x8, 0xfff}, {0x40, 0x1, 0xaf22, 0xd799, 0x6, 0x4}, 0x9, 0xd0f, 0x81}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff1f71, 0xffffffffffffffff, 0xd, 0x91, 0x3, {0x9, 0x1, 0x2, 0xf, 0x3, 0x4f}, {0x3, 0x2, 0x40, 0x7, 0xff, 0x5}, 0x9, 0x6, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x59, 0x3, 0xffffff5d, 0x7, 0x7, 0xdb5, 0x3c, 0xfffffffe, 0xe30f, 0x1ff, 0xfffffffb, 0x7, 0x6, 0x5, 0xec3a, 0x8, 0x1, 0x6, 0x6, 0x1, 0x400, 0x5, 0x9, 0xe4b, 0xf6, 0x2, 0x1000, 0x6, 0x100, 0x4, 0x649, 0x8, 0x1, 0x3ff, 0x8000, 0x7, 0x4, 0xfffffff1, 0x80, 0x5, 0x2322, 0xffff60e1, 0x4, 0x6, 0xbc5, 0x0, 0x3, 0x1, 0x10000, 0x6, 0xfffffffe, 0x0, 0x1, 0x7f, 0x1, 0x8000, 0xef, 0x0, 0xe, 0x6, 0x101, 0x72cb, 0x8, 0x4, 0x8001, 0x211f, 0x349, 0x3, 0x8, 0xa6e1, 0x1, 0xffffffff, 0x3ff, 0x32, 0x1f9, 0x7, 0xfffffffd, 0xfffffffc, 0x80, 0xd711, 0x6, 0xc, 0x1e0f, 0x0, 0x1, 0x1, 0x2, 0x4, 0x0, 0x400, 0xc, 0xbed, 0xfffff001, 0x2, 0x2, 0xfff, 0x2, 0x1f2d, 0x4, 0x7, 0x9504, 0x100, 0x3ec8f16a, 0x9, 0x1, 0x2cb, 0x3ff, 0x3, 0x5, 0xfff, 0x1, 0xd9, 0x40000000, 0x6, 0x10040000, 0x9, 0x4, 0x7, 0xc, 0x33, 0x2, 0x7fff, 0x2, 0x2, 0x4, 0x8, 0x0, 0x1c4b8b04, 0xc, 0x4, 0xd, 0xa8, 0x5, 0x3, 0x0, 0xa, 0x62a, 0x10, 0x9, 0x3, 0x3, 0x3, 0x5, 0x2, 0x0, 0xffffffb4, 0x4, 0x2, 0x1, 0x80000001, 0x7fffffff, 0xe91d, 0x81, 0x200, 0xd, 0xfffffff9, 0x2, 0x0, 0x7fffffff, 0x9, 0xc, 0x5, 0x2, 0x200, 0x7ff, 0x80, 0xffff, 0x9, 0x8001, 0x4, 0x4, 0x401, 0x10, 0x7, 0x8, 0xffffffff, 0x1, 0x5, 0x9, 0x0, 0xc, 0xc, 0x3, 0x1, 0x3ff, 0xfffffffc, 0x10001, 0x7, 0x4, 0x2, 0x7, 0x1ff, 0x2, 0x40, 0x6, 0x5, 0x2, 0x3, 0x6, 0x101, 0x8, 0x9, 0x6, 0x0, 0xa, 0x7, 0x8, 0xc434, 0xd0, 0x1, 0x1c8, 0x2f5, 0x7, 0x205, 0x7ff, 0xffffffff, 0x7, 0x0, 0xd, 0x0, 0x1, 0x1005, 0x40, 0x3c1, 0x66, 0x200, 0xffff, 0x7fff, 0x2b95d88, 0xd, 0xf0d, 0xffffffff, 0x6, 0xcb3, 0x3, 0x4, 0xc8, 0x6f, 0x4, 0x3, 0xffff, 0x89, 0x4, 0x1, 0x6, 0x0, 0x3ff, 0x3, 0x3b16, 0x9, 0x1, 0x4, 0x9]}]]}, {0xe4, 0x6, "fd70b96112ac77e3f4ba72818bd0c5c0245cde701e1adb7ba61da6737c5213888cb14ef6fa40a648d92a3eb2edd60353acd14419ea92918a1738e5d4964797f8597f3e121f1065672da28e9cba131d0ee6fb956efee333233fbe71c40e0cddbc141207788ca002cdac1c7f410c054c2c79bffbd6eafa346d6029549a024afe11ab01648803b73f2ac6364787103e6868e2c7ffa5f1fb2beaf65631f9eac8761635600d4d7d75bd3cce2573e48166009fae5a3548f5b89bb05aeed7e5152b68855f3d326b929661b252a6e9ab544c57f3c665d6cd71bd239bfaae9c1640187bfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2698}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.38569909s ago: executing program 5 (id=537): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @empty, 0xc5}}, 0x27c0}, 0x90) 3.871858553s ago: executing program 5 (id=538): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x40010020, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x95add000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x58}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'gretap0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'macvlan1\x00'}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffffffff, 0xfffffe00}}, @common=@hbh={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}) 3.871390381s ago: executing program 6 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(0xffffffffffffffff, 0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0xfffffffffffffe5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0xdc}}, 0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r3, 0x101, 0x1, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4, 0x1, 0x2, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003c80)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0x5, 0x7}, {0xd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.553629739s ago: executing program 0 (id=540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(0x0, 0xecf86c37d53049cc) fanotify_init(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2b080000000000000740000000020e060900ffff0000000000000000000000000000060000e600c82a000700000000000000ff0f000000000000eb030000000000000101000000000000050200050000"], 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffff7ffffffff}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) madvise(&(0x7f0000000000/0x4000)=nil, 0xffffffffdfffffff, 0x1) bind$llc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x75, &(0x7f0000000000), 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0xe, 0x7ff, 0x580, 0x6, 0x1000200}) 3.398337943s ago: executing program 7 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) prlimit64(0x0, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x6, 0x0, &(0x7f00000007c0)="9f4494872191", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000000), 0x1}, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103000000efffffff", @ANYRES32=r5], 0x24}}, 0x48800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000380)={0x0, 'macvtap0\x00', {0x3}, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x3, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000b60000e23e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0xb6}) sync() 1.761412658s ago: executing program 0 (id=541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000300)=""/104, 0x68) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./bus\x00') getdents(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000002, 0x12, r8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x10012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0xc, &(0x7f0000000000)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800a00010072616e67650000003400028008000140000000000800024000000000040004801c00038015000100f06d66991216953e9a9fb1ce13bf9a03e20000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000af91f1c42ed37ff7c0a32e77e09bd6da765784bfe5c561963d4f71a1f6c6a373840815abb7e057061a68690c9528db21b31a37ba24916617321d0d111040dba7947839b8e2ff5dcf24d1fbc3c3ac3"], 0x9c}}, 0x200000d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 1.760803187s ago: executing program 2 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) prlimit64(0x0, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x6, 0x0, &(0x7f00000007c0)="9f4494872191", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000000), 0x1}, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103000000efffffff", @ANYRES32=r5], 0x24}}, 0x48800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000380)={0x0, 'macvtap0\x00', {0x3}, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x3, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48800) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0xb6}) sync() 1.759912481s ago: executing program 5 (id=543): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x60400) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2, 0x800, 0x2, 0x1b2, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0xffed, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0x34, 0x67, 0xc3}}]}}]}}, 0x0) 1.759113823s ago: executing program 6 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x13, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 772.213142ms ago: executing program 6 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) prlimit64(0x0, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x6, 0x0, &(0x7f00000007c0)="9f4494872191", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000000), 0x1}, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000380)={0x0, 'macvtap0\x00', {0x3}, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x3, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000b60000e23e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48800) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)={0xb00, 0x0, 0xb6}) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sync() 48.556485ms ago: executing program 2 (id=546): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x48080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000040)={0xa, 0x4661, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x1f, 0x44004841, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {}]}]}}, 0x0, 0x3e, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = dup2(r3, r4) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000380)={0x0, r7, 0x1, 0x5, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x80300) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x101, 0x5, {0x4, 0x74, 0x5, 0xb}}) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='*cpu '], 0x5) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001b40)=""/4085, 0xff5}, {&(0x7f0000000300)=""/93, 0x5d}], 0x2}, 0x0) 0s ago: executing program 0 (id=547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406a05840000825e0000010902240001000000000904080001030000000921000000012205000905810318"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000df0000000f021cbd37addf612856b1ec980445478a81683ab9c1fe89e47d0d7be8590ae0198ec24fbcce195bb07d165162cc04f2a1dd6a01b0802749e13f54f84bf6896d68cd45a3b923b26e567c2362e57cbb194bd8a12e3152002fd1067c75ae6b1d011ebb10e491c115da48ce41edd0aff451fbf51001114c3a0a56c1bb59dce86c0703c296bf42727b2e84b6daf628287473ca4d7b0d57f403a56ffed1bf01bd33ac2ab6917de289be2896890e6f8baa038eb2a336b2a91f8c7b1b9fd9376187d7b962c5eb3601180a610081aecc0e017e8eaee2bf9fe4a28e3b9bd8ff00e639a08a56cb47614b16854c6f2e36268b6cddc18"], &(0x7f0000000200)={0x0, 0x3, 0x87, @string={0x87, 0x3, "9645a1cfc642c6eb14eed2bb69ff2e7b31b3e71727719bf1fae6a78dc513e750d0b405a6ac11b02787aeab00813e240e4687fc85bf95b9c06a6550e52d93dacb477eb974d6c92f1427359a9f583331ac784f23da2f766e61a4ba4c36082093c3ccf3af397826ae52631dfdc392bf1b24349168e44c622e4b3b830d398fdbb254a030ec9202"}}, &(0x7f00000000c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0xf, 0x72ab}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "81c3fef01bd9487b29fd7505df58b56f"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x98, 0x2, 0xa1, 0x16, "369f0ceb", "2c3c9c1a"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x4, 0xf7, 0x8d, 0x9, 0xe, 0x100}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000440)={0x40, 0x15, 0xff, "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"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x75}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x85bb7f7dde1cc956, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="e8116484879e"}, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "011c"}, 0x0, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x2}, 0x0, 0x0}) kernel console output (not intermixed with test programs): im3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.772112][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.783845][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.793940][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.804455][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.814348][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.826105][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.837532][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.854211][ T5840] veth1_macvtap: entered promiscuous mode [ 76.867402][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.882824][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.893491][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.904640][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.915646][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.926486][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.938076][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.947481][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.956772][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.966334][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.975157][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.020744][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.029683][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039070][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.047963][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081653][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.102669][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.160267][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.171025][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.181738][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.192636][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.202667][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.213304][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.224169][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.235119][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.246759][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.290827][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.290893][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.310282][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.314794][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.320959][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.340129][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.350836][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.361611][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.371650][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.382471][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.394084][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.423080][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.440970][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.450899][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.460012][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.505802][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.572496][ T5848] Bluetooth: hci0: command tx timeout [ 77.588984][ T5848] Bluetooth: hci1: command tx timeout [ 77.615184][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.623071][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.645559][ T5855] Bluetooth: hci4: command tx timeout [ 77.651037][ T5855] Bluetooth: hci2: command tx timeout [ 77.656772][ T5855] Bluetooth: hci3: command tx timeout [ 77.669722][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.680175][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.717307][ T5924] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 77.733569][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.739668][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.747513][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.769899][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.807876][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.819320][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.884669][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.937549][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.994192][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.025946][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.134569][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.201353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.362653][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.380170][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.652442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.661363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.755484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.959679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.968791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.575313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.583690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.626139][ T5848] Bluetooth: hci1: command tx timeout [ 79.631636][ T5848] Bluetooth: hci0: command tx timeout [ 79.705693][ T5848] Bluetooth: hci3: command tx timeout [ 79.711278][ T5848] Bluetooth: hci2: command tx timeout [ 79.716877][ T5848] Bluetooth: hci4: command tx timeout [ 79.785553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.008940][ T5928] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.135462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.145389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.195352][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 80.196859][ T5955] tipc: