last executing test programs: 3m37.554591344s ago: executing program 2 (id=791): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x1a1142, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x690000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f00000007c0)="a2ac", 0x2}, {&(0x7f0000000d80)="11cbe7c5e9f0f07624743b568d33436edaa1b89f698e00b41238cf5874571b1424a5b795782b9316df50a0a066fc390e6819097eb0baee8bed9c5ca5debb0c8fae1046db8a993946c8c6c8880b5b8a0f43ab76358f6eafde23325c7bedfac879103494306f7f03b7bb3c40d8532e21d258738f217cc741fd7d2275def9c956ab7c8790636eac2760696836065db9a31776aea4b65a4e6e11b4f0190b38186b643f5381b9ab431d4c555956ab6d97b3244d568497f182bc62fe05e699d8b84e5b27163ced1b93b8087d9b5c2553be69658b5fdf36ebd8321bfd1aefa03e5f6322e4026a4d7800ecb65f7d0267f72b019977348b52428e341322cdf2e05f3d2e859659dc5baeb6dd61e79e165c79606f9d49058fba91bcab0a9c3ead1f74df9f0079b84918a59261c64c61d4b63e4cdc0f3e5f7176d65f433f75651ca5f1954cb5f2882cc56013850b63a1a681ef62c7251204c9908265107c4b9110bf8b72cf94770f6610c6faf9390b4c8663fec66cbc57bbc6aaff479e6dc329aaf35e0340a67ec6cc7c404d1f4648393ac4ded2af54437f550a41d6b419dc46383bfef3994b3570af76bac568a6c37cebe58d5a4c47c5dfaf228d7341efef8c3eb702f2ae8d3938e6e7f909b139b1b7fe9addc41024b8efc9cbddc5b62914a3c6bbad20779f82429fbf9ef9e8d98c9da788926d07d13234e01491080137cb1407527da267e2a55c0562079d0a2f9985a5d63f4b2a6b577b55bf9b387dc9f94bad94d27b3a875647a02acd4be0bacf68b041fab7c4eee08bf01b18354f44d23af842a71921fbda95d58d3be96ac1e18bdac89aa06cf29a809c11c60056a1a74a13c7d996a4d8f0facab38072dc35f086e79ef3cee0aa362fafd09ec7af0c72daa5fbbb1adb91620e503ed6935e7dbd64c911f09811a8bf88447d362fd80ce2a5de197fea625d658a5adfa37a1c7cdfa5ce43978803dcf7aba63ee469a48bd81ff8d8e056d35c7b590f1ea2912afd2c306491e524c40600c85a62af3b072e5c2796f76334708dab4852387805261f914ba924755037ee4d27f8f90e0d0b9dc9a6a9dfa0fed24625b3ed8c57ae54569021bf74ea30c6b4382af3f7e4c3ff09357f1f7d8f8ea75182946970525340fb64567001523ce1c6e6367d8b030066ded5be09eea15ddaa9f14bd9681b05ebaec1d4a2ef6ea8b2983065e8171c6ffd8c8fd36b3905c926034b76db4ac8a4613e40bea78d284834eede80b45b6f2c7d79739ea55c7d92cf5a627f485462008dfb6d4691e348972a19f0d385279d19d3d3e3da09bba73c4e0430ec4ea490bc3a3cae8827cd7c460f74622f1add45b3f7680df0645ab5671c7aec5dbc6d39dda3afd85f83f69f4d122a1741040f6540ffee26d624c39425cb43cccd449aafce81506797ec74ca1289b30d0152940e2c1e0366c987a7170e9c6c5efd9db2bf77b3ce1ab58b373aed459726d4d67b00999e44e3ced9c26798bdffed1e11ed0095fdb1c03319fd429fb35f414b604736087d559e2b111e21c9db640885f51b84ebd9f27b7c479b5ca82f0dddd25f6a701d3cb6c3c9261f91d58b57f536c7f0b4269e961234aaab8530347e7ea0357683466d5b8aed52790962cf8a367eab82a650e74de124e0a0134281afe6529a608ab1445f36668938fc699304afc561c01107dbb45fbda3a45c142fe884cdfd14a4e65de286c1500064211f006f2ce29b5021e9e8eff58f5728961152aa9b2d5b34e8ea158a7d5a3e117ade74396880daa3c4bebd52efe8155ca6ce8acc114a7bc987da64f546b16b5f2c6fef3e68e0f60f2ba8fea9350d1f301beb9318053b821c63028bee128d6c8d0d4ac1f135f2790c2a96ca754860bfe72b9fbec84780c02908c45ad9572b7c31b22d5ea89483d84c5d280ea0484f866e59b7298b017f04299088a298255ce79a2eef54c0ca5fb719c573ccd8833d1150588ac381e82dacb4b42fd31631b1393a2c82b712e81188cac341d2b1fbefa4b5eb29b6c0b30aae820c2ebc0bea1381fdeeec72fabfbbb66675600634d855f7e0ae01c36a97dd7d2f0e946a87cbf7a96d82177a5f6018c5b806259ea02d4f7949980ffe81238851c7ce9b5c8795520deaf7f074d2f3f0905bc1e4575c1b60a3d63b93ce48bf901ef47697a1975caa8f52aaaaff771ab5db3704c489ec1d142db26fa1d21e584526a90693b6ef0e8fc3864c96d8f0d5727560bf13daeb71092cb9a0386203f64458b90c19bca1990bf4e5b26f6c8c0de12f8faa582bf1c5ccf58fbb663b5ffa2891046b618ed828f067950ac6162628b43e7bdc5ea357245c96d5e0c6152897465f50b709579bb146a5a90d5778e192d62e42b266f007302ff3d9ed8bc302722f48904719e0fdc319106e904f313cb6cf8e9a5bffaa3952866f292dfbc9455a292bd3a22b24cf5bf8e6cd6b06f7f9328892a4cea5a79e32777cd9a200961b95d69b0b2661af8cf2a758dc1922467d2ca62ea2af1b7c80673566506ba7d6c76d547a42a0211bbee6535d0c693f4294a97fa126cf2af75f3b0006a381932fcc742f5ac295e64a4a3d1d784ed27011fe00f4964892ef83ac7f66b859989f41741d30a65e4ad59e5846b01aa7981572ca83d0e81c78c96bac8aae689bb33d3b7dd788abb7690f4d72a2312b22ffaaa4a340f037bdad6a0ac4e6472082809ede1b62aad0a17e684cb5e590eaa41fa1b84b1b10528ae7827e9ffb712dd049cc20bf6253ff36060c3f4832ad60a6074c3457864b7ca6b956ba284d4a886a26b9da33bbbaf81e23fe97cf963a219e1881bc94a41142f0476f04a70d6c483e582f87e027de3c46d4a2bcd9506bb1a85b59137e2d1da15f4cf812ab7b975c4305cfe3f987db283bd06b266793e833543cdea2968224baf0a3a655f413de340b0e2da9da7126afafba3ab2c356e46e89bbfbf38fe53ae760e73386789ab667115ed0f1348652bc64e3ef7619fe8c50b04a0c723464ae8c6843a231b9b8e986553a675d315aa1c45eb41a61c85719001246b2b45633b2c0af7cf2fb6b86d0e39ac4d1c8fde9669a3e51645a1853a9cd6c19588eb48dd70a8fb55953bebf124a8add81a4ae9073ca5ea3a42318abf056e040b5582da192e2aa8e32fe0514283c1b0c42ac2f801850e707482fe219b4df92303ce002e7f936d57dc656bb2c2c0f01652eaa53da0462fafa9e0ab6eeb2155696d0111ab65521efadc4a9ec0844459e341f5b86ae75aee9782cf6d5c48c06ed92370c99c91675843b7aa579ee0312604f0523fdc0aef75c1cc776b0ecfaaba0110526dc6303cb7e5561d9e53ad2be108a5117886680460ec297