Failed to remove unknown binding: 66,1,1/0:2700686350/2700686352 [ 80.204943][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.229765][ T5955] tipc: Failed to remove unknown binding: 66,1,1/0:2700686350/2700686352 [ 80.257603][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 80.322383][ T5928] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 80.344119][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.370723][ T5928] usb 5-1: Product: syz [ 80.401956][ T5928] usb 5-1: Manufacturer: syz [ 80.407954][ T5928] usb 5-1: SerialNumber: syz [ 80.451492][ T5928] usb 5-1: config 0 descriptor?? [ 80.606417][ T5928] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 80.722574][ T5928] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 81.218243][ T5928] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 81.383649][ T5967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14'. [ 81.708042][ T5975] FAULT_INJECTION: forcing a failure. [ 81.708042][ T5975] name failslab, interval 1, probability 0, space 0, times 1 [ 81.721234][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: syz.2.16 Not tainted 6.12.0-rc7-syzkaller #0 [ 81.730048][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 81.740147][ T5975] Call Trace: [ 81.743458][ T5975] [ 81.746428][ T5975] dump_stack_lvl+0x241/0x360 [ 81.751170][ T5975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.756404][ T5975] ? __pfx__printk+0x10/0x10 [ 81.761029][ T5975] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 81.766521][ T5975] ? __pfx___might_resched+0x10/0x10 [ 81.771855][ T5975] should_fail_ex+0x3b0/0x4e0 [ 81.776572][ T5975] should_failslab+0xac/0x100 [ 81.781294][ T5975] ? subflow_ulp_init+0xcb/0x560 [ 81.786278][ T5975] __kmalloc_cache_noprof+0x6c/0x2c0 [ 81.791634][ T5975] subflow_ulp_init+0xcb/0x560 [ 81.796453][ T5975] tcp_set_ulp+0x537/0x5f0 [ 81.800912][ T5975] mptcp_subflow_create_socket+0x761/0xdf0 [ 81.806769][ T5975] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 81.813139][ T5975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.819541][ T5975] __mptcp_nmpc_sk+0x178/0x800 [ 81.824354][ T5975] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 81.829689][ T5975] ? mptcp_sendmsg_fastopen+0xb0/0x530 [ 81.835288][ T5975] mptcp_sendmsg_fastopen+0xc3/0x530 [ 81.840613][ T5975] ? mptcp_sendmsg+0x1d9/0x1b10 [ 81.845508][ T5975] mptcp_sendmsg+0x1884/0x1b10 [ 81.850316][ T5975] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.856339][ T5975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.862714][ T5975] ? irqentry_exit+0x63/0x90 [ 81.867338][ T5975] ? lockdep_hardirqs_on+0x99/0x150 [ 81.872576][ T5975] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 81.877731][ T5975] ? sock_rps_record_flow+0x1a/0x400 [ 81.883059][ T5975] ? inet_sendmsg+0x330/0x390 [ 81.887772][ T5975] __sock_sendmsg+0x1a6/0x270 [ 81.892487][ T5975] ____sys_sendmsg+0x52a/0x7e0 [ 81.897300][ T5975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.902643][ T5975] __sys_sendmsg+0x292/0x380 [ 81.907275][ T5975] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.912438][ T5975] ? __pfx_vfs_write+0x10/0x10 [ 81.917267][ T5975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.923637][ T5975] ? do_syscall_64+0x100/0x230 [ 81.928443][ T5975] ? do_syscall_64+0xb6/0x230 [ 81.933171][ T5975] do_syscall_64+0xf3/0x230 [ 81.937739][ T5975] ? clear_bhb_loop+0x35/0x90 [ 81.942455][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.948396][ T5975] RIP: 0033:0x7f4d5657e719 [ 81.952863][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.972509][ T5975] RSP: 002b:00007f4d573a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.980969][ T5975] RAX: ffffffffffffffda RBX: 00007f4d56736130 RCX: 00007f4d5657e719 [ 81.988971][ T5975] RDX: 0000000030004001 RSI: 0000000020000080 RDI: 0000000000000007 [ 81.996977][ T5975] RBP: 00007f4d573a6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.004976][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.012980][ T5975] R13: 0000000000000000 R14: 00007f4d56736130 R15: 00007fff30636bf8 [ 82.021085][ T5975] [ 82.396489][ T5972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.484773][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.555205][ T5888] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.578579][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.635091][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 85.883195][ T5997] vlan2: entered promiscuous mode [ 85.888403][ T5997] vlan2: entered allmulticast mode [ 85.893900][ T5997] syz_tun: entered allmulticast mode [ 85.899384][ T5997] syz_tun: entered promiscuous mode [ 85.909126][ T5997] team0: Port device vlan2 added [ 85.935481][ T5997] netlink: 'syz.4.20': attribute type 33 has an invalid length. [ 85.943523][ T5997] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20'. [ 86.125156][ T5888] usb 1-1: device descriptor read/all, error -71 [ 86.298237][ T6003] netlink: 256 bytes leftover after parsing attributes in process `syz.2.23'. [ 86.538535][ T6001] warning: `syz.4.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.752583][ T5928] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.761086][ T5928] em28xx 5-1:0.0: board has no eeprom [ 86.835223][ T5928] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 86.843605][ T5928] em28xx 5-1:0.0: dvb set to bulk mode. [ 86.853228][ T5889] em28xx 5-1:0.0: Binding DVB extension [ 86.895533][ T5928] usb 5-1: USB disconnect, device number 2 [ 86.938798][ T5928] em28xx 5-1:0.0: Disconnecting em28xx [ 87.135472][ T969] cfg80211: failed to load regulatory.db [ 87.172198][ T5889] em28xx 5-1:0.0: Registering input extension [ 88.025844][ T5928] em28xx 5-1:0.0: Closing input extension [ 88.064188][ T5928] em28xx 5-1:0.0: Freeing device [ 90.479082][ T6046] Smack: duplicate mount options [ 92.230590][ T6061] netlink: 6 bytes leftover after parsing attributes in process `syz.0.37'. [ 92.293954][ T6061] macsec0: entered promiscuous mode [ 92.431481][ T6060] macsec0: left promiscuous mode [ 94.174512][ T6074] netlink: 256 bytes leftover after parsing attributes in process `syz.2.39'. [ 95.140798][ T6081] Zero length message leads to an empty skb [ 96.144676][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.155594][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.207681][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.222804][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.234154][ T5848] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.248611][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.514447][ T6111] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 97.326581][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.48'. [ 97.981295][ T6115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.054184][ T6121] capability: warning: `syz.4.56' uses deprecated v2 capabilities in a way that may be insecure [ 98.407800][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 98.607705][ T5928] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.765113][ T5928] usb 5-1: device descriptor read/64, error -71 [ 99.035322][ T5928] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.265161][ T5928] usb 5-1: device descriptor read/64, error -71 [ 99.473023][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.507410][ T5928] usb usb5-port1: attempt power cycle [ 99.514559][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.553177][ T5848] Bluetooth: hci5: command tx timeout [ 99.736712][ T6100] bridge_slave_0: entered allmulticast mode [ 99.743934][ T6100] bridge_slave_0: entered promiscuous mode [ 99.758556][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.766247][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.773884][ T6100] bridge_slave_1: entered allmulticast mode [ 99.781150][ T6100] bridge_slave_1: entered promiscuous mode [ 100.125263][ T5928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.173054][ T5928] usb 5-1: device descriptor read/8, error -71 [ 100.655461][ T5928] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.689235][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.743370][ T5928] usb 5-1: device descriptor read/8, error -71 [ 100.782240][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.875467][ T5928] usb usb5-port1: unable to enumerate USB device [ 100.949231][ T6100] team0: Port device team_slave_0 added [ 100.991059][ T6100] team0: Port device team_slave_1 added [ 101.086837][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.099785][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.176860][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.395060][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.486387][ T6158] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 101.630070][ T5848] Bluetooth: hci5: command tx timeout [ 102.175857][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'. [ 102.514317][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 102.521666][ T5920] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 102.533454][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 102.545118][ T5920] usb 1-1: can't read configurations, error -61 [ 102.569143][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.576370][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.584029][ T6167] program syz.4.67 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.606961][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.980805][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.042265][ T6100] hsr_slave_0: entered promiscuous mode [ 103.108167][ T6100] hsr_slave_1: entered promiscuous mode [ 103.141408][ T6100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.163437][ T6100] Cannot create hsr debugfs directory [ 103.169277][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 103.193479][ T5920] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 103.234276][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 103.269990][ T5920] usb 1-1: can't read configurations, error -61 [ 103.326712][ T5920] usb usb1-port1: attempt power cycle [ 103.712076][ T5848] Bluetooth: hci5: command tx timeout [ 103.909918][ T6177] netlink: 52 bytes leftover after parsing attributes in process `syz.4.70'. [ 103.932422][ T6177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.506253][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.657523][ T5920] usb 1-1: device descriptor read/8, error -71 [ 105.004931][ T6182] netlink: 'syz.2.71': attribute type 4 has an invalid length. [ 105.054493][ T6182] netlink: 'syz.2.71': attribute type 4 has an invalid length. [ 105.225036][ T5921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.535234][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.535389][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 105.799358][ T5848] Bluetooth: hci5: command tx timeout [ 105.847626][ T5921] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 68, changing to 10 [ 105.859009][ T5921] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.872438][ T5921] usb 5-1: config 1 interface 0 has no altsetting 0 [ 105.883132][ T5921] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.40 [ 105.901397][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.919721][ T5921] usb 5-1: Product: щ [ 105.933363][ T5921] usb 5-1: Manufacturer: ᇠ[ 105.946402][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.950350][ T5921] usb 5-1: SerialNumber: ཤꮥ跲Ǒ㕃鲿∑䴢妊瘥ç€è¶”é–胣ç¢é¹­è·—撱싷僆㞘┨è°äŠºç°ƒæ¦¯ìžé‘å·¶á¤è›šç¼°ë™—樜 [ 106.006724][ T6100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.069094][ T6100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.117853][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.386559][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.480753][ T6100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.769187][ T6198] FAULT_INJECTION: forcing a failure. [ 106.769187][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 106.782064][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.1.77 Not tainted 6.12.0-rc7-syzkaller #0 [ 106.790911][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 106.801003][ T6198] Call Trace: [ 106.804327][ T6198] [ 106.807284][ T6198] dump_stack_lvl+0x241/0x360 [ 106.812083][ T6198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.817336][ T6198] ? __pfx__printk+0x10/0x10 [ 106.822009][ T6198] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 106.828028][ T6198] ? __pfx___might_resched+0x10/0x10 [ 106.833383][ T6198] should_fail_ex+0x3b0/0x4e0 [ 106.838098][ T6198] should_failslab+0xac/0x100 [ 106.842807][ T6198] ? __alloc_skb+0x1c3/0x440 [ 106.847421][ T6198] kmem_cache_alloc_node_noprof+0x71/0x320 [ 106.853260][ T6198] __alloc_skb+0x1c3/0x440 [ 106.857708][ T6198] ? __pfx___alloc_skb+0x10/0x10 [ 106.862685][ T6198] ? __rcu_read_unlock+0xa1/0x110 [ 106.867738][ T6198] ? netlink_autobind+0xd6/0x2f0 [ 106.872692][ T6198] ? netlink_autobind+0x2b0/0x2f0 [ 106.877738][ T6198] netlink_sendmsg+0x638/0xcb0 [ 106.882532][ T6198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.887827][ T6198] ? __import_iovec+0x5a6/0x870 [ 106.892699][ T6198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.897995][ T6198] __sock_sendmsg+0x221/0x270 [ 106.902684][ T6198] ____sys_sendmsg+0x52a/0x7e0 [ 106.907476][ T6198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.912784][ T6198] __sys_sendmmsg+0x3ab/0x730 [ 106.917504][ T6198] ? __pfx___sys_sendmmsg+0x10/0x10 [ 106.922750][ T6198] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.928763][ T6198] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.935122][ T6198] ? do_raw_spin_unlock+0x13c/0x8b0 [ 106.940341][ T6198] ? finish_task_switch+0x1e5/0x870 [ 106.945557][ T6198] ? lockdep_hardirqs_on+0x99/0x150 [ 106.950780][ T6198] ? finish_task_switch+0x1e5/0x870 [ 106.956005][ T6198] ? __schedule+0x1802/0x4bd0 [ 106.960713][ T6198] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.966803][ T6198] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.973148][ T6198] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.979502][ T6198] __x64_sys_sendmmsg+0xa0/0xb0 [ 106.984376][ T6198] do_syscall_64+0xf3/0x230 [ 106.988901][ T6198] ? clear_bhb_loop+0x35/0x90 [ 106.993601][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.999514][ T6198] RIP: 0033:0x7fa3b777e719 [ 107.003940][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.023561][ T6198] RSP: 002b:00007fa3b8535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.031997][ T6198] RAX: ffffffffffffffda RBX: 00007fa3b7935f80 RCX: 00007fa3b777e719 [ 107.039988][ T6198] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 107.047993][ T6198] RBP: 00007fa3b8535090 R08: 0000000000000000 R09: 0000000000000000 [ 107.055976][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.063964][ T6198] R13: 0000000000000000 R14: 00007fa3b7935f80 R15: 00007fff8d6a4198 [ 107.071968][ T6198] [ 107.320418][ T6100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.377798][ T5921] usbhid 5-1:1.0: can't add hid device: -71 [ 107.383868][ T5921] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 107.413060][ T5921] usb 5-1: USB disconnect, device number 7 [ 107.534282][ T6202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'. [ 107.615540][ T29] audit: type=1326 audit(1731343981.949:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 107.646678][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.653246][ T29] audit: type=1326 audit(1731343981.949:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 107.785933][ T29] audit: type=1326 audit(1731343981.949:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 107.810897][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.839269][ T6100] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.846113][ T29] audit: type=1326 audit(1731343981.949:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 107.915485][ T29] audit: type=1326 audit(1731343981.979:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 108.030990][ T29] audit: type=1326 audit(1731343981.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 108.084099][ T6212] syz.2.83 uses obsolete (PF_INET,SOCK_PACKET) [ 108.148986][ T29] audit: type=1326 audit(1731343981.989:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 108.166322][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.177387][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.644426][ T29] audit: type=1326 audit(1731343981.989:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 109.168378][ T29] audit: type=1326 audit(1731343981.989:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 109.189881][ T29] audit: type=1326 audit(1731343981.989:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2bdff7e719 code=0x7ffc0000 [ 109.432320][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.439540][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.505583][ T11] bridge_slave_1: left allmulticast mode [ 109.511568][ T11] bridge_slave_1: left promiscuous mode [ 109.518635][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.595390][ T6210] capability: warning: `syz.0.82' uses 32-bit capabilities (legacy support in use) [ 109.624559][ T11] bridge_slave_0: left allmulticast mode [ 109.635185][ T11] bridge_slave_0: left promiscuous mode [ 109.641750][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.785202][ T5928] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.060191][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 110.227353][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.392757][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.485496][ T11] bond0 (unregistering): Released all slaves [ 111.356031][ T5921] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.652163][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 111.765440][ T5921] usb 2-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 111.821255][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.836880][ T5921] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 111.906010][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.973594][ T5921] usb 2-1: config 0 descriptor?? [ 112.106267][ T6247] tipc: Enabling of bearer rejected, media not registered [ 112.301081][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 112.676013][ T11] hsr_slave_0: left promiscuous mode [ 113.832491][ T11] hsr_slave_1: left promiscuous mode [ 114.067859][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.146592][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.208846][ T5921] usb 2-1: string descriptor 0 read error: -71 [ 114.224513][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.237596][ T5921] usb 2-1: USB disconnect, device number 2 [ 114.278070][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.408136][ T11] veth1_macvtap: left promiscuous mode [ 114.419549][ T11] veth0_macvtap: left promiscuous mode [ 114.446486][ T11] veth1_vlan: left promiscuous mode [ 114.464907][ T11] veth0_vlan: left promiscuous mode [ 114.695465][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.091389][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.271513][ T5928] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 115.404822][ T5928] usb 5-1: chopping to 0 config(s) [ 115.420480][ T5928] usb 5-1: can't read configurations, error -32 [ 115.471326][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.482489][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.492382][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.505339][ T5921] usb 2-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 115.514418][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.526808][ T5921] usb 2-1: config 0 descriptor?? [ 115.606099][ T5928] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 115.735231][ T5928] usb 5-1: device descriptor read/64, error -32 [ 115.856357][ T5928] usb usb5-port1: attempt power cycle [ 116.293748][ T5928] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.449278][ T5928] usb 5-1: device descriptor read/8, error -32 [ 116.697284][ T5928] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.750393][ T5928] usb 5-1: device descriptor read/8, error -32 [ 116.780760][ T11] team0 (unregistering): Port device team_slave_1 removed [ 116.821425][ T11] team0 (unregistering): Port device team_slave_0 removed [ 116.868325][ T5928] usb usb5-port1: unable to enumerate USB device [ 117.256239][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 117.288636][ T5921] usbhid 2-1:0.0: can't add hid device: -71 [ 117.296241][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 117.354369][ T5921] usb 2-1: USB disconnect, device number 3 [ 117.616293][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.837571][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.975485][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.010323][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 118.027713][ T46] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 118.055125][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.096024][ T46] usb 1-1: config 0 descriptor?? [ 118.100201][ T6342] mmap: syz.1.107 (6342) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.118455][ T46] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 118.184495][ T6342] netlink: 332 bytes leftover after parsing attributes in process `syz.1.107'. [ 118.205644][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 118.220288][ T5928] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.226227][ T6342] netlink: 'syz.1.107': attribute type 9 has an invalid length. [ 118.245312][ T6342] netlink: 108 bytes leftover after parsing attributes in process `syz.1.107'. [ 118.256187][ T5928] usb 3-1: config 0 has no interface number 0 [ 118.264653][ T6342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.107'. [ 118.286272][ T5928] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.314156][ T6321] No such timeout policy "syz0" [ 118.327695][ T6100] veth0_vlan: entered promiscuous mode [ 118.340776][ T5928] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.371861][ T5928] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 118.391646][ T6321] sp0: Synchronizing with TNC [ 118.403303][ T6100] veth1_vlan: entered promiscuous mode [ 118.409409][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.436621][ T5928] usb 3-1: config 0 descriptor?? [ 118.519097][ T6100] veth0_macvtap: entered promiscuous mode [ 118.558261][ T6100] veth1_macvtap: entered promiscuous mode [ 118.616580][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.627607][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.647339][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.658981][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.670030][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.685648][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.698488][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.739009][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.769528][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.784004][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.858442][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.904551][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.957000][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.991583][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.040969][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.061798][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.085441][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.108648][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.129650][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.137285][ T5928] uclogic 0003:28BD:0071.0001: failed retrieving string descriptor #100: -71 [ 119.157793][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.178409][ T5928] uclogic 0003:28BD:0071.0001: failed retrieving pen parameters: -71 [ 119.207629][ T5928] uclogic 0003:28BD:0071.0001: pen probing failed: -71 [ 119.238793][ T5928] uclogic 0003:28BD:0071.0001: failed probing parameters: -71 [ 119.267510][ T6100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.273706][ T5928] uclogic 0003:28BD:0071.0001: probe with driver uclogic failed with error -71 [ 119.302162][ T6100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.333788][ T6100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.338484][ T5928] usb 3-1: USB disconnect, device number 2 [ 119.344555][ T6100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.618649][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.647124][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.754424][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.809857][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.939619][ T6321] [U] è` [ 121.109266][ T46] usb 1-1: qt2_attach - failed to power on unit: -71 [ 121.244048][ T46] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 121.261980][ T46] usb 1-1: USB disconnect, device number 8 [ 121.267908][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.812956][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 122.415585][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 122.428499][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.535443][ T5921] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.544747][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.594296][ T5921] usb 6-1: Product: syz [ 122.604221][ T5921] usb 6-1: Manufacturer: syz [ 122.645046][ T5921] usb 6-1: SerialNumber: syz [ 122.678642][ T5921] usb 6-1: config 0 descriptor?? [ 122.702913][ T5921] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 122.733110][ T5921] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 123.721393][ T5921] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 123.728744][ T5921] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 123.736675][ T5921] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 123.743659][ T5921] em28xx 6-1:0.0: No AC97 audio processor [ 124.009796][ T5921] usb 6-1: USB disconnect, device number 2 [ 124.017830][ T5921] em28xx 6-1:0.0: Disconnecting em28xx [ 124.027259][ T5921] em28xx 6-1:0.0: Freeing device [ 124.803166][ T6410] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 124.812232][ T6410] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 129.057085][ T6465] ipip0: entered promiscuous mode [ 129.815113][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.966781][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 129.974228][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.987637][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.024337][ T5890] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 130.061844][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.101068][ T5890] usb 1-1: config 0 descriptor?? [ 131.069289][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.135471][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.294349][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 131.304705][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.323981][ T5890] usb 1-1: USB disconnect, device number 9 [ 131.787886][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.095140][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 132.111474][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.256541][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 132.505506][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 132.898132][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 132.908383][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 132.918132][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 132.928570][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.956058][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 132.965273][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.973372][ T25] usb 2-1: Product: syz [ 132.977740][ T25] usb 2-1: Manufacturer: syz [ 132.982388][ T25] usb 2-1: SerialNumber: syz [ 133.099122][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108723][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242096][ T25] usb 2-1: config 0 descriptor?? [ 133.248632][ T6519] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.432598][ T6557] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[6557] [ 133.892863][ T6558] Bluetooth: MGMT ver 1.23 [ 134.667107][ T25] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 134.672037][ T25] hdpvr 2-1:0.0: device init failed [ 134.674281][ T25] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 134.694435][ T25] usb 2-1: USB disconnect, device number 4 [ 136.757082][ T6572] program syz.2.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.040968][ T6588] program syz.5.156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.604342][ T6598] sp0: Synchronizing with TNC [ 138.245758][ T6615] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[6615] [ 139.025870][ T6622] FAULT_INJECTION: forcing a failure. [ 139.025870][ T6622] name failslab, interval 1, probability 0, space 0, times 0 [ 139.039075][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.5.164 Not tainted 6.12.0-rc7-syzkaller #0 [ 139.047972][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 139.058065][ T6622] Call Trace: [ 139.061378][ T6622] [ 139.064341][ T6622] dump_stack_lvl+0x241/0x360 [ 139.069072][ T6622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.074316][ T6622] ? __pfx__printk+0x10/0x10 [ 139.078965][ T6622] should_fail_ex+0x3b0/0x4e0 [ 139.083689][ T6622] should_failslab+0xac/0x100 [ 139.088417][ T6622] ? cipso_v4_sock_setattr+0x69/0x460 [ 139.093838][ T6622] __kmalloc_cache_noprof+0x6c/0x2c0 [ 139.099169][ T6622] cipso_v4_sock_setattr+0x69/0x460 [ 139.104490][ T6622] ? netlbl_sock_setattr+0x2f/0x360 [ 139.109725][ T6622] ? netlbl_sock_setattr+0x2f/0x360 [ 139.114953][ T6622] netlbl_sock_setattr+0x305/0x360 [ 139.120086][ T6622] ? smack_netlbl_add+0x6d/0x180 [ 139.125036][ T6622] smack_netlbl_add+0xcf/0x180 [ 139.129808][ T6622] security_socket_post_create+0xae/0x2f0 [ 139.135542][ T6622] ? __sock_create+0x337/0x940 [ 139.140316][ T6622] __sock_create+0x52b/0x940 [ 139.144923][ T6622] __sys_socket+0x150/0x3c0 [ 139.149445][ T6622] ? __pfx___sys_socket+0x10/0x10 [ 139.154480][ T6622] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.160828][ T6622] ? do_syscall_64+0x100/0x230 [ 139.165612][ T6622] __x64_sys_socket+0x7a/0x90 [ 139.170309][ T6622] do_syscall_64+0xf3/0x230 [ 139.174838][ T6622] ? clear_bhb_loop+0x35/0x90 [ 139.179537][ T6622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.185450][ T6622] RIP: 0033:0x7fdc6d37e719 [ 139.189875][ T6622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.209491][ T6622] RSP: 002b:00007fdc6e0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 139.217933][ T6622] RAX: ffffffffffffffda RBX: 00007fdc6d535f80 RCX: 00007fdc6d37e719 [ 139.225914][ T6622] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002 [ 139.233891][ T6622] RBP: 00007fdc6e0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 139.241875][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.249854][ T6622] R13: 0000000000000000 R14: 00007fdc6d535f80 R15: 00007ffc3d80aa38 [ 139.257871][ T6622] [ 146.758627][ T6702] sctp: [Deprecated]: syz.5.180 (pid 6702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.758627][ T6702] Use struct sctp_sack_info instead [ 146.889677][ T6710] netlink: 276 bytes leftover after parsing attributes in process `syz.1.182'. [ 147.002281][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.010966][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.019494][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.063272][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.077269][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.084644][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.847687][ T6744] FAULT_INJECTION: forcing a failure. [ 148.847687][ T6744] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.867526][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.2.187 Not tainted 6.12.0-rc7-syzkaller #0 [ 148.876443][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 148.886536][ T6744] Call Trace: [ 148.889889][ T6744] [ 148.892847][ T6744] dump_stack_lvl+0x241/0x360 [ 148.897586][ T6744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.902847][ T6744] ? __pfx__printk+0x10/0x10 [ 148.907503][ T6744] should_fail_ex+0x3b0/0x4e0 [ 148.912226][ T6744] _copy_from_user+0x2f/0xc0 [ 148.916868][ T6744] move_addr_to_kernel+0x82/0x150 [ 148.921952][ T6744] copy_msghdr_from_user+0x43e/0x680 [ 148.927371][ T6744] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 148.933332][ T6744] __sys_sendmsg+0x22d/0x380 [ 148.937978][ T6744] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.943158][ T6744] ? __pfx_vfs_write+0x10/0x10 [ 148.947992][ T6744] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.954368][ T6744] ? do_syscall_64+0x100/0x230 [ 148.959187][ T6744] ? do_syscall_64+0xb6/0x230 [ 148.963932][ T6744] do_syscall_64+0xf3/0x230 [ 148.968487][ T6744] ? clear_bhb_loop+0x35/0x90 [ 148.973204][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.979133][ T6744] RIP: 0033:0x7f4d5657e719 [ 148.983586][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.003226][ T6744] RSP: 002b:00007f4d573e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.011700][ T6744] RAX: ffffffffffffffda RBX: 00007f4d56735f80 RCX: 00007f4d5657e719 [ 149.019722][ T6744] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 149.027730][ T6744] RBP: 00007f4d573e8090 R08: 0000000000000000 R09: 0000000000000000 [ 149.035777][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.043786][ T6744] R13: 0000000000000000 R14: 00007f4d56735f80 R15: 00007fff30636bf8 [ 149.051827][ T6744] [ 149.123934][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 149.153790][ T5855] Bluetooth: hci2: command tx timeout [ 149.495939][ T5921] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 149.619991][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 149.868504][ T5921] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.000694][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.219941][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.250661][ T5921] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.285506][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.305919][ T5921] usb 1-1: config 1 has no interface number 1 [ 150.312124][ T5921] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 150.355335][ T6712] bridge_slave_0: entered allmulticast mode [ 150.386415][ T6712] bridge_slave_0: entered promiscuous mode [ 150.425982][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.453456][ T5921] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x4A, changing to 0xA [ 150.468402][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.500922][ T6712] bridge_slave_1: entered allmulticast mode [ 150.508486][ T5921] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 150.520957][ T6712] bridge_slave_1: entered promiscuous mode [ 150.550865][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.560593][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.606186][ T5921] usb 1-1: Product: syz [ 150.612037][ T5921] usb 1-1: Manufacturer: syz [ 151.049932][ T5921] usb 1-1: SerialNumber: syz [ 151.237355][ T5855] Bluetooth: hci2: command tx timeout [ 151.242341][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.739999][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.313402][ T5855] Bluetooth: hci2: command tx timeout [ 153.347114][ T6712] team0: Port device team_slave_0 added [ 153.505346][ T6712] team0: Port device team_slave_1 added [ 153.553034][ T5921] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 153.639202][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.792468][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.273050][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.293506][ T5921] usb 1-1: USB disconnect, device number 10 [ 154.877160][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.884189][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.915082][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.326710][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.385524][ T6821] evm: overlay not supported [ 155.385993][ T5855] Bluetooth: hci2: command tx timeout [ 155.791907][ T6712] hsr_slave_0: entered promiscuous mode [ 155.819235][ T6712] hsr_slave_1: entered promiscuous mode [ 155.834035][ T6712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.852871][ T6712] Cannot create hsr debugfs directory [ 156.132313][ T6712] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.403230][ T6712] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.463286][ T969] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.830347][ T6712] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.850953][ T6712] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.979498][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.997381][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.039119][ T6712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.049725][ T6712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.142422][ T969] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.152301][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.159470][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.175275][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.187040][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.194265][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.196228][ T969] usb 6-1: config 0 descriptor?? [ 157.241561][ T969] cp210x 6-1:0.0: cp210x converter detected [ 157.427876][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 157.440952][ T6869] SET target dimension over the limit! [ 157.610701][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.639383][ T969] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 157.650039][ T969] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 157.720471][ T969] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 157.769401][ T969] usb 6-1: cp210x converter now attached to ttyUSB0 [ 157.856726][ T5891] usb 6-1: USB disconnect, device number 3 [ 157.880307][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.914234][ T5891] cp210x 6-1:0.0: device disconnected [ 158.044541][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 158.151270][ T6894] netlink: '#\9^$*$[': attribute type 10 has an invalid length. [ 158.181598][ T6894] netlink: 152 bytes leftover after parsing attributes in process `#\9^$*$['. [ 158.212461][ T6894] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 158.293071][ T6896] netlink: 276 bytes leftover after parsing attributes in process `syz.1.217'. [ 158.312277][ T6712] veth0_vlan: entered promiscuous mode [ 158.329973][ T6712] veth1_vlan: entered promiscuous mode [ 158.353696][ T6712] veth0_macvtap: entered promiscuous mode [ 158.365376][ T6712] veth1_macvtap: entered promiscuous mode [ 158.381922][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.392483][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.402389][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.412964][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.423400][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.434485][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.444459][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.455026][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.464889][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.475565][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.488275][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.618565][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.630475][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.649393][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.665454][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.682338][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.709343][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.728272][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.763110][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.784241][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.795223][ T969] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 158.802965][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.854860][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.982431][ T6712] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.024381][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.037856][ T6712] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.057853][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.222291][ T6913] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[6913] [ 159.485743][ T6712] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.826483][ T969] usb 6-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 159.833619][ T6712] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.835661][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.917458][ T969] usb 6-1: config 0 descriptor?? [ 160.171845][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.216237][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.268988][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.365851][ T5891] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.394407][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.483487][ T5891] usb 2-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 160.621321][ T6917] program syz.2.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.652594][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.696812][ T5891] usb 2-1: config 0 descriptor?? [ 160.756227][ T969] wacom 0003:056A:0325.0002: unbalanced delimiter at end of report description [ 160.767035][ T969] wacom 0003:056A:0325.0002: parse failed [ 160.777610][ T969] wacom 0003:056A:0325.0002: probe with driver wacom failed with error -22 [ 160.875158][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.884346][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.958143][ T969] usb 6-1: USB disconnect, device number 4 [ 161.008422][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.028824][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.126575][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 161.745912][ T5928] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 161.829895][ T6947] ALSA: mixer_oss: invalid OSS volume 'u' [ 161.857132][ T6947] ALSA: mixer_oss: invalid OSS volume 'ÅÙº–ÿÿÿ' [ 161.895281][ T6947] ALSA: mixer_oss: invalid OSS volume 'dÁ=^qµV[hîX–œAYR)ß¼­pû@!BŒép' [ 161.915590][ T6947] ALSA: mixer_oss: invalid OSS volume 'ÀiMÅ[ÿŸ_Eù' [ 161.922587][ T6947] ALSA: mixer_oss: invalid OSS volume 'h½¨%܆t/”ã¤' [ 161.930133][ T6947] ALSA: mixer_oss: invalid OSS volume '?Â-×' [ 161.936712][ T6947] ALSA: mixer_oss: invalid OSS volume '?z…ѲžXÇv…ïÀαÈårœfAŸÀ:¡ˆTk:Ò' [ 161.947951][ T5928] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.956703][ T5928] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.967308][ T5928] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.977959][ T5928] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 161.989114][ T5928] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 161.999580][ T6947] ALSA: mixer_oss: invalid OSS volume 'Sz9]Ç;Ú6{ñ,·Ø‘¥þŒG¾9VV¢—éßqùg' [ 162.015514][ T5928] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.024757][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.045017][ T5928] usb 7-1: Product: syz [ 162.064595][ T5928] usb 7-1: Manufacturer: syz [ 162.065226][ T6947] ALSA: mixer_oss: invalid OSS volume 'EúBBâL~€' [ 162.091637][ T5928] cdc_wdm 7-1:1.0: skipping garbage [ 162.100786][ T6947] ALSA: mixer_oss: invalid OSS volume 'zVû' [ 162.112438][ T5928] cdc_wdm 7-1:1.0: skipping garbage [ 162.131174][ T6947] ALSA: mixer_oss: invalid OSS volume 'ž=ÚÔâ¦àöäVŸÞúèpàJÏ”“¹cùŽ#ÏÆeäô' [ 162.149291][ T5928] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 162.171660][ T5928] cdc_wdm 7-1:1.0: Unknown control protocol [ 162.173757][ T6947] ALSA: mixer_oss: invalid OSS volume 'ĺ°ñetˆ'Š@H1·õù!è­Š†¶Ú`ÄuP' [ 162.206943][ T6947] ALSA: mixer_oss: invalid OSS volume 'Á\è–÷¡JÄ}àž•ÖN·*o¿6XA¢ƒ„' [ 162.228114][ T6947] ALSA: mixer_oss: invalid OSS volume 'Ò´1²ˆ¿‚NRJ' [ 162.251760][ T6947] ALSA: mixer_oss: invalid OSS volume 'ê­,_–3çŽFÚnô„Ò[ПmàŽ9„…Ù\Qó' [ 162.523409][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.574231][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.623407][ T46] usb 7-1: USB disconnect, device number 2 [ 162.623946][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 162.636127][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 162.642245][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 163.040937][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 163.203102][ T25] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 163.212678][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.226556][ T25] usb 6-1: config 0 descriptor?? [ 163.356731][ T6983] program syz.2.234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.493065][ T25] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 163.504778][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 163.946744][ T25] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 164.053186][ T25] [drm] Initialized udl on minor 2 [ 164.106174][ T25] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 164.141388][ T25] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 165.165162][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 165.200512][ T7000] futex_wake_op: syz.6.238 tries to shift op by 36; fix this program [ 165.336633][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 165.426469][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.437931][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.448192][ T5920] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 165.460363][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.481376][ T5920] usb 3-1: config 0 descriptor?? [ 165.775693][ T5928] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 165.778924][ T5921] usb 6-1: USB disconnect, device number 5 [ 165.790176][ T5928] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 165.934571][ T5920] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 165.943168][ T5920] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 166.083325][ T5920] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 166.366176][ T5891] usbhid 2-1:0.0: can't add hid device: -32 [ 166.374727][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 166.961491][ T5891] usb 3-1: USB disconnect, device number 3 [ 167.230367][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.244'. [ 169.786760][ T7060] futex_wake_op: syz.5.254 tries to shift op by 36; fix this program [ 172.828340][ T5921] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.845562][ T7093] vlan2: entered promiscuous mode [ 172.865657][ T7093] vlan2: entered allmulticast mode [ 172.871153][ T7093] syz_tun: entered allmulticast mode [ 172.894409][ T7096] input: syz0 as /devices/virtual/input/input7 [ 172.901536][ T5891] IPVS: starting estimator thread 0... [ 172.963716][ T7093] syz_tun: entered promiscuous mode [ 173.034371][ T7093] team0: Port device vlan2 added [ 173.060551][ T7099] IPVS: using max 17 ests per chain, 40800 per kthread [ 173.175986][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 173.202539][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.221759][ T5921] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 173.231988][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.277428][ T5921] usb 3-1: config 0 descriptor?? [ 173.297959][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 173.405340][ T969] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 173.555361][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 173.571204][ T969] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=98.5e [ 173.581650][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.625823][ T969] usb 7-1: Product: syz [ 173.631367][ T969] usb 7-1: Manufacturer: syz [ 173.646224][ T969] usb 7-1: SerialNumber: syz [ 173.656504][ T969] usb 7-1: config 0 descriptor?? [ 173.728966][ T7125] netlink: 'syz.2.257': attribute type 3 has an invalid length. [ 173.880875][ T7135] ax25_connect(): syz.0.265 uses autobind, please contact jreuter@yaina.de [ 175.533104][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.269'. [ 175.957841][ T5890] usb 7-1: USB disconnect, device number 3 [ 176.475105][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.075565][ T5193] bcm5974 3-1:0.0: could not read from device [ 177.103173][ T5193] bcm5974 3-1:0.0: could not read from device [ 177.123999][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.138390][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.148842][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.158478][ T5848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 177.166601][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.254328][ T5193] bcm5974 3-1:0.0: could not read from device [ 177.254650][ T5921] usb 3-1: USB disconnect, device number 4 [ 177.272771][ T5193] bcm5974 3-1:0.0: could not read from device [ 177.589026][ T7178] overlayfs: conflicting lowerdir path [ 179.326212][ T5848] Bluetooth: hci6: command tx timeout [ 183.186709][ T5848] Bluetooth: hci6: command tx timeout [ 183.619190][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 184.386033][ T7225] vivid-000: kernel_thread() failed [ 185.795716][ T5848] Bluetooth: hci6: command tx timeout [ 187.336767][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.343948][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.455507][ T7160] bridge_slave_0: entered allmulticast mode [ 187.462758][ T7160] bridge_slave_0: entered promiscuous mode [ 187.517528][ T7251] mkiss: ax0: crc mode is auto. [ 187.537040][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.544189][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.599575][ T7160] bridge_slave_1: entered allmulticast mode [ 187.608074][ T7160] bridge_slave_1: entered promiscuous mode [ 188.134554][ T5848] Bluetooth: hci6: command tx timeout [ 190.309403][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.350923][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.644566][ T7160] team0: Port device team_slave_0 added [ 192.748081][ T7160] team0: Port device team_slave_1 added [ 194.062572][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.105062][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.234570][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.361279][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.411284][ T7317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.469380][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.587398][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.665704][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.672676][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.909152][ T7160] hsr_slave_0: entered promiscuous mode [ 194.968537][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 194.968556][ T29] audit: type=1400 audit(1731344069.309:13): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7329 comm="syz.0.298" key_serial=553122248 key_desc="_uid_ses.0" [ 195.021458][ T7160] hsr_slave_1: entered promiscuous mode [ 195.029681][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.033967][ T29] audit: type=1400 audit(1731344069.339:14): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=7329 comm="syz.0.298" name="fuse" dev="devtmpfs" ino=99 [ 195.057396][ T7160] Cannot create hsr debugfs directory [ 195.897810][ T7160] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.940030][ T7160] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.981869][ T7160] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.010551][ T7160] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.679374][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.748920][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 196.755522][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 196.765144][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 196.771747][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 196.969870][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.070949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.078251][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.167266][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.174442][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.176129][ T7333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.575801][ T7351] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 198.615155][ T5928] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 198.788565][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 198.927623][ T5145] Bluetooth: hci2: link tx timeout [ 198.933260][ T5145] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.111528][ T5855] Bluetooth: hci2: link tx timeout [ 199.117875][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.131684][ T5855] Bluetooth: hci2: link tx timeout [ 199.142382][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.220226][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.385092][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 199.416636][ T5928] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 199.424789][ T5928] usb 7-1: config 0 has no interface number 0 [ 199.435008][ T5928] usb 7-1: config 0 interface 49 has no altsetting 0 [ 199.447252][ T5928] usb 7-1: New USB device found, idVendor=1011, idProduct=3198, bcdDevice= e.2c [ 199.465039][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.473071][ T5928] usb 7-1: Product: syz [ 199.477780][ T5928] usb 7-1: Manufacturer: syz [ 199.482419][ T5928] usb 7-1: SerialNumber: syz [ 199.490143][ T5928] usb 7-1: config 0 descriptor?? [ 199.712828][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.738960][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.764596][ T7383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.869850][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.905814][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.037361][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 200.048595][ T5928] option 7-1:0.49: GSM modem (1-port) converter detected [ 200.059202][ T5928] usb 7-1: USB disconnect, device number 4 [ 200.066057][ T5928] option 7-1:0.49: device disconnected [ 200.212543][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.265114][ T46] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.637528][ T46] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 200.787958][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.828759][ T46] usb 1-1: config 0 descriptor?? [ 200.866791][ T7160] veth0_vlan: entered promiscuous mode [ 200.962112][ T7160] veth1_vlan: entered promiscuous mode [ 200.987479][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 201.130932][ T46] usb 1-1: USB disconnect, device number 11 [ 201.167153][ T7160] veth0_macvtap: entered promiscuous mode [ 201.199884][ T7160] veth1_macvtap: entered promiscuous mode [ 201.215731][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.226883][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.237394][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.248624][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.258957][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.269812][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.280014][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.292288][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.302450][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.313095][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.324846][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.335997][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.351688][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.370739][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.381603][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.395106][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.405838][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.415906][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.426499][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.440780][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.455636][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.465750][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.476416][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.486352][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.496913][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.516084][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.535683][ T5145] Bluetooth: hci0: command 0x0406 tx timeout [ 201.679309][ T7160] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.116449][ T7160] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.180635][ T7160] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.255488][ T7160] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.740273][ T7451] tipc: Started in network mode [ 202.745919][ T7451] tipc: Node identity 9ad79b4b0639, cluster identity 4711 [ 202.754632][ T7451] tipc: Enabled bearer , priority 10 [ 203.783846][ T5891] tipc: Node number set to 2632883019 [ 203.969157][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.977150][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.984668][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.993117][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.718287][ T5921] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 204.969531][ T29] audit: type=1326 audit(1731344079.229:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7475 comm="syz.2.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d5657e719 code=0x0 [ 205.068040][ T5921] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 205.080423][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.166952][ T5921] usb 6-1: Product: syz [ 205.194424][ T5921] usb 6-1: Manufacturer: syz [ 205.229175][ T5921] usb 6-1: SerialNumber: syz [ 205.276656][ T5921] usb 6-1: config 0 descriptor?? [ 205.806239][ T7488] program syz.7.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.897307][ T5921] hso 6-1:0.0: Failed to find BULK IN ep [ 205.921915][ T5921] usb-storage 6-1:0.0: USB Mass Storage device detected [ 208.088747][ T7519] tipc: Started in network mode [ 208.094212][ T7519] tipc: Node identity daa64f958fb8, cluster identity 4711 [ 208.102198][ T7519] tipc: Enabled bearer , priority 10 [ 208.514123][ T7526] netlink: 276 bytes leftover after parsing attributes in process `syz.2.330'. [ 209.225324][ T46] tipc: Node number set to 1428049813 [ 210.739954][ T5889] usb 6-1: USB disconnect, device number 6 [ 214.389330][ T7589] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[7589] [ 215.812589][ T7595] binder: 7594:7595 ioctl c018620c 20000140 returned -1 [ 217.011175][ T7607] FAULT_INJECTION: forcing a failure. [ 217.011175][ T7607] name failslab, interval 1, probability 0, space 0, times 0 [ 217.024323][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.6.352 Not tainted 6.12.0-rc7-syzkaller #0 [ 217.033203][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.043281][ T7607] Call Trace: [ 217.046586][ T7607] [ 217.049539][ T7607] dump_stack_lvl+0x241/0x360 [ 217.054265][ T7607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.059506][ T7607] ? __pfx__printk+0x10/0x10 [ 217.064142][ T7607] should_fail_ex+0x3b0/0x4e0 [ 217.068853][ T7607] ? skb_clone+0x20c/0x390 [ 217.073320][ T7607] should_failslab+0xac/0x100 [ 217.078066][ T7607] ? skb_clone+0x20c/0x390 [ 217.082535][ T7607] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 217.087963][ T7607] skb_clone+0x20c/0x390 [ 217.092258][ T7607] ? dev_queue_xmit_nit+0x220/0xc10 [ 217.097499][ T7607] dev_queue_xmit_nit+0x419/0xc10 [ 217.102564][ T7607] ? dev_queue_xmit_nit+0x2b/0xc10 [ 217.107720][ T7607] ? validate_xmit_skb+0x977/0xf90 [ 217.112883][ T7607] dev_hard_start_xmit+0x15f/0x7e0 [ 217.118036][ T7607] ? __pfx_validate_xmit_skb+0x10/0x10 [ 217.123546][ T7607] __dev_queue_xmit+0x1b11/0x3ed0 [ 217.128640][ T7607] ? netlink_unicast+0x7f6/0x990 [ 217.133621][ T7607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.139720][ T7607] ? __dev_queue_xmit+0x2da/0x3ed0 [ 217.144871][ T7607] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.150316][ T7607] ? __copy_skb_header+0x437/0x5b0 [ 217.155471][ T7607] ? __asan_memcpy+0x40/0x70 [ 217.160096][ T7607] ? __copy_skb_header+0x437/0x5b0 [ 217.165246][ T7607] ? __skb_clone+0x454/0x6c0 [ 217.169878][ T7607] ? skb_clone+0x240/0x390 [ 217.174331][ T7607] __netlink_deliver_tap+0x54d/0x7c0 [ 217.179674][ T7607] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.184914][ T7607] netlink_deliver_tap+0x19d/0x1b0 [ 217.190073][ T7607] netlink_sendskb+0x68/0x140 [ 217.194789][ T7607] netlink_unicast+0x39d/0x990 [ 217.199599][ T7607] ? __asan_memcpy+0x40/0x70 [ 217.204235][ T7607] ? __pfx_netlink_unicast+0x10/0x10 [ 217.209562][ T7607] netlink_rcv_skb+0x262/0x430 [ 217.214364][ T7607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.219857][ T7607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.225199][ T7607] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.230437][ T7607] netlink_unicast+0x7f6/0x990 [ 217.235249][ T7607] ? __pfx_netlink_unicast+0x10/0x10 [ 217.240570][ T7607] ? __virt_addr_valid+0x183/0x530 [ 217.245720][ T7607] ? __check_object_size+0x48e/0x900 [ 217.251053][ T7607] netlink_sendmsg+0x8e4/0xcb0 [ 217.255883][ T7607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.261225][ T7607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.266546][ T7607] __sock_sendmsg+0x221/0x270 [ 217.271271][ T7607] ____sys_sendmsg+0x52a/0x7e0 [ 217.276083][ T7607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.281423][ T7607] __sys_sendmsg+0x292/0x380 [ 217.286059][ T7607] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.291219][ T7607] ? __pfx_vfs_write+0x10/0x10 [ 217.296054][ T7607] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.302431][ T7607] ? do_syscall_64+0x100/0x230 [ 217.307239][ T7607] ? do_syscall_64+0xb6/0x230 [ 217.311962][ T7607] do_syscall_64+0xf3/0x230 [ 217.316507][ T7607] ? clear_bhb_loop+0x35/0x90 [ 217.321236][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.327167][ T7607] RIP: 0033:0x7f35dab7e719 [ 217.331616][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.351272][ T7607] RSP: 002b:00007f35db89e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.359722][ T7607] RAX: ffffffffffffffda RBX: 00007f35dad35f80 RCX: 00007f35dab7e719 [ 217.367729][ T7607] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 217.375743][ T7607] RBP: 00007f35db89e090 R08: 0000000000000000 R09: 0000000000000000 [ 217.383726][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.391723][ T7607] R13: 0000000000000000 R14: 00007f35dad35f80 R15: 00007ffe290770f8 [ 217.399719][ T7607] [ 218.855335][ T969] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 219.155034][ T969] usb 7-1: Using ep0 maxpacket: 8 [ 219.178884][ T969] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.00 [ 219.213166][ T969] usb 7-1: New USB device strings: Mfr=16, Product=1, SerialNumber=1 [ 219.359165][ T969] usb 7-1: Product: syz [ 219.402101][ T969] usb 7-1: Manufacturer: syz [ 219.415804][ T969] usb 7-1: SerialNumber: syz [ 219.825231][ T969] usb 7-1: config 0 descriptor?? [ 220.056315][ T969] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 220.064861][ T969] usb 7-1: Detected SIO [ 220.819802][ T969] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 221.675675][ T5889] usb 7-1: USB disconnect, device number 5 [ 221.746572][ T7642] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.362'. [ 221.863464][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 221.875126][ T5889] ftdi_sio 7-1:0.0: device disconnected [ 222.012901][ T7639] Illegal XDP return value 4294967274 on prog (id 81) dev N/A, expect packet loss! [ 222.275789][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 223.575840][ T5890] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 224.655765][ T5890] usb 7-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 224.666222][ T5890] usb 7-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 224.677273][ T5890] usb 7-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 224.687763][ T5890] usb 7-1: config 0 interface 0 has no altsetting 0 [ 224.697044][ T5890] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 224.706530][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.714556][ T5890] usb 7-1: Product: syz [ 224.722201][ T5890] usb 7-1: Manufacturer: syz [ 224.735000][ T5890] usb 7-1: SerialNumber: syz [ 224.826895][ T5890] usb 7-1: config 0 descriptor?? [ 224.868226][ T5890] ir_toy 7-1:0.0: required endpoints not found [ 224.910369][ T7679] netlink: 'syz.0.372': attribute type 9 has an invalid length. [ 225.041808][ T5890] usb 7-1: USB disconnect, device number 6 [ 226.105899][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 226.406007][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 226.453548][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.476833][ T5890] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 226.486735][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.525179][ T5890] usb 3-1: Product: syz [ 226.532751][ T5890] usb 3-1: Manufacturer: syz [ 226.840028][ T5890] usb 3-1: SerialNumber: syz [ 226.869581][ T5890] usb 3-1: config 0 descriptor?? [ 227.131093][ T5890] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 228.479392][ T7707] vivid-000: kernel_thread() failed [ 230.611364][ T7700] delete_channel: no stack [ 230.675121][ T5889] usb 3-1: USB disconnect, device number 5 [ 234.008364][ T7735] process 'syz.6.388' launched './file2' with NULL argv: empty string added [ 234.351062][ T29] audit: type=1326 audit(1731344108.689:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7742 comm="syz.6.