c0791ff3928034a44e1edbb5f46b7f5f6fdd4e64ddbc5721d4df88dff02c895e60170d15f5f0957dfb06b1fcc79389ac799cc85ebd82a6757f29858d745595c63d3988ff1fb60ad5cfc8f17faf2d2dd411d97e0c02660c5accace43436556553b19a6ed9b9e29f504c277e789042280e50adc6138c091e7c3230b64d4a4cb9dca5a1363f4a3bc6b0e5ec1fb7d5fd52110c1529393760310f5842adb79bb53dc97b3b4c17d12fa21d79c5642d8e497c783d06271c835f23b78f736eb68c28fced0ddb9969ea4cea6876e2d12a1b67403255431f4cf62ca76d6ac854c2359883d24a3bb40fa12be20c99c80e039f3fcb206f831c353903cf99e54ebaa04a9f20113b2950eb7b1a699dd044a608e09306d5423b117c369750179ed5f903f1c4d7a6c603c682b9199afab7570342d093d2df5373f54221031d3f586d2d61ab82ce3c6fd08136e7797e990564646cee5c891c3fd8eff0107e86fb0a551baee4921da4ed0f66cebc4d727e8e315a719c79f7960d6a83f52ff349fc81a7c943d6445c89d7a7c7c726d2bcd3d265e376fcc63fb5472b711ada0f0c8eaece53baf62662ac2a60bef7a650b8bfc3e51ab847510f90873b4d96a2afb146cc09392e8c31eda090e9f67dfcc4147ce4310550611b5afaf22104d585f78e9697f7fa211223b06f156ef8ffdf2769876f51c18b97b25ed98e7768c41006598c6074cc70fd99ddd6d75d36328cd0d3e1b49ba4dc8ff864cafd436e9589af39c5237eba55f159bffdaa06c71769c9ce5cb068eb6e882c3f7c20b506d9e2091ebef77705fb9fec5a49903f6da1e33309441bbb70f8e001e4a721a9a2404772ca95226ce5aa7bb1f349955fcb82704423d51ae50a0f1964f18c823c74438b136e475d17114b9d26d857ae1b8079e5c571450333a391d760f1d5269f058549cc483cfc57f357cc928c7defd02a91d0e4e4db579f4e02e824fb7386a86cc15db2aa856ca819500daca5c12af514077941fffd6e4b82ca70b4403e4e57fc82871b4047ac9b7e4f9d1bf7ff9b28614e114ba77383b7afd01f6434bc843ea82f5f1036c1ca1d095d41d47bda14da8e39f3b224d3", 0xc3f}], 0x2, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="11", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) 3m36.400623388s ago: executing program 2 (id=793): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xc3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa00000000000071101200000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x88800, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) syz_genetlink_get_family_id$wireguard(0x0, r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x42, 0x0, &(0x7f0000000700)=0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 3m35.3088545s ago: executing program 2 (id=796): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r2, 0x3) 3m33.964734484s ago: executing program 2 (id=803): prlimit64(0x0, 0x0, &(0x7f0000000040)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x31) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 3m31.990274306s ago: executing program 2 (id=805): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b//\\o/\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000001040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m15.099915797s ago: executing program 32 (id=806): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000001040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m59.889355004s ago: executing program 3 (id=1069): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00', {0xf8, 0x100, 0x8, 0x3}, 0x20, [0x8000003, 0x4, 0x80, 0x143b4048, 0x5, 0x7, 0xa, 0x3000000, 0xea1, 0x0, 0x589f, 0x1000, 0x1e, 0x81, 0x0, 0xffffff80, 0x1, 0x2, 0x1000, 0x3, 0x40000000, 0xfffffff9, 0x2, 0xc, 0x3, 0x394d, 0x9, 0x0, 0x5, 0x53987b9e, 0xc, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0xffffce2d, 0x2, 0x8, 0x5, 0x1004, 0x1, 0x81, 0xfffffff8, 0x4, 0x40, 0x7ff, 0x7c2c0bf, 0x5, 0x5, 0x3, 0x8001, 0x1, 0xc2000000, 0xa560, 0xfffff801, 0x8, 0xd809, 0x395, 0x9, 0x8, 0x1, 0x5], [0x76, 0x100, 0x1, 0x7, 0x0, 0x8e8, 0x5, 0xe, 0xfffffffe, 0xf, 0xb16, 0x2, 0x9061, 0x8, 0x8, 0x5, 0xb3f, 0x3, 0x7, 0x4c, 0xff, 0x4557, 0x1, 0x8, 0x7, 0x5d01, 0x5, 0x3, 0x7, 0x4, 0x5, 0x9114, 0x3, 0x7, 0xda0f, 0xac, 0x9, 0xc, 0x2, 0x400, 0x4, 0x2, 0x3, 0x8, 0xd, 0x8e6, 0x1, 0x7, 0x200, 0xd4a, 0x10, 0x8, 0xf1c, 0x8, 0x27, 0x6, 0x9, 0x5, 0x6, 0x8, 0x0, 0x1, 0x7f, 0x5], [0x1, 0x2, 0x9, 0x872d, 0xfffffffb, 0x75cb, 0x4b, 0x1000, 0x3, 0x1, 0x0, 0x4, 0x9, 0x3a7d, 0x3, 0x1000, 0x2, 0x7, 0x0, 0xfff, 0x22, 0x6, 0x7, 0x432c, 0x20000, 0xd, 0x3, 0x1020, 0x4, 0x2, 0x9, 0x100, 0x1, 0x5, 0x8001, 0x4, 0x1, 0x7f, 0xffff2840, 0x1e0000, 0x8000, 0x80000001, 0x5, 0x3, 0x3, 0x9, 0x4, 0x7, 0x7, 0x0, 0x1, 0x2, 0xd4b, 0x2a, 0x3, 0x9, 0x9, 0x22f, 0x7, 0x80, 0x400, 0x2, 0x3, 0x5], [0xef, 0x8000000, 0xfffffffe, 0x8001, 0x4da1, 0x4, 0x1000, 0x200, 0x7, 0x80, 0x8, 0x6, 0x3, 0x80000001, 0x4, 0x0, 0x10c5, 0x324, 0x0, 0x3, 0xcf, 0x8, 0x9, 0x3, 0x40009b33, 0x1, 0x2, 0x3b, 0x2, 0x37fe, 0xff6f, 0x9, 0x0, 0xc, 0x0, 0x3, 0x8, 0x3, 0x7ffffeff, 0x2, 0xff, 0x74, 0x8, 0xc3f, 0x4, 0x7, 0x9, 0x7ff, 0x7, 0x5, 0x4, 0x5, 0xdc, 0x8, 0x7ff, 0x6, 0x5, 0x9, 0x200000, 0x93e7, 0xad7, 0x2, 0x3, 0x1ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz1\x00', {0x3ff, 0x5, 0x0, 0x4}, 0x20, [0x8, 0x8, 0x7, 0x8e, 0x1e69, 0x3, 0x3, 0x10, 0x7f, 0x7d, 0xa, 0xffffffff, 0x7, 0x81, 0x4, 0xc, 0x9, 0x8, 0x9, 0x401, 0x3, 0x80, 0x10, 0x10000, 0x4ab, 0x200, 0x80bb, 0x3, 0x6, 0xfffffffb, 0x1002, 0x3, 0x6, 0x5, 0x20000007, 0x34, 0x7, 0x2, 0x3d4e23a4, 0x9, 0x5, 0x8, 0x9, 0x0, 0x73060f7a, 0xffffffff, 