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35dab7e719 code=0x0 [ 235.711541][ T7765] 9pnet_fd: Insufficient options for proto=fd [ 236.635231][ T5928] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 236.785052][ T5928] usb 3-1: device descriptor read/64, error -71 [ 237.155007][ T5928] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 237.475627][ T5928] usb 3-1: device descriptor read/64, error -71 [ 237.586686][ T5928] usb usb3-port1: attempt power cycle [ 237.748787][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 237.758021][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'. [ 238.060938][ T969] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 238.118702][ T5928] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 238.146971][ T5928] usb 3-1: device descriptor read/8, error -71 [ 238.480055][ T969] usb 7-1: unable to get BOS descriptor or descriptor too short [ 238.496356][ T969] usb 7-1: not running at top speed; connect to a high speed hub [ 238.516537][ T969] usb 7-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 238.538751][ T969] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 238.555145][ T5928] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 238.747432][ T969] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.851566][ T7796] program syz.0.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.094051][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.105899][ T5928] usb 3-1: device not accepting address 9, error -71 [ 239.113508][ T969] usb 7-1: Product: syz [ 239.113536][ T969] usb 7-1: Manufacturer: syz [ 239.113555][ T969] usb 7-1: SerialNumber: syz [ 239.243839][ T29] audit: type=1400 audit(1731344113.579:17): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7797 comm="syz.5.405" key_serial=553122248 key_desc="_uid_ses.0" [ 239.271093][ T5928] usb usb3-port1: unable to enumerate USB device [ 239.316808][ T29] audit: type=1400 audit(1731344113.579:18): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=7797 comm="syz.5.405" name="fuse" dev="devtmpfs" ino=99 [ 239.345530][ T969] usb 7-1: USB disconnect, device number 7 [ 239.417646][ T29] audit: type=1400 audit(1731344113.589:19): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=7797 comm="syz.5.405" name="file0" dev="tmpfs" ino=415 [ 239.703962][ T7806] FAULT_INJECTION: forcing a failure. [ 239.703962][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 239.725917][ T7806] CPU: 1 UID: 0 PID: 7806 Comm: syz.5.408 Not tainted 6.12.0-rc7-syzkaller #0 [ 239.734829][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 239.744893][ T7806] Call Trace: [ 239.748207][ T7806] [ 239.751172][ T7806] dump_stack_lvl+0x241/0x360 [ 239.755896][ T7806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.761147][ T7806] ? __pfx__printk+0x10/0x10 [ 239.765769][ T7806] ? fs_reclaim_acquire+0x93/0x130 [ 239.770906][ T7806] ? __pfx___might_resched+0x10/0x10 [ 239.776216][ T7806] should_fail_ex+0x3b0/0x4e0 [ 239.780909][ T7806] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 239.786651][ T7806] should_failslab+0xac/0x100 [ 239.791351][ T7806] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 239.797090][ T7806] __kmalloc_noprof+0xd8/0x400 [ 239.801870][ T7806] tomoyo_realpath_from_path+0xcf/0x5e0 [ 239.807447][ T7806] tomoyo_path_number_perm+0x23a/0x880 [ 239.812948][ T7806] ? tomoyo_path_number_perm+0x208/0x880 [ 239.818601][ T7806] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.824639][ T7806] ? __fget_files+0x29/0x470 [ 239.829253][ T7806] ? __fget_files+0x3f3/0x470 [ 239.833980][ T7806] security_file_ioctl+0xc6/0x2a0 [ 239.839068][ T7806] __se_sys_ioctl+0x47/0x170 [ 239.843705][ T7806] do_syscall_64+0xf3/0x230 [ 239.848247][ T7806] ? clear_bhb_loop+0x35/0x90 [ 239.853292][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.859204][ T7806] RIP: 0033:0x7fdc6d37e719 [ 239.863658][ T7806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.883278][ T7806] RSP: 002b:00007fdc6e0a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.891723][ T7806] RAX: ffffffffffffffda RBX: 00007fdc6d535f80 RCX: 00007fdc6d37e719 [ 239.899709][ T7806] RDX: 0000000020000240 RSI: 000000004070aea0 RDI: 0000000000000006 [ 239.907690][ T7806] RBP: 00007fdc6e0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 239.915673][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.923757][ T7806] R13: 0000000000000000 R14: 00007fdc6d535f80 R15: 00007ffc3d80aa38 [ 239.931756][ T7806] [ 239.953670][ T7806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.982661][ T29] audit: type=1326 audit(1731344114.319:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7805 comm="syz.5.408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc6d37e719 code=0x0 [ 241.092807][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.417'. [ 242.979232][ T7847] program syz.0.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.517816][ T7858] random: crng reseeded on system resumption [ 243.675272][ T5920] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 243.829517][ T5920] usb 3-1: device descriptor read/64, error -71 [ 243.965709][ T7869] netlink: 'syz.6.427': attribute type 4 has an invalid length. [ 243.979261][ T7869] netlink: 'syz.6.427': attribute type 4 has an invalid length. [ 244.005895][ T7869] netlink: 126012 bytes leftover after parsing attributes in process `syz.6.427'. [ 244.085047][ T5920] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 244.215392][ T5920] usb 3-1: device descriptor read/64, error -71 [ 244.255057][ T5890] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 244.326288][ T5920] usb usb3-port1: attempt power cycle [ 244.405186][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 244.411919][ T5890] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 244.420687][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.431999][ T5890] usb 6-1: config 0 has no interface number 0 [ 244.441220][ T5890] usb 6-1: New USB device found, idVendor=456d, idProduct=3a16, bcdDevice= b.3b [ 244.452859][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.461143][ T5890] usb 6-1: Product: syz [ 244.465710][ T5890] usb 6-1: Manufacturer: syz [ 244.470420][ T5890] usb 6-1: SerialNumber: syz [ 244.478447][ T5890] usb 6-1: config 0 descriptor?? [ 244.665694][ T5920] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 244.707388][ T5920] usb 3-1: device descriptor read/8, error -71 [ 244.830791][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.889648][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.135454][ T5920] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 245.167380][ T5920] usb 3-1: device descriptor read/8, error -71 [ 245.263972][ T2961] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.285896][ T5920] usb usb3-port1: unable to enumerate USB device [ 245.374245][ T7884] fuse: Unknown parameter '01777777777777777777777' [ 246.100656][ T2961] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.759465][ T2961] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.345046][ T5920] usb 6-1: USB disconnect, device number 7 [ 247.531178][ T2961] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.571731][ T7898] FAULT_INJECTION: forcing a failure. [ 247.571731][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.574518][ T7899] dlm: non-version read from control device 0 [ 247.618152][ T7898] CPU: 1 UID: 0 PID: 7898 Comm: syz.2.435 Not tainted 6.12.0-rc7-syzkaller #0 [ 247.627078][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 247.637176][ T7898] Call Trace: [ 247.640496][ T7898] [ 247.643441][ T7898] dump_stack_lvl+0x241/0x360 [ 247.648148][ T7898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.653367][ T7898] ? __pfx__printk+0x10/0x10 [ 247.657978][ T7898] ? __pfx_lock_release+0x10/0x10 [ 247.663029][ T7898] should_fail_ex+0x3b0/0x4e0 [ 247.667725][ T7898] _copy_from_user+0x2f/0xc0 [ 247.672329][ T7898] copy_msghdr_from_user+0xae/0x680 [ 247.677551][ T7898] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 247.683382][ T7898] __sys_sendmsg+0x22d/0x380 [ 247.688004][ T7898] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.693137][ T7898] ? __pfx_vfs_write+0x10/0x10 [ 247.697929][ T7898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.704317][ T7898] ? do_syscall_64+0x100/0x230 [ 247.709100][ T7898] ? do_syscall_64+0xb6/0x230 [ 247.713874][ T7898] do_syscall_64+0xf3/0x230 [ 247.718390][ T7898] ? clear_bhb_loop+0x35/0x90 [ 247.723086][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.729022][ T7898] RIP: 0033:0x7f4d5657e719 [ 247.733450][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.753153][ T7898] RSP: 002b:00007f4d573e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.761584][ T7898] RAX: ffffffffffffffda RBX: 00007f4d56735f80 RCX: 00007f4d5657e719 [ 247.769563][ T7898] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 247.777641][ T7898] RBP: 00007f4d573e8090 R08: 0000000000000000 R09: 0000000000000000 [ 247.785625][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.793607][ T7898] R13: 0000000000000000 R14: 00007f4d56735f80 R15: 00007fff30636bf8 [ 247.801621][ T7898] [ 248.045451][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.055787][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.066400][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.095547][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.117751][ T5855] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 248.130479][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.212342][ T2961] bridge_slave_1: left allmulticast mode [ 248.220248][ T2961] bridge_slave_1: left promiscuous mode [ 248.227719][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.228466][ T7913] netlink: 256 bytes leftover after parsing attributes in process `syz.6.441'. [ 248.258374][ T2961] bridge_slave_0: left allmulticast mode [ 248.264083][ T2961] bridge_slave_0: left promiscuous mode [ 248.270268][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.285647][ T2961] tipc: Resetting bearer [ 248.659675][ T2961] tipc: Disabling bearer [ 250.244766][ T5145] Bluetooth: hci6: command tx timeout [ 251.315777][ T7938] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 251.523896][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.640015][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.660470][ T2961] bond0 (unregistering): Released all slaves [ 252.590719][ T5145] Bluetooth: hci6: command tx timeout [ 252.851707][ T2961] tipc: Left network mode [ 253.287893][ T7971] FAULT_INJECTION: forcing a failure. [ 253.287893][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 253.288064][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.5.453 Not tainted 6.12.0-rc7-syzkaller #0 [ 253.288092][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 253.288107][ T7971] Call Trace: [ 253.288116][ T7971] [ 253.288127][ T7971] dump_stack_lvl+0x241/0x360 [ 253.288166][ T7971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.288196][ T7971] ? __pfx__printk+0x10/0x10 [ 253.288230][ T7971] ? __pfx___schedule+0x10/0x10 [ 253.288279][ T7971] should_fail_ex+0x3b0/0x4e0 [ 253.288310][ T7971] ? bit_cursor+0x1016/0x2670 [ 253.288336][ T7971] should_failslab+0xac/0x100 [ 253.288374][ T7971] ? bit_cursor+0x1016/0x2670 [ 253.288399][ T7971] __kmalloc_noprof+0xd8/0x400 [ 253.288431][ T7971] bit_cursor+0x1016/0x2670 [ 253.288481][ T7971] ? __pfx_bit_cursor+0x10/0x10 [ 253.288506][ T7971] ? get_color+0x241/0x4a0 [ 253.288541][ T7971] ? __pfx_bit_cursor+0x10/0x10 [ 253.288577][ T7971] redraw_screen+0xb07/0xe90 [ 253.288616][ T7971] ? __pfx_redraw_screen+0x10/0x10 [ 253.288644][ T7971] ? fbcon_do_set_font+0xc29/0x1410 [ 253.288678][ T7971] fbcon_do_set_font+0xd4b/0x1410 [ 253.288731][ T7971] con_font_op+0x93d/0x1300 [ 253.288786][ T7971] ? __pfx_con_font_op+0x10/0x10 [ 253.288822][ T7971] ? __pfx___might_resched+0x10/0x10 [ 253.288858][ T7971] ? __pfx_lock_release+0x10/0x10 [ 253.288897][ T7971] ? cap_capable+0x1b4/0x250 [ 253.288933][ T7971] ? __might_fault+0xc6/0x120 [ 253.288979][ T7971] vt_ioctl+0x1ccc/0x2090 [ 253.289014][ T7971] ? __pfx_vt_ioctl+0x10/0x10 [ 253.289039][ T7971] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.289078][ T7971] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.289120][ T7971] ? irqentry_exit+0x63/0x90 [ 253.289147][ T7971] ? lockdep_hardirqs_on+0x99/0x150 [ 253.289178][ T7971] ? tty_jobctrl_ioctl+0x36e/0xba0 [ 253.289214][ T7971] tty_ioctl+0x90f/0xdc0 [ 253.289245][ T7971] ? __pfx_tty_ioctl+0x10/0x10 [ 253.289280][ T7971] __se_sys_ioctl+0xf9/0x170 [ 253.289313][ T7971] do_syscall_64+0xf3/0x230 [ 253.289343][ T7971] ? clear_bhb_loop+0x35/0x90 [ 253.289374][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.289400][ T7971] RIP: 0033:0x7fdc6d37e719 [ 253.289422][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.289442][ T7971] RSP: 002b:00007fdc6b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.289470][ T7971] RAX: ffffffffffffffda RBX: 00007fdc6d536058 RCX: 00007fdc6d37e719 [ 253.289488][ T7971] RDX: 0000000020000080 RSI: 0000000000004b72 RDI: 0000000000000006 [ 253.289503][ T7971] RBP: 00007fdc6b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 253.289519][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.289534][ T7971] R13: 0000000000000000 R14: 00007fdc6d536058 R15: 00007ffc3d80aa38 [ 253.289568][ T7971] [ 254.765414][ T5145] Bluetooth: hci6: command tx timeout [ 255.020237][ T7909] chnl_net:caif_netlink_parms(): no params data found [ 255.052101][ T7994] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.250484][ T2961] hsr_slave_0: left promiscuous mode [ 255.264639][ T2961] hsr_slave_1: left promiscuous mode [ 255.302625][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.337028][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.404620][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.466437][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.559938][ T2961] veth1_macvtap: left promiscuous mode [ 255.574091][ T2961] veth0_macvtap: left promiscuous mode [ 255.589226][ T2961] veth1_vlan: left promiscuous mode [ 255.685213][ T2961] veth0_vlan: left promiscuous mode [ 255.950188][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.956816][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.867772][ T5855] Bluetooth: hci6: command tx timeout [ 258.546690][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 258.728160][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 260.570714][ T8040] batadv_slave_0: entered promiscuous mode [ 261.006439][ T8057] program syz.2.