0x494f5a75, 0x2, 0x100, 0x93fc, 0x9, 0xa, 0xb, 0x7ff7ffff, 0x8, 0x2, 0x1000001, 0x20000000, 0x1, 0x2, 0x1, 0x2, 0x1, 0x8001], [0x433, 0xe, 0xfffffffe, 0x659, 0xffffffff, 0x6, 0x400401, 0x5, 0x101, 0x3, 0x8, 0x8, 0x6, 0x4a9, 0x6, 0x10000, 0x7f, 0x2, 0x99d0, 0x404, 0x200, 0x1, 0xa2e, 0x9, 0xffff95a0, 0x3, 0x4, 0x4, 0x0, 0xcb6, 0x6, 0x9, 0x9, 0x9, 0x7, 0x0, 0x4, 0x29800000, 0x6, 0xa, 0x23, 0xe756, 0xffff934e, 0x6, 0xc, 0x2d, 0x7, 0x45, 0x80, 0x4, 0x80, 0xa4c, 0xffffff0e, 0x1, 0x1000, 0xff, 0x67ac, 0x171680f8, 0x3, 0x6, 0x754b, 0x9, 0xffffffff, 0x5], [0x7a9, 0xfffffffe, 0x7fffffff, 0x2430, 0x220, 0x9, 0x7, 0xc0d, 0x5, 0x2b, 0xfff, 0x2, 0x7, 0x42b2, 0x4, 0x5, 0x4c, 0x7, 0x5, 0x101, 0x6, 0x4, 0x1, 0x101, 0x9, 0x1, 0x7f, 0x1, 0x3, 0xd0, 0x0, 0xfffffffa, 0x9, 0x8, 0x100, 0x6, 0x7, 0x1004, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x8, 0x3fd, 0x8, 0x80000001, 0xe29, 0x6, 0x7, 0x5, 0xe0000000, 0x101, 0x3, 0x5, 0xed4, 0xb, 0x9, 0x7, 0x9, 0xc, 0xc, 0x9, 0x4000000c], [0xfffff001, 0xc3c7, 0x3ff, 0x2, 0x2, 0x4, 0x6, 0x2, 0x5, 0x8, 0x3ff, 0x7, 0x5, 0x1, 0xe65, 0xe25, 0xffffb705, 0x8, 0x5db45c26, 0x80, 0xa14, 0x1, 0x80, 0xfbf, 0xf, 0x5, 0x4, 0x2, 0x3e5fc7b7, 0x20000002, 0x780, 0xc, 0x8, 0x9, 0x4b2, 0x101, 0x2, 0x7, 0x2, 0xa328, 0x7ff, 0x0, 0x8, 0x0, 0x7, 0xffffffff, 0x0, 0x8, 0x2, 0x70e8, 0x1, 0x3, 0x7, 0x2, 0x207, 0x3, 0x104, 0x0, 0x10000700, 0x2, 0x80, 0xf, 0xa]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m59.49418731s ago: executing program 3 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) (fail_nth: 5) 1m56.791030759s ago: executing program 3 (id=1075): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x712, 0x0, 0xfffffffffffffd25) 1m55.241899149s ago: executing program 3 (id=1080): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x2000000}) 1m50.686858633s ago: executing program 3 (id=1085): socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socketpair(0x29, 0x6, 0xa, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @loopback}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x9, 0x7fff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0xf800, 0x1ff, 0xc0000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x3, 0x7, 0x4a, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, 0x7800, 0x10, 0x8, 0x6}}) sendmsg$nl_route(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@RTM_NEWMDB={0x78, 0x54, 0x200, 0x70bd29, 0x25dfdbfb, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x0, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x3, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x4, 0x4, {@in6_addr=@local}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r13, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 1m48.80416852s ago: executing program 3 (id=1089): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000f0e8, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000680001002dbd7000000000800000000000000000100008800c00020090000400052809000c0010"], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000200)={0xa, 0x9}) (async) splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0) 1m32.366360144s ago: executing program 33 (id=1089): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000f0e8, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000680001002dbd7000000000800000000000000000100008800c00020090000400052809000c0010"], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000200)={0xa, 0x9}) (async) splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0) 30.980707444s ago: executing program 5 (id=1309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xc, &(0x7f00000001c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8000, 0x34f}, &(0x7f00000002c0), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$isdn_base(r5, &(0x7f0000000380)={0x22, 0x7, 0x4, 0x2, 0x7f}, 0x6) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000003080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) r7 = dup(r0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) 29.299018404s ago: executing program 5 (id=1315): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendto$inet6(r1, &(0x7f0000000400)="830b77a3e02d11cf560d377488c7dd5093cf12fd24998a40aea1ce0377d4e973e5af6f5c931d", 0xfdef, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000300)=""/19, 0x13, 0x40000041, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 26.641069738s ago: executing program 5 (id=1324): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x1a1142, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x690000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f00000007c0)="a2ac", 0x2}, {&(0x7f0000000d80)="11cbe7c5e9f0f07624743b568d33436edaa1b89f698e00b41238cf5874571b1424a5b795782b9316df50a0a066fc390e6819097eb0baee8bed9c5ca5debb0c8fae1046db8a993946c8c6c8880b5b8a0f43ab76358f6eafde23325c7bedfac879103494306f7f03b7bb3c40d8532e21d258738f217cc741fd7d2275def9c956ab7c8790636eac2760696836065db9a31776aea4b65a4e6e11b4f0190b38186b643f5381b9ab431d4c555956ab6d97b3244d568497f182bc62fe05e699d8b84e5b27163ced1b93b8087d9b5c2553be69658b5fdf36ebd8321bfd1aefa03e5f6322e4026a4d7800ecb65f7d0267f72b019977348b52428e341322cdf2e05f3d2e859659dc5baeb6dd61e79e165c79606f9d49058fba91bcab0a9c3ead1f74df9f0079b84918a59261c64c61d4b63e4cdc0f3e5f7176d65f433f75651ca5f1954cb5f2882cc56013850b63a1a681ef62c7251204c9908265107c4b9110bf8b72cf94770f6610c6faf9390b4c8663fec66cbc57bbc6aaff479e6dc329aaf35e0340a67ec6cc7c404d1f4648393ac4ded2af54437f550a41d6b419dc46383bfef3994b3570af76bac568a6c37cebe58d5a4c47c5dfaf228d7341efef8c3eb702f2ae8d3938e6e7f909b139b1b7fe9addc41024b8efc9cbddc5b62914a3c6bbad20779f82429fbf9ef9e8d98c9da788926d07d13234e01491080137cb1407527da267e2a55c0562079d0a2f9985a5d63f4b2a6b577b55bf9b387dc9f94bad94d27b3a875647a02acd4be0bacf68b041fab7c4eee08bf01b18354f44d23af842a71921fbda95d58d3be96ac1e18bdac89aa06cf29a809c11c60056a1a74a13c7d996a4d8f0facab38072dc35f086e79ef3cee0aa362fafd09ec7af0c72daa5fbbb1adb91620e503ed6935e7dbd64c911f09811a8bf88447d362fd80ce2a5de197fea625d658a5adfa37a1c7cdfa5ce43978803dcf7aba63ee469a48bd81ff8d8e056d35c7b590f1ea2912afd2c306491e524c40600c85a62af3b072e5c2796f76334708dab4852387805261f914ba924755037ee4d27f8f90e0d0b9dc9a6a9dfa0fed24625b3ed8c57ae54569021bf74ea30c6b4382af3f7e4c3ff09357f1f7d8f8ea75182946970525340fb64567001523ce1c6e6367d8b030066ded5be09eea15ddaa9f14bd9681b05ebaec1d4a2ef6ea8b2983065e8171c6ffd8c8fd36b3905c926034b76db4ac8a4613e40bea78d284834eede80b45b6f2c7d79739ea55c7d92cf5a627f485462008dfb6d4691e348972a19f0d385279d19d3d3e3da09bba73c4e0430ec4ea490bc3a3cae8827cd7c460f74622f1add45b3f7680df0645ab5671c7aec5dbc6d39dda3afd85f83f69f4d122a1741040f6540ffee26d624c39425cb43cccd449aafce81506797ec74ca1289b30d0152940e2c1e0366c987a7170e9c6c5efd9db2bf77b3ce1ab58b373aed459726d4d67b00999e44e3ced9c26798bdffed1e11ed0095fdb1c03319fd429fb35f414b604736087d559e2b111e21c9db640885f51b84ebd9f27b7c479b5ca82f0dddd25f6a701d3cb6c3c9261f91d58b57f536c7f0b4269e961234aaab8530347e7ea0357683466d5b8aed52790962cf8a367eab82a650e74de124e0a0134281afe6529a608ab1445f36668938fc699304afc561c01107dbb45fbda3a45c142fe884cdfd14a4e65de286c1500064211f006f2ce29b5021e9e8eff58f5728961152aa9b2d5b34e8ea158a7d5a3e117ade74396880daa3c4bebd52efe8155ca6ce8acc114a7bc987da64f546b16b5f2c6fef3e68e0f60f2ba8fea9350d1f301beb9318053b821c63028bee128d6c8d0d4ac1f135f2790c2a96ca754860bfe72b9fbec84780c02908c45ad9572b7c31b22d5ea89483d84c5d280ea0484f866e59b7298b017f04299088a298255ce79a2eef54c0ca5fb719c573ccd8833d1150588ac381e82dacb4b42fd31631b1393a2c82b712e81188cac341d2b1fbefa4b5eb29b6c0b30aae820c2ebc0bea1381fdeeec72fabfbbb66675600634d855f7e0ae01c36a97dd7d2f0e946a87cbf7a96d82177a5f6018c5b806259ea02d4f7949980ffe81238851c7ce9b5c8795520deaf7f074d2f3f0905bc1e4575c1b60a3d63b93ce48bf901ef47697a1975caa8f52aaaaff771ab5db3704c489ec1d142db26fa1d21e584526a90693b6ef0e8fc3864c96d8f0d5727560bf13daeb71092cb9a0386203f64458b90c19bca1990bf4e5b26f6c8c0de12f8faa582bf1c5ccf58fbb663b5ffa2891046b618ed828f067950ac6162628b43e7bdc5ea357245c96d5e0c6152897465f50b709579bb146a5a90d5778e192d62e42b266f007302ff3d9ed8bc302722f48904719e0fdc319106e904f313cb6cf8e9a5bffaa3952866f292dfbc9455a292bd3a22b24cf5bf8e6cd6b06f7f9328892a4cea5a79e32777cd9a200961b95d69b0b2661af8cf2a758dc1922467d2ca62ea2af1b7c80673566506ba7d6c76d547a42a0211bbee6535d0c693f4294a97fa126cf2af75f3b0006a381932fcc742f5ac295e64a4a3d1d784ed27011fe00f4964892ef83ac7f66b859989f41741d30a65e4ad59e5846b01aa7981572ca83d0e81c78c96bac8aae689bb33d3b7dd788abb7690f4d72a2312b22ffaaa4a340f037bdad6a0ac4e6472082809ede1b62aad0a17e684cb5e590eaa41fa1b84b1b10528ae7827e9ffb712dd049cc20bf6253ff36060c3f4832ad60a6074c3457864b7ca6b956ba284d4a886a26b9da33bbbaf81e23fe97cf963a219e1881bc94a41142f0476f04a70d6c483e582f87e027de3c46d4a2bcd9506bb1a85b59137e2d1da15f4cf812ab7b975c4305cfe3f987db283bd06b266793e833543cdea2968224baf0a3a655f413de340b0e2da9da7126afafba3ab2c356e46e89bbfbf38fe53ae760e73386789ab667115ed0f1348652bc64e3ef7619fe8c50b04a0c723464ae8c6843a231b9b8e986553a675d315aa1c45eb41a61c85719001246b2b45633b2c0af7cf2fb6b86d0e39ac4d1c8fde9669a3e51645a1853a9cd6c19588eb48dd70a8fb55953bebf124a8add81a4ae9073ca5ea3a42318abf056e040b5582da192e2aa8e32fe0514283c1b0c42ac2f801850e707482fe219b4df92303ce002e7f936d57dc656bb2c2c0f01652eaa53da0462fafa9e0ab6eeb2155696d0111ab65521efadc4a9ec0844459e341f5b86ae75aee9782cf6d5c48c06ed92370c99c91675843b7aa579ee0312604f0523fdc0aef75c1cc776b0ecfaaba0110526dc6303cb7e5561d9e53ad2be108a5117886680460ec297c0791ff3928034a44e1edbb5f46b7f5f6fdd4e64ddbc5721d4df88dff02c895e60170d15f5f0957dfb06b1fcc79389ac799cc85ebd82a6757f29858d745595c63d3988ff1fb60ad5cfc8f17faf2d2dd411d97e0c02660c5accace43436556553b19a6ed9b9e29f504c277e789042280e50adc6138c091e7c3230b64d4a4cb9dca5a1363f4a3bc6b0e5ec1fb7d5fd52110c1529393760310f5842adb79bb53dc97b3b4c17d12fa21d79c5642d8e497c783d06271c835f23b78f736eb68c28fced0ddb9969ea4cea6876e2d12a1b67403255431f4cf62ca76d6ac854c2359883d24a3bb40fa12be20c99c80e039f3fcb206f831c353903cf99e54ebaa04a9f20113b2950eb7b1a699dd044a608e09306d5423b117c369750179ed5f903f1c4d7a6c603c682b9199afab7570342d093d2df5373f54221031d3f586d2d61ab82ce3c6fd08136e7797e990564646cee5c891c3fd8eff0107e86fb0a551baee4921da4ed0