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.337039][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.344233][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.352531][ T7909] bridge_slave_0: entered allmulticast mode [ 261.366249][ T7909] bridge_slave_0: entered promiscuous mode [ 261.415851][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.785326][ T8061] (syz.6.475,8061,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ßÕ~gžœ<+‹€( ™.µ1 1'êƉÇ" or missing value [ 261.829126][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.855241][ T8061] (syz.6.475,8061,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 261.871900][ T7909] bridge_slave_1: entered allmulticast mode [ 261.886367][ T7909] bridge_slave_1: entered promiscuous mode [ 262.532662][ T7909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.639865][ T29] audit: type=1400 audit(1731348231.977:21): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=8080 comm="syz.6.481" key_serial=553122248 key_desc="_uid_ses.0" [ 262.948286][ T7909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.985458][ T29] audit: type=1400 audit(1731348231.977:22): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=8080 comm="syz.6.481" name="fuse" dev="devtmpfs" ino=99 [ 263.275489][ T29] audit: type=1400 audit(1731348232.027:23): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=8080 comm="syz.6.481" name="file0" dev="tmpfs" ino=336 [ 263.547503][ T7909] team0: Port device team_slave_0 added [ 263.547660][ T8099] fuse: Bad value for 'user_id' [ 263.581857][ T8099] fuse: Bad value for 'user_id' [ 263.617319][ T7909] team0: Port device team_slave_1 added [ 264.419290][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.426796][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.261842][ T7909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.293380][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.320185][ T8118] FAULT_INJECTION: forcing a failure. [ 265.320185][ T8118] name failslab, interval 1, probability 0, space 0, times 0 [ 265.335176][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.367643][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.5.487 Not tainted 6.12.0-rc7-syzkaller #0 [ 265.376654][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 265.386755][ T8118] Call Trace: [ 265.390073][ T8118] [ 265.393061][ T8118] dump_stack_lvl+0x241/0x360 [ 265.397882][ T8118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.403144][ T8118] ? __pfx__printk+0x10/0x10 [ 265.407875][ T8118] ? ref_tracker_alloc+0x332/0x490 [ 265.413039][ T8118] should_fail_ex+0x3b0/0x4e0 [ 265.417762][ T8118] ? skb_clone+0x20c/0x390 [ 265.422225][ T8118] should_failslab+0xac/0x100 [ 265.425449][ T7909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.426933][ T8118] ? skb_clone+0x20c/0x390 [ 265.441863][ T8118] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 265.447282][ T8118] skb_clone+0x20c/0x390 [ 265.451578][ T8118] __netlink_deliver_tap+0x3cc/0x7c0 [ 265.456903][ T8118] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.462118][ T8118] netlink_deliver_tap+0x19d/0x1b0 [ 265.467243][ T8118] netlink_sendskb+0x68/0x140 [ 265.471932][ T8118] netlink_unicast+0x39d/0x990 [ 265.476702][ T8118] ? __asan_memcpy+0x40/0x70 [ 265.481327][ T8118] ? __pfx_netlink_unicast+0x10/0x10 [ 265.486632][ T8118] netlink_rcv_skb+0x262/0x430 [ 265.491408][ T8118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.496445][ T8118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.501751][ T8118] ? __netlink_deliver_tap+0x77e/0x7c0 [ 265.507228][ T8118] genl_rcv+0x28/0x40 [ 265.511224][ T8118] netlink_unicast+0x7f6/0x990 [ 265.516012][ T8118] ? __pfx_netlink_unicast+0x10/0x10 [ 265.521334][ T8118] ? __virt_addr_valid+0x183/0x530 [ 265.526480][ T8118] ? __check_object_size+0x48e/0x900 [ 265.531786][ T8118] netlink_sendmsg+0x8e4/0xcb0 [ 265.536754][ T8118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.542061][ T8118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.547351][ T8118] __sock_sendmsg+0x221/0x270 [ 265.552033][ T8118] ____sys_sendmsg+0x52a/0x7e0 [ 265.556836][ T8118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.562163][ T8118] __sys_sendmsg+0x292/0x380 [ 265.566788][ T8118] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.571918][ T8118] ? __pfx_vfs_write+0x10/0x10 [ 265.576730][ T8118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.583099][ T8118] ? do_syscall_64+0x100/0x230 [ 265.587884][ T8118] ? do_syscall_64+0xb6/0x230 [ 265.592603][ T8118] do_syscall_64+0xf3/0x230 [ 265.597154][ T8118] ? clear_bhb_loop+0x35/0x90 [ 265.601845][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.607750][ T8118] RIP: 0033:0x7fdc6d37e719 [ 265.612175][ T8118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.631796][ T8118] RSP: 002b:00007fdc6e0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.640223][ T8118] RAX: ffffffffffffffda RBX: 00007fdc6d535f80 RCX: 00007fdc6d37e719 [ 265.648203][ T8118] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 265.656182][ T8118] RBP: 00007fdc6e0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 265.664163][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.672150][ T8118] R13: 0000000000000000 R14: 00007fdc6d535f80 R15: 00007ffc3d80aa38 [ 265.680234][ T8118] [ 266.029393][ T8126] netlink: 'syz.6.489': attribute type 1 has an invalid length. [ 266.741271][ T29] audit: type=1400 audit(1731348235.797:24): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=8136 comm="syz.0.493" key_serial=553122248 key_desc="_uid_ses.0" [ 266.761559][ T29] audit: type=1400 audit(1731348235.797:25): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=8136 comm="syz.0.493" name="fuse" dev="devtmpfs" ino=99 [ 266.789229][ T29] audit: type=1400 audit(1731348235.797:26): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=8136 comm="syz.0.493" name="file0" dev="tmpfs" ino=691 [ 267.083907][ T7909] hsr_slave_0: entered promiscuous mode [ 267.268105][ T8146] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[8146] [ 267.458717][ T7909] hsr_slave_1: entered promiscuous mode [ 268.215253][ T5889] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 268.240462][ T8148] program syz.2.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.259857][ T7909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.405141][ T7909] Cannot create hsr debugfs directory [ 268.645013][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 268.656287][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.666666][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.915113][ T5889] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.924835][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.290036][ T5889] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 269.477719][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.566173][ T5889] usb 7-1: Product: syz [ 269.570414][ T5889] usb 7-1: Manufacturer: syz [ 269.645492][ T5889] usb 7-1: SerialNumber: syz [ 269.653983][ T5889] usb 7-1: config 0 descriptor?? [ 269.840873][ T5889] usb 7-1: can't set config #0, error -71 [ 269.857997][ T5889] usb 7-1: USB disconnect, device number 8 [ 270.433072][ T8165] program syz.2.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.925326][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.145698][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 272.153715][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 272.166954][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 272.224701][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 272.280522][ T5889] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 272.421558][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.460931][ T5889] usb 1-1: Product: syz [ 272.685196][ T5889] usb 1-1: Manufacturer: syz [ 272.861006][ T5889] usb 1-1: SerialNumber: syz [ 273.029424][ T5889] usb 1-1: config 0 descriptor?? [ 273.059871][ T5889] hub 1-1:0.0: bad descriptor, ignoring hub [ 273.223972][ T5889] hub 1-1:0.0: probe with driver hub failed with error -5 [ 273.234071][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.337724][ T5889] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 273.452531][ T8210] ptrace attach of "./syz-executor exec"[6100] was attempted by "./syz-executor exec"[8210] [ 274.372827][ T8217] program syz.2.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.717895][ T5889] usb 1-1: USB disconnect, device number 12 [ 275.018914][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.509'. [ 275.043522][ T8229] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.052575][ T8229] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.061861][ T8229] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.071064][ T8229] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.086847][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.169139][ T8229] vxlan0: entered promiscuous mode [ 275.372619][ T7909] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.465766][ T7909] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.651836][ T7909] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.673131][ T8246] tmpfs: Cannot change global quota limit on remount [ 275.927501][ T8247] program syz.2.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.393514][ T7909] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.903877][ T8053] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 277.005743][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.037336][ T8258] netlink: 48 bytes leftover after parsing attributes in process `syz.5.514'. [ 277.188753][ T8053] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 277.226644][ T7909] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.325579][ T8053] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 277.342280][ T7909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.352794][ T7909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.372110][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.379222][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.446889][ T8053] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 277.543079][ T8053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.592813][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.600108][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.662120][ T8053] usb 7-1: config 0 descriptor?? [ 278.157194][ T7909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.289954][ T8053] ath6kl: Failed to submit usb control message: -110 [ 279.296982][ T8053] ath6kl: unable to send the bmi data to the device: -110 [ 279.304097][ T8053] ath6kl: Unable to send get target info: -110 [ 279.311331][ T8053] ath6kl: Failed to init ath6kl core: -110 [ 279.317751][ T8053] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 279.625365][ T8292] program syz.2.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.052626][ T5921] usb 7-1: USB disconnect, device number 9 [ 280.760197][ T8310] ptrace attach of "./syz-executor exec"[6100] was attempted by "./syz-executor exec"[8310] [ 282.056128][ T7909] veth0_vlan: entered promiscuous mode [ 282.130479][ T7909] veth1_vlan: entered promiscuous mode [ 282.281205][ T7909] veth0_macvtap: entered promiscuous mode [ 282.313538][ T7909] veth1_macvtap: entered promiscuous mode [ 282.477819][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.625364][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.667806][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.670663][ T8345] tmpfs: Cannot change global quota limit on remount [ 282.705083][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.746972][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.797551][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.823114][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.868484][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.043823][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.178769][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.199643][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.234396][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.581243][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.599777][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.650815][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.702241][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.713848][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.723890][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.734450][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.744491][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.755195][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.765442][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.776204][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.780773][ T8358] netlink: 32 bytes leftover after parsing attributes in process `syz.6.530'. [ 283.786841][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.805891][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.817179][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.839182][ T8341] netlink: 48 bytes leftover after parsing attributes in process `syz.5.527'. [ 283.875215][ T969] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 283.902158][ T7909] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.915604][ T7909] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.924649][ T7909] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.933516][ T7909] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.511917][ T8369] tmpfs: Cannot change global quota limit on remount [ 285.552627][ T969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 285.578776][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.590228][ T969] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 285.599683][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.715986][ T969] usb 3-1: config 0 descriptor?? [ 286.370608][ T8378] FAULT_INJECTION: forcing a failure. [ 286.370608][ T8378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.383845][ T8378] CPU: 1 UID: 0 PID: 8378 Comm: syz.0.532 Not tainted 6.12.0-rc7-syzkaller #0 [ 286.392732][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 286.402904][ T8378] Call Trace: [ 286.406215][ T8378] [ 286.409174][ T8378] dump_stack_lvl+0x241/0x360 [ 286.413898][ T8378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.419134][ T8378] ? __pfx__printk+0x10/0x10 [ 286.423763][ T8378] ? __pfx_lock_release+0x10/0x10 [ 286.428840][ T8378] should_fail_ex+0x3b0/0x4e0 [ 286.433551][ T8378] _copy_from_user+0x2f/0xc0 [ 286.438166][ T8378] copy_msghdr_from_user+0xae/0x680 [ 286.443400][ T8378] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 286.449680][ T8378] __sys_sendmsg+0x22d/0x380 [ 286.454318][ T8378] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.459498][ T8378] ? __pfx_vfs_write+0x10/0x10 [ 286.464328][ T8378] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.470714][ T8378] ? do_syscall_64+0x100/0x230 [ 286.475522][ T8378] ? do_syscall_64+0xb6/0x230 [ 286.480239][ T8378] do_syscall_64+0xf3/0x230 [ 286.484779][ T8378] ? clear_bhb_loop+0x35/0x90 [ 286.489496][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.495427][ T8378] RIP: 0033:0x7f2bdff7e719 [ 286.499880][ T8378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.519527][ T8378] RSP: 002b:00007f2bdfdb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.528003][ T8378] RAX: ffffffffffffffda RBX: 00007f2be0136130 RCX: 00007f2bdff7e719 [ 286.536012][ T8378] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000007 [ 286.544016][ T8378] RBP: 00007f2bdfdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.552016][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.560018][ T8378] R13: 0000000000000000 R14: 00007f2be0136130 R15: 00007fff251455a8 [ 286.568066][ T8378] [ 287.197330][ T5920] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 287.299580][ T969] usb 3-1: can't set config #0, error -71 [ 287.420047][ T969] usb 3-1: USB disconnect, device number 14 [ 287.456242][ T7826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.464131][ T7826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.048390][ T8387] netlink: 'syz.6.534': attribute type 64 has an invalid length. [ 288.083498][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.115128][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.966231][ T969] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 289.144390][ T8414] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 289.910853][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 289.943581][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.345267][ T8414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.538'. [ 290.385337][ T969] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 290.425136][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.489720][ T969] usb 3-1: config 0 descriptor?? [ 290.639898][ T969] usb 3-1: can't set config #0, error -71 [ 290.653139][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.677665][ T969] usb 3-1: USB disconnect, device number 15 [ 291.226937][ T8434] program syz.2.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.313755][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.472116][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.495170][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.527650][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.539214][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.558939][ T5855] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 291.567211][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 291.680585][ T8427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.541'. [ 291.796145][ T5921] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 292.031193][ T8447] program syz.6.545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.426406][ T30] INFO: task syz.4.136:6485 blocked for more than 143 seconds. [ 292.437353][ T30] Not tainted 6.12.0-rc7-syzkaller #0 [ 292.455223][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.464499][ T30] task:syz.4.136 state:D stack:23648 pid:6485 tgid:6484 ppid:5844 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 292.510075][ T30] Call Trace: [ 292.513421][ T30] [ 292.580304][ T30] __schedule+0x17fa/0x4bd0 [ 292.926652][ T30] ? __pfx___schedule+0x10/0x10 [ 292.931687][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.937036][ T30] ? schedule+0x90/0x320 [ 292.941379][ T30] schedule+0x14b/0x320 [ 292.945722][ T30] schedule_timeout+0xb0/0x310 [ 292.950581][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 292.956144][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.962251][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.967802][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 292.973089][ T30] __wait_for_common+0x3ed/0x6e0 [ 292.978503][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 292.983936][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 292.989904][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 292.995240][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 293.000712][ T30] wait_for_completion_state+0x1c/0x40 [ 293.006335][ T30] do_coredump+0xa5d/0x2ec0 [ 293.010905][ T30] ? stack_trace_save+0x118/0x1d0 [ 293.016100][ T30] ? __pfx_do_coredump+0x10/0x10 [ 293.021173][ T30] ? proc_coredump_connector+0x1e8/0x750 [ 293.027027][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.033112][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 293.039278][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.044768][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.050278][ T30] get_signal+0x13fc/0x1740 [ 293.055017][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 293.061014][ T30] ? __pfx_get_signal+0x10/0x10 [ 293.066127][ T30] arch_do_signal_or_restart+0x96/0x860 [ 293.071775][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 293.078635][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.084695][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 293.090960][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 293.096707][ T30] do_syscall_64+0x100/0x230 [ 293.101482][ T30] ? clear_bhb_loop+0x35/0x90 [ 293.106353][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.112366][ T30] RIP: 0033:0x7f09b8b7e719 [ 293.116954][ T30] RSP: 002b:00007f09b98e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 293.125530][ T30] RAX: ffffffffffffffda RBX: 00007f09b8d35f88 RCX: 00007f09b8b7e719 [ 293.133599][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09b8d35f8c [ 293.141789][ T30] RBP: 00007f09b8d35f80 R08: 7fffffffffffffff R09: 0000000000000000 [ 293.150047][ T30] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f09b8d35f8c [ 293.158168][ T30] R13: 0000000000000000 R14: 00007ffed95d4890 R15: 00007ffed95d4978 [ 293.166353][ T30] [ 293.169502][ T30] [ 293.169502][ T30] Showing all locks held in the system: [ 293.178313][ T30] 2 locks held by kworker/u8:0/11: [ 293.183480][ T30] #0: ffff8881452cd148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 293.195384][ T30] #1: ffffc90000107d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.208090][ T30] 3 locks held by kworker/u8:1/12: [ 293.213250][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 293.225392][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.236792][ T30] #2: ffffffff8fcc1408 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 293.246146][ T30] 1 lock held by khungtaskd/30: [ 293.251026][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 293.261339][ T30] 7 locks held by kworker/u8:2/35: [ 293.266606][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 293.277717][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.288954][ T30] #2: ffffffff8fcb48d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 293.298707][ T30] #3: ffff8880286bd0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 293.309127][ T30] #4: ffff8880286bc250 (&devlink->lock_key#9){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 293.320153][ T30] #5: ffffffff8fcc1408 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 293.329304][ T30] #6: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 293.340485][ T30] 3 locks held by kworker/u8:3/52: [ 293.345771][ T30] #0: ffff88803015b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 293.357566][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.370633][ T30] #2: ffffffff8fcc1408 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 293.380262][ T30] 2 locks held by getty/5601: [ 293.385520][ T30] #0: ffff8880311120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 293.395633][ T30] #1: ffffc900032532f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 293.405971][ T30] 1 lock held by syz-executor/5836: [ 293.411240][ T30] #0: ffff8880625b00e0 (&type->s_umount_key#50){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 293.422168][ T30] 5 locks held by kworker/0:8/5921: [ 293.427568][ T30] #0: ffff8881446df148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 293.439244][ T30] #1: ffffc9000429fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.451435][ T30] #2: ffff888146382190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 293.460558][ T30] #3: ffff888146385510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 293.470775][ T30] #4: ffff88814630d868 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 293.480708][ T30] 2 locks held by kworker/u8:16/7826: [ 293.486223][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 293.498432][ T30] #1: ffffc90004c4fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.510520][ T30] 1 lock held by syz-executor/8430: [ 293.515836][ T30] #0: ffffffff8fcc1408 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 293.525516][ T30] 1 lock held by syz.6.545/8445: [ 293.530510][ T30] #0: ffff88807a725008 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 293.540906][ T30] 2 locks held by syz.6.545/8448: [ 293.546121][ T30] #0: ffffffff8fca5ec8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 293.555666][ T30] #1: ffffffff8fcc1408 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 293.565452][ T30] 2 locks held by syz.2.546/8452: [ 293.570638][ T30] #0: ffffffff8f4a8ca8 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 293.579577][ T30] #1: ffffffff8fcc1408 (rtnl_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x789/0x1cd0 [ 293.588680][ T30] [ 293.591422][ T30] ============================================= [ 293.591422][ T30] [ 293.592254][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.600222][ T30] NMI backtrace for cpu 0 [ 293.614875][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 293.623665][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 293.633754][ T30] Call Trace: [ 293.637068][ T30] [ 293.640033][ T30] dump_stack_lvl+0x241/0x360 [ 293.644751][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.649969][ T30] ? __pfx__printk+0x10/0x10 [ 293.654585][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 293.659566][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 293.665077][ T30] ? _printk+0xd5/0x120 [ 293.665648][ T5855] Bluetooth: hci6: command tx timeout [ 293.669255][ T30] ? __pfx__printk+0x10/0x10 [ 293.669286][ T30] ? __wake_up_klogd+0xcc/0x110 [ 293.669317][ T30] ? __pfx__printk+0x10/0x10 [ 293.669345][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 293.669380][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.669412][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 293.669452][ T30] watchdog+0xff4/0x1040 [ 293.669485][ T30] ? watchdog+0x1ea/0x1040 [ 293.669522][ T30] ? __pfx_watchdog+0x10/0x10 [ 293.669563][ T30] kthread+0x2f0/0x390 [ 293.669586][ T30] ? __pfx_watchdog+0x10/0x10 [ 293.669613][ T30] ? __pfx_kthread+0x10/0x10 [ 293.669636][ T30] ret_from_fork+0x4b/0x80 [ 293.669667][ T30] ? __pfx_kthread+0x10/0x10 [ 293.669690][ T30] ret_from_fork_asm+0x1a/0x30 [ 293.669738][ T30] [ 293.670308][ T30] Sending NMI from CPU 0 to CPUs 1: [ 293.758650][ C1] NMI backtrace for cpu 1 [ 293.758665][ C1] CPU: 1 UID: 0 PID: 8467 Comm: rm Not tainted 6.12.0-rc7-syzkaller #0 [ 293.758685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 293.758696][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xc3/0x120 [ 293.758726][ C1] Code: 8b 74 d6 10 65 8b 05 b4 f7 6e 7e 25 00 01 ff 00 74 11 3d 00 01 00 00 75 de 41 83 bb 1c 16 00 00 00 74 d4 41 8b 83 f8 15 00 00 <83> f8 03 75 c8 49 8b 8b 00 16 00 00 45 8b bb fc 15 00 00 49 c1 e7 [ 293.758742][ C1] RSP: 0018:ffffc90003cd72f0 EFLAGS: 00000246 [ 293.758759][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffffffff00 [ 293.758771][ C1] RDX: 0000000000000001 RSI: ffffffff9002b040 RDI: 0000000000000003 [ 293.758783][ C1] RBP: 1ffff9200079ae9b R08: 0000000000000005 R09: ffffffff8bb677c4 [ 293.758796][ C1] R10: 0000000000000004 R11: ffff88802fcb5a00 R12: ffffc90003cd74dd [ 293.758808][ C1] R13: ffff8880522f2e00 R14: 0000000000000001 R15: 0000000000000003 [ 293.758821][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 293.758836][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.758848][ C1] CR2: 00007ffc45cfaff8 CR3: 0000000032cac000 CR4: 00000000003526f0 [ 293.758865][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.758876][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.758888][ C1] Call Trace: [ 293.758894][ C1] [ 293.758901][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 293.758928][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 293.758955][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 293.758980][ C1] ? nmi_handle+0x2a/0x5a0 [ 293.759024][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 293.759048][ C1] ? nmi_handle+0x14f/0x5a0 [ 293.759066][ C1] ? nmi_handle+0x2a/0x5a0 [ 293.759085][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 293.759109][ C1] ? default_do_nmi+0x63/0x160 [ 293.759136][ C1] ? exc_nmi+0x123/0x1f0 [ 293.759162][ C1] ? end_repeat_nmi+0xf/0x53 [ 293.759185][ C1] ? mas_next_node+0x414/0xe00 [ 293.759211][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 293.759236][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 293.759261][ C1] ? __sanitizer_cov_trace_switch+0xc3/0x120 [ 293.759285][ C1] [ 293.759291][ C1] [ 293.759299][ C1] mas_next_node+0x414/0xe00 [ 293.759331][ C1] mt_validate+0x457c/0x4ac0 [ 293.759352][ C1] ? kasan_save_stack+0x3f/0x60 [ 293.759375][ C1] ? __kasan_record_aux_stack+0xac/0xc0 [ 293.759404][ C1] ? __pfx_mt_validate+0x10/0x10 [ 293.759435][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.759466][ C1] validate_mm+0xf5/0x550 [ 293.759492][ C1] ? call_rcu+0x731/0xa70 [ 293.759511][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 293.759535][ C1] ? __pfx_validate_mm+0x10/0x10 [ 293.759567][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 293.759589][ C1] vms_complete_munmap_vmas+0x6ec/0x8f0 [ 293.759631][ C1] mmap_region+0x10b5/0x23f0 [ 293.759667][ C1] ? __pfx_mmap_region+0x10/0x10 [ 293.759687][ C1] ? ima_free_modsig+0x4c/0x60 [ 293.759708][ C1] ? process_measurement+0x1aea/0x1fb0 [ 293.759756][ C1] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 293.759786][ C1] ? bpf_lsm_mmap_addr+0x9/0x10 [ 293.759803][ C1] ? security_mmap_addr+0x6f/0x250 [ 293.759832][ C1] do_mmap+0x8f0/0x1000 [ 293.759858][ C1] ? __pfx_do_mmap+0x10/0x10 [ 293.759879][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 293.759904][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 293.759933][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 293.759961][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 293.759984][ C1] ? __fget_files+0x29/0x470 [ 293.760011][ C1] ? __fget_files+0x3f3/0x470 [ 293.760035][ C1] ? __fget_files+0x29/0x470 [ 293.760064][ C1] ksys_mmap_pgoff+0x4eb/0x720 [ 293.760086][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 293.760105][ C1] do_syscall_64+0xf3/0x230 [ 293.760127][ C1] ? clear_bhb_loop+0x35/0x90 [ 293.760148][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.760168][ C1] RIP: 0033:0x7f66f08d1b74 [ 293.760183][ C1] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 293.760198][ C1] RSP: 002b:00007ffc45cfadf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 293.760216][ C1] RAX: ffffffffffffffda RBX: 00007ffc45cfae38 RCX: 00007f66f08d1b74 [ 293.760231][ C1] RDX: 0000000000000005 RSI: 0000000000088000 RDI: 00007f66f07fa000 [ 293.760243][ C1] RBP: 00007ffc45cfb160 R08: 0000000000000003 R09: 000000000000f000 [ 293.760255][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f66f08ae0c0 [ 293.760267][ C1] R13: 00007ffc45cfb1e8 R14: 000000000000ed80 R15: 0000000000000000 [ 293.760287][ C1] [ 293.760677][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 294.228742][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 294.237516][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 294.247573][ T30] Call Trace: [ 294.250855][ T30] [ 294.253788][ T30] dump_stack_lvl+0x241/0x360 [ 294.258482][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.263692][ T30] ? __pfx__printk+0x10/0x10 [ 294.268294][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 294.274292][ T30] ? vscnprintf+0x5d/0x90 [ 294.278636][ T30] panic+0x349/0x880 [ 294.282548][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 294.288741][ T30] ? __pfx_panic+0x10/0x10 [ 294.293171][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 294.298548][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 294.304712][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 294.310884][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 294.317053][ T30] watchdog+0x1033/0x1040 [ 294.321393][ T30] ? watchdog+0x1ea/0x1040 [ 294.325822][ T30] ? __pfx_watchdog+0x10/0x10 [ 294.330514][ T30] kthread+0x2f0/0x390 [ 294.334588][ T30] ? __pfx_watchdog+0x10/0x10 [ 294.339277][ T30] ? __pfx_kthread+0x10/0x10 [ 294.343872][ T30] ret_from_fork+0x4b/0x80 [ 294.348300][ T30] ? __pfx_kthread+0x10/0x10 [ 294.352897][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.357682][ T30] [ 294.361024][ T30] Kernel Offset: disabled [ 294.365377][ T30] Rebooting in 86400 seconds..