f66cebc4d727e8e315a719c79f7960d6a83f52ff349fc81a7c943d6445c89d7a7c7c726d2bcd3d265e376fcc63fb5472b711ada0f0c8eaece53baf62662ac2a60bef7a650b8bfc3e51ab847510f90873b4d96a2afb146cc09392e8c31eda090e9f67dfcc4147ce4310550611b5afaf22104d585f78e9697f7fa211223b06f156ef8ffdf2769876f51c18b97b25ed98e7768c41006598c6074cc70fd99ddd6d75d36328cd0d3e1b49ba4dc8ff864cafd436e9589af39c5237eba55f159bffdaa06c71769c9ce5cb068eb6e882c3f7c20b506d9e2091ebef77705fb9fec5a49903f6da1e33309441bbb70f8e001e4a721a9a2404772ca95226ce5aa7bb1f349955fcb82704423d51ae50a0f1964f18c823c74438b136e475d17114b9d26d857ae1b8079e5c571450333a391d760f1d5269f058549cc483cfc57f357cc928c7defd02a91d0e4e4db579f4e02e824fb7386a86cc15db2aa856ca819500daca5c12af514077941fffd6e4b82ca70b4403e4e57fc82871b4047ac9b7e4f9d1bf7ff9b28614e114ba77383b7afd01f6434bc843ea82f5f1036c1ca1d095d41d47bda14da8e39f3b224d3", 0xc3f}], 0x2, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="11", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) 25.528008012s ago: executing program 5 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x28, 0x4, 0x0, 0x0, &(0x7f00000a0000)="4c4c4c4c4c4c4c4c4c4c4c4c0c4c4c4c5eb6ed6c48c9bb404c4c4c4c", 0x1c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x8, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xffe}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000c00)={0x18}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r2, 0x0, &(0x7f0000000300)="96", 0x1, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r2, 0x0, &(0x7f0000001000/0x1000)=nil, 0x1000, 0x400}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000000200)="cc", 0x1, 0x2}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r2, 0x0, &(0x7f0000000340)="ae", 0x1, 0x6f1a}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x2, r2, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10}) 25.070465051s ago: executing program 5 (id=1331): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b//\\o/\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000100000000000d89614e090df447c0000", @ANYRES32=r3, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000020000000100"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000005000000000000000400c410f8ff100000000cb000ddecf0bc009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd202baabeb92017ed64eb580cfd4c9acb82f85a304f216e0fe22ec4d0701f103257f92125e03b845d00"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000000), &(0x7f00000001c0)) write$char_usb(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000800)={0x0, 0xa0, "25c8b7b4f1206ffb24cee36916288f2fb1bdc885311cd4c0c44db1da812079cffc40971e4f0c82275194e4c1c4a122c7ea3023bcdac9c191fae94ca5b6274500792fcce2cb009aad67df3d80d816f6fa87b4a92d9ddad0787017aba287e4ae9eda87dff7746e035ee0c071f848f083c7327b24b560acc44a696ab946ba3e345d4d10e6b048f3e85f82b163ce27f9d3067d2b8a9dc118b3777969a74c05c4f053"}, &(0x7f0000000040)=0xa8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={r8, 0x8}, 0x8) mknod$loop(0x0, 0x6000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) 17.846534024s ago: executing program 1 (id=1352): syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0r1, {0x9}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x800}, 0x841) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x8, 0x7ffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 11.848645527s ago: executing program 1 (id=1362): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) open(0x0, 0x1a1142, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x690000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f00000007c0)="a2ac", 0x2}, {&(0x7f0000000d80)="11cbe7c5e9f0f07624743b568d33436edaa1b89f698e00b41238cf5874571b1424a5b795782b9316df50a0a066fc390e6819097eb0baee8bed9c5ca5debb0c8fae1046db8a993946c8c6c8880b5b8a0f43ab76358f6eafde23325c7bedfac879103494306f7f03b7bb3c40d8532e21d258738f217cc741fd7d2275def9c956ab7c8790636eac2760696836065db9a31776aea4b65a4e6e11b4f0190b38186b643f5381b9ab431d4c555956ab6d97b3244d568497f182bc62fe05e699d8b84e5b27163ced1b93b8087d9b5c2553be69658b5fdf36ebd8321bfd1aefa03e5f6322e4026a4d7800ecb65f7d0267f72b019977348b52428e341322cdf2e05f3d2e859659dc5baeb6dd61e79e165c79606f9d49058fba91bcab0a9c3ead1f74df9f0079b84918a59261c64c61d4b63e4cdc0f3e5f7176d65f433f75651ca5f1954cb5f2882cc56013850b63a1a681ef62c7251204c9908265107c4b9110bf8b72cf94770f6610c6faf9390b4c8663fec66cbc57bbc6aaff479e6dc329aaf35e0340a67ec6cc7c404d1f4648393ac4ded2af54437f550a41d6b419dc46383bfef3994b3570af76bac568a6c37cebe58d5a4c47c5dfaf228d7341efef8c3eb702f2ae8d3938e6e7f909b139b1b7fe9addc41024b8efc9cbddc5b62914a3c6bbad20779f82429fbf9ef9e8d98c9da788926d07d13234e01491080137cb1407527da267e2a55c0562079d0a2f9985a5d63f4b2a6b577b55bf9b387dc9f94bad94d27b3a875647a02acd4be0bacf68b041fab7c4eee08bf01b18354f44d23af842a71921fbda95d58d3be96ac1e18bdac89aa06cf29a809c11c60056a1a74a13c7d996a4d8f0facab38072dc35f086e79ef3cee0aa362fafd09ec7af0c72daa5fbbb1adb91620e503ed6935e7dbd64c911f09811a8bf88447d362fd80ce2a5de197fea625d658a5adfa37a1c7cdfa5ce43978803dcf7aba63ee469a48bd81ff8d8e056d35c7b590f1ea2912afd2c306491e524c40600c85a62af3b072e5c2796f76334708dab4852387805261f914ba924755037ee4d27f8f90e0d0b9dc9a6a9dfa0fed24625b3ed8c57ae54569021bf74ea30c6b4382af3f7e4c3ff09357f1f7d8f8ea75182946970525340fb64567001523ce1c6e6367d8b030066ded5be09eea15ddaa9f14bd9681b05ebaec1d4a2ef6ea8b2983065e8171c6ffd8c8fd36b3905c926034b76db4ac8a4613e40bea78d284834eede80b45b6f2c7d79739ea55c7d92cf5a627f485462008dfb6d4691e348972a19f0d385279d19d3d3e3da09bba73c4e0430ec4ea490bc3a3cae8827cd7c460f74622f1add45b3f7680df0645ab5671c7aec5dbc6d39dda3afd85f83f69f4d122a1741040f6540ffee26d624c39425cb43cccd449aafce81506797ec74ca1289b30d0152940e2c1e0366c987a7170e9c6c5efd9db2bf77b3ce1ab58b373aed459726d4d67b00999e44e3ced9c26798bdffed1e11ed0095fdb1c03319fd429fb35f414b604736087d559e2b111e21c9db640885f51b84ebd9f27b7c479b5ca82f0dddd25f6a701d3cb6c3c9261f91d58b57f536c7f0b4269e961234aaab8530347e7ea0357683466d5b8aed52790962cf8a367eab82a650e74de124e0a0134281afe6529a608ab1445f36668938fc699304afc561c01107dbb45fbda3a45c142fe884cdfd14a4e65de286c1500064211f006f2ce29b5021e9e8eff58f5728961152aa9b2d5b34e8ea158a7d5a3e117ade74396880daa3c4bebd52efe8155ca6ce8acc114a7bc987da64f546b16b5f2c6fef3e68e0f60f2ba8fea9350d1f301beb9318053b821c63028bee128d6c8d0d4ac1f135f2790c2a96ca754860bfe72b9fbec84780c02908c45ad9572b7c31b22d5ea89483d84c5d280ea0484f866e59b7298b017f04299088a298255ce79a2eef54c0ca5fb719c573ccd8833d1150588ac381e82dacb4b42fd31631b1393a2c82b712e81188cac341d2b1fbefa4b5eb29b6c0b30aae820c2ebc0bea1381fdeeec72fabfbbb66675600634d855f7e0ae01c36a97dd7d2f0e946a87cbf7a96d82177a5f6018c5b806259ea02d4f7949980ffe81238851c7ce9b5c8795520deaf7f074d2f3f0905bc1e4575c1b60a3d63b93ce48bf901ef47697a1975caa8f52aaaaff771ab5db3704c489ec1d142db26fa1d21e584526a90693b6ef0e8fc3864c96d8f0d5727560bf13daeb71092cb9a0386203f64458b90c19bca1990bf4e5b26f6c8c0de12f8faa582bf1c5ccf58fbb663b5ffa2891046b618ed828f067950ac6162628b43e7bdc5ea357245c96d5e0c6152897465f50b709579bb146a5a90d5778e192d62e42b266f007302ff3d9ed8bc302722f48904719e0fdc319106e904f313cb6cf8e9a5bffaa3952866f292dfbc9455a292bd3a22b24cf5bf8e6cd6b06f7f9328892a4cea5a79e32777cd9a200961b95d69b0b2661af8cf2a758dc1922467d2ca62ea2af1b7c80673566506ba7d6c76d547a42a0211bbee6535d0c693f4294a97fa126cf2af75f3b0006a381932fcc742f5ac295e64a4a3d1d784ed27011fe00f4964892ef83ac7f66b859989f41741d30a65e4ad59e5846b01aa7981572ca83d0e81c78c96bac8aae689bb33d3b7dd788abb7690f4d72a2312b22ffaaa4a340f037bdad6a0ac4e6472082809ede1b62aad0a17e684cb5e590eaa41fa1b84b1b10528ae7827e9ffb712dd049cc20bf6253ff36060c3f4832ad60a6074c3457864b7ca6b956ba284d4a886a26b9da33bbbaf81e23fe97cf963a219e1881bc94a41142f0476f04a70d6c483e582f87e027de3c46d4a2bcd9506bb1a85b59137e2d1da15f4cf812ab7b975c4305cfe3f987db283bd06b266793e833543cdea2968224baf0a3a655f413de340b0e2da9da7126afafba3ab2c356e46e89bbfbf38fe53ae760e73386789ab667115ed0f1348652bc64e3ef7619fe8c50b04a0c723464ae8c6843a231b9b8e986553a675d315aa1c45eb41a61c85719001246b2b45633b2c0af7cf2fb6b86d0e39ac4d1c8fde9669a3e51645a1853a9cd6c19588eb48dd70a8fb55953bebf124a8add81a4ae9073ca5ea3a42318abf056e040b5582da192e2aa8e32fe0514283c1b0c42ac2f801850e707482fe219b4df92303ce002e7f936d57dc656bb2c2c0f01652eaa53da0462fafa9e0ab6eeb2155696d0111ab65521efadc4a9ec0844459e341f5b86ae75aee9782cf6d5c48c06ed92370c99c91675843b7aa579ee0312604f0523fdc0aef75c1cc776b0ecfaaba0110526dc6303cb7e5561d9e53ad2be108a5117886680460ec297c0791ff3928034a44e1edbb5f46b7f5f6fdd4e64ddbc5721d4df88dff02c895e60170d15f5f0957dfb06b1fcc79389ac799cc85ebd82a6757f29858d745595c63d3988ff1fb60ad5cfc8f17faf2d2dd411d97e0c02660c5accace43436556553b19a6ed9b9e29f504c277e789042280e50adc6138c091e7c3230b64d4a4cb9dca5a1363f4a3bc6b0e5ec1fb7d5fd52110c1529393760310f5842adb79bb53dc97b3b4c17d12fa21d79c5642d8e497c783d06271c835f23b78f736eb68c28fced0ddb9969ea4cea6876e2d12a1b67403255431f4cf62ca76d6ac854c2359883d24a3bb40fa12be20c99c80e039f3fcb206f831c353903cf99e54ebaa04a9f20113b2950eb7b1a699dd044a608e09306d5423b117c369750179ed5f903f1c4d7a6c603c682b9199afab7570342d093d2df5373f54221031d3f586d2d61ab82ce3c6fd08136e7797e990564646cee5c891c3fd8eff0107e86fb0a551baee4921da4ed0f66cebc4d727e8e315a719c79f7960d6a83f52ff349fc81a7c943d6445c89d7a7c7c726d2bcd3d265e376fcc63fb5472b711ada0f0c8eaece53baf62662ac2a60bef7a650b8bfc3e51ab847510f90873b4d96a2afb146cc09392e8c31eda090e9f67dfcc4147ce4310550611b5afaf22104d585f78e9697f7fa211223b06f156ef8ffdf2769876f51c18b97b25ed98e7768c41006598c6074cc70fd99ddd6d75d36328cd0d3e1b49ba4dc8ff864cafd436e9589af39c5237eba55f159bffdaa06c71769c9ce5cb068eb6e882c3f7c20b506d9e2091ebef77705fb9fec5a49903f6da1e33309441bbb70f8e001e4a721a9a2404772ca95226ce5aa7bb1f349955fcb82704423d51ae50a0f1964f18c823c74438b136e475d17114b9d26d857ae1b8079e5c571450333a391d760f1d5269f058549cc483cfc57f357cc928c7defd02a91d0e4e4db579f4e02e824fb7386a86cc15db2aa856ca819500daca5c12af514077941fffd6e4b82ca70b4403e4e57fc82871b4047ac9b7e4f9d1bf7ff9b28614e114ba77383b7afd01f6434bc843ea82f5f1036c1ca1d095d41d47bda14da8e39f3b224d3", 0xc3f}], 0x2, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="11", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) 9.812299984s ago: executing program 1 (id=1364): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x1b, 0x11, 0x200, &(0x7f0000000880)="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"}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, &(0x7f00000002c0)=0x800084, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x47) pipe2$9p(&(0x7f0000000240), 0x0) 9.555476115s ago: executing program 4 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x431, 0x70bd24, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x4) pwritev2(r2, &(0x7f0000005540)=[{&(0x7f0000000cc0)="1e4b1b54cb712a8f08ff508ed21b65ebb8940529c1fcd5e2b720b2a3ff6d310b38fdcb55f36300263faa362b01dd933eb2223b75938f7f1514d649b8edb57deaaa57673e44f5c07950c37260bbec965adf74c05fa33d498ec6aa3ab67900fee99aa821a440e1e9a09457409b2812b779fb955567225bdb082a4c581fac7074e692831b835777e835c71173d9c16690749555584a7f80", 0x96}, {&(0x7f0000000d80)="c420f23b2fa636f794d931cac254f584d9f8dcf2e7c1df575d12b8d3fcc4bb29590cc1b27c6e068301bcf18f48e39d06b017deca8fc4add15b21d6d8e9adbe339e572d5dcb085c68fd675007960b3267b4f399bb8e1a9ee648f04183de6cfc8494c2f97480748311b3c0b14ca4313f489240e33fca9f3e8d80bc3d2c02179b5a622504196d2df2909db3b6e4d0f60d47bb1329c6339f9617ebf455ae65149e2bfae93b3a15add4601aa5d2aa181c69256912702483ca473c7d6ab2a5309d478aefd2f8e409b5cdd273b990201f33f421d563fbe9fdf7c163db91a49d3107f66e1d74562fc4f52cec7ae3e329f5034a42cc", 0xf1}, {&(0x7f0000005340)="8141634a1e32cc50a7940f3ffbd2bc6879a5c2abb28f5347c11e692c19581df7e949195e4bd423fd844a623c0e70bd235fa22408e2e26a80dfe0f640683d2edfd0642999dd711a93cc24408fae50075d86d6e091689cd33f996b229dbfdb12f62b1b3adc9d24f0c287922fb7a445175bb91827f07cf4c6d0025b7bb1565638c91bbbbedc50d8a5209744dbe8766a24a0c440fcd4251e4ba52225d118faa8829017d211691cc86425cbc03c92db3587fe56c968aa5ea9fcbf4b1bdf91d8ead6dc42fd2cb2", 0xc4}, {&(0x7f0000005440)="9eb78f37e71b61e245411ae99258d13624d0c0a546da7da41449f46e62d79c7a8df502eb14d47963681b0830be2f3185079e5747a0a5487534c203a84e28f07673a80b17208c85eac4426cebbab15d76c11121e4d2b15c8da9fed484366c123390914fe41466cfd11df5d2e4c17fef1504e725deba7ca999d0dbd99dba5e4a05c65be80a429987e99e53b7f7acb561c9917b01ec510288116eedfa6c35e9b21c545b095de6beb216429c6113ceb5ceeeb2177c1708af8138fe1d9970850234c7c294bd85d4be1709b538223ec0984268ee03354b8bff5435b364721158f5fb", 0xdf}, {&(0x7f0000000e80)="e1596f6f27054d99743a0ed16dcffb30fd28f08575f01618f4b0b19aa02ddb2b47a07453d25f5751c60fe073a8f283cff7d8ca27ffa1ace480a8694e95fd393b6b1b086cdf9611423b850b158d814a830349", 0x52}], 0x5, 0x20bf, 0x6, 0x0) sendmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @empty, 0x1}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="122dfbb4a1dab1c881039734047064cd33117a6598712533248cdc127ccbd819e18883c6b98ebbb893d6679a536e39f620c4efcef29127aa05c0ac3023bae6239bbf5896442cf25ea72cec0660aa8cccd2efce8a0e0e1966e0b0567294eabf2522830594c99eb52e641eca067ea0c35a8e1eb01f25d4c76be17a59ebb34038db912daaf7d5424df4beceb39a2cf9", 0x8e}, {&(0x7f0000000280)="e7572440f3d786c2dc4e96bc19c67453f17bbe692bb0d80460df97032a16f66329114a1c685cb4df7a604db1c4641b445dc934df856dc2997f09a0816103f0649915c57b5b1fb955d95e11e20361e0539c1252dcc13fe283ba21ba86c6b422c99ed3031d886b3c52155c10b51d450de28d7161d8321841bd610b568e8b9eec528068d1140eac9e168dc43ba256c521917265fc0eabad446e90e10c60beddb72356a17157d15d74c64a2b27502e6bb6ea17d214eab757d467aeb53d0e9325bbb8a3f2e9dd9e007033c85e", 0xca}, {&(0x7f00000003c0)="0a4ff00989b3fc02b8262ccf4efb0ce310bf9807bb6be701e5f7867cf7bc6314526e05ddb6aae633a9a05bed24d50b4b1e1c8589bfc59f5064ad7940b4521aa39a973bf69b2f", 0x46}, {&(0x7f0000000080)}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000000440)="b5d2e83f2252e0b1fa472a4139982f2c68cd0de3578a3536ee9456a0267759c33e1ee3043832abb41bf80c406bf65614c492c46b302a7b2b4b33b5cc4937e05029", 0x41}, {&(0x7f00000004c0)="8b917ee3462dc6c753148d6582c601ab17eb6afc7e9916112854e9bab135ba63973cdfddef6b2c10c109bea3e9142f8fddd0cfa70d4ffc1b1b4983576d8257f2b1f6138748eac398ed6bcc117bac6cbc74be10fbbae642602b5242b98528177c6ca69b2a34fa88baf7c6290cf4e101087b977f4feb95cb11167cb93a2d4cf97457cbfb32d1aa1646c8093779cee6456520e341e18fd9e2512a8cdc13be99b0ce0f72ea6e1e01299b676800becb736e57b706c25bdf58acc5e80a47d0d6efc8d492bf95b0", 0xc4}, {&(0x7f0000000200)="ad7946f65e47e9c3b3d59c0cc37237837903af3321cc0b69bb65a0e6e18798e98f984201af5f242219b560239d", 0x2d}], 0x8, &(0x7f0000002f40)=[{0x1010, 0x119, 0x5, "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"}, {0x18, 0xc8363f5fd41418d5, 0xb, "5b2ade097d8f4f19"}, {0xe0, 0x108, 0x6, "e313fa624a29529e9e89e4e4a9e95134abf774be7e56897d3b1e35e15a23050d4b471492dd410fababff92e8ceed06f80167ad8d6f7301f17659456e06ab86b5a5ad5a1011e1f862e35ac4d5ddc586b8789c66467bf9364ee575d2f6c2160c93b52d5dd1d2bdd7fce586539cd01e385db3b03011d4795b1965357c2de66799e3238cb9f0aa618b58ee7b448bb297968e34facd4a21408fc77a10b27c742701c05fedb7eb7a17ad53f64c136c89cb4e152e98824a009231eaa1f3c48b5da01c5c49415ceb336150c94eeb71dc"}], 0x1108}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)="c3823686a2f4dc63c4ae0492e515ef7c25461ccdca0f53bd3f369e6cfa242fece7848ef387947f9369a9bd60f0747dcfd03b5e85a07a638dc68c8c290e3e3c90c9fa71eb3dca1663ee49a908dafb41069fb3cabd322c10823e073439e356027d0f5694364013f2a1c1aca489a220d1b211db70", 0x73}, {&(0x7f00000006c0)="8cdaf57692c2776d21be4f0b4163aa440f874eb94a2859913fbe3e1eb412932d7943a35134939f464f908ef057622cb4b270b4e78edaa605a5e30ffc3c7c5930b7caf2f330", 0x45}, {&(0x7f0000000740)="1cfc65ce0c79160bbc949b17752a538a388e3524523368d8179cc5568159e8659a00a22ae74281e887caea21a8f3f8e7543f7d070916cc656c7d88ebd4cce03ab4c37f558ce5f39c104d81fe33f1ce9f51ffe9fe76787b8690336ef352aa1f4d", 0x60}, {&(0x7f00000007c0)="1330b3e4545528088976b182ba821e5db9092a989733bbea4d269435251bb36a05b2591f0e05367a3b0a6b29bb3f3bd081c41d526accf5514708275fff69adea87d88d2ce367dd3a879d6d5deb7852056efac16e3ff6d93f23b5ffb3802a4f4161f4b7e442575aa15bd52b8f5b801c209934940149cdf46cf7a39c5d0488b37cbd753d8fcf4caf24fd7439a1eb8e63226c32670dd7b4455982d594d3a86c53717f6f3d6ecf89fc38f99fb780890d770c76b004dcf966806978ddfce3cc269fd5b11d88824e4dea92876d8ded9d93f7d274e7be3f666edb67ba3fe051ac97855151816430329be9ab6f53", 0xea}], 0x4}}, {{&(0x7f0000000900)=@isdn={0x22, 0xc, 0x81, 0x40, 0x4}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="6b7f3bec8b652bde06daa069959155c4c7b05304685e4c3b14398bf84648ed43f17f66779f9d6702236efa761353613e45182e02be070867112fcd90a455d9ed3d4f7c8ef40655a29c7fa1a713d8f498918dd760", 0x54}, {&(0x7f0000000a00)="8156edd26082fd84a574314ffa8aa0e6943248d01de62e85e369cbec4a179185725f17acbc3d16007d979e0b2867467ba8699f518ab75936588fa3689dbab7a3727a007875f1fd0b77b4a45a7d2ee2a7f083faaa7f73cbbc1624a2475d834eda5a", 0x61}], 0x2, &(0x7f0000004080)=[{0xd0, 0x112, 0x6, "89c3b1b6fb91f03bc61a0cd33c2d21e829d71372f2d622c3f595e6e6f78fa7818dceda95e7fc8edcdb3a37cdcc002b3cbfa3cd23fa75b36d4f5fe953b891cf439c3da6dd57925b99303c02b90580dd1672a7acc68ea58a8b3d854dac1bf0d00b717419a081b714e41a14ce7da642e5cc2c835a9f33bc7c75464430dd96181700347f84eda2623b83f600f93b71f066a224b93af7f1a8a930898a765213ab3419e1bef9198aa8bdada991bacb8fe4ba003cf906a3377e4a59f199ae9ea806"}, {0x18, 0x6, 0x8, 'F=`'}, {0x1010, 0x104, 0x3ff, "944308f66e0cb57911b271d9b899a6fdbff8dff49cde23998b33db554bda48f74b72a5bf68f7b7e2dba316e0edacdc50fe3b16d6062233c7538002abb6eeb000bbf862a0508d1a91e5eb263730a59889688e524a0026f0cb3caa1fe435887b93bbc0db430da2ecc37fc6897adf2c4a4b42b67a5767816025c0f42b4124e306be2aa04cfd5252fe31e713356a0c44ca1ed7f944a142218dd6a54b3c6a62833788c4d34314f5108344c23cb88995b00b0fc43277b662223e3abe7984e4121e9e4b6b79765d7bcccd02c014975b3d3b854e5127a5181492651cd233a482ef059aec833932078357673f1c759eae929dba2fdec7ccaac4c4d443c107aabcb153dd337aaff98f40fb06e270262c78906507ed58211a68cd026d37d0ff85d15bb51e4c71f048d97e3cc5b8ccd303f83c79602b61175eefd6fa7c2a41f34fd31e03ac5ae89d463f3e4d9ddb30f2d28d620f2508905f61ff5b08318d0ce5639c292db0103e0de9d079e3cde14f37549e57014492b75e0838c65b7c470d6c483eb493cd81d96540df16f14511dcbb861c7debfd139266ce6ee67c2912a3d9ea582d01d9b104ce89eb22cfef676b8c48ca473ebe6e5690d46f51b5b35068bcb26bf6e40ff4637cc447f9ff60e518150ce07e425ba10570f95474ee737ac84eba21e67ac1d3fa6d18752485077ebd54ebb86709196969297b17d4afdbc2de50321b23d9e2ea0c75e0e4abf9435831646ae63fa753d76eeca0603164b440da61ced6a81aef7e406bcc4f82aec067505aa8427e0547d81801d502d9bb35cc5b03524e522d120fca091d1bbbb2aa55076d004dd764410dd7e9e93cef7e204567026f5fa0b7d6b94b9855cf0b108242407dbe1c35d02a70081d0185af9d7c59142a8c9f79a0f98f055d1d70307e3e58ea234c35ea91e4cbbdef3c470249b89892de673c0a2debb90bf4071efc000e0efdca111afdc68b413f57198a12139a2b128a707e52c3d17a2e31d4e1123e793317f2379198403052aaded42cc9592420da435630c384008541526d4ca6721f5b8dfeb9c766b19898cc3e0e5a97b15caccaf9bf4d3c9e92dd3dad3e712758f49dfe97d9c8cb2ee9a61d842b4207e93301d2b5487c05def3bf50e54a1b2cff67745471bd0c122d6940a5e584e0e2e8ca939bf4dd974719f1ca124a09585a41fa5241fab2e5eb0d5cf1d697b4e2df8ff66c5db229b1a1b598bbbcd0782a37f561916b947a00c4a7a52eda660123d279475242c54f1ad1541c9c6150f77fc17455482c1823c819d9cb5aa7634df46bada9804b3af76b3997ebcc69042e7a94a025e98b656cc94b2f357b186cf362272d8e1af461663a48aed6ca4e2927926de0f5ea636629c880975689d8366a9b3d8f85869f5f30ec2565c209b7ebbeea1d0e6b00dc6060d31bc09892ec10c053c8d084c3347856e7c940629c67552a312a8719c83812c4068cfb0ce86e111d8f26dba85c5ab003cfaddb234c22e2cb254167cf4b17de95c6bf607ff82f4a39be0aa07930c30f93a386d40064adbe5ba866e96788e786ad44a161835bf48d61dd083503d9a27415d6becef86867b67c5fdc23e727d0c7986959f58d07a75c30aa8eec353bf23a6b221bb325e59aa6b584d193e197acea07cd1f182c349e3653d13bf740b14c7f6675f52be89663c47f08a61602b1ed4b88ced07aa4c2b552401ef8b5e68cebfac40c8122e981146e3cff73a970ce98b37d9c0a721fdee84faed630e9390a14ef05a26879275be7f6a79b1a7be76faaec951b7d09317ff9f432c134d6a6fedf439c6a01067aa487f42ebd54d6df828d469254ad5481a2f480df3d45c4b22b52a99117ca5e753b1a42f32fcd9f0fc04f91429b10dd2ece2bf70e947f6687a98f6d0e594bc0e6c14a9d96df312afb072e7cd6f9541e6dcda2bc19f259c2963182a7d4e9e2343ec00933fe8935fcd202707c3ce104a77415ed93f983490f24b9dd19449d474cb4ddecf1785daaf6618aacaf467d5084f4cbcb1e87976d9c267d8c89824fe711e33f7ea78ead12354a82abff645282521dbf2d18a75f979c83606316fd2984683661932e7c77145946512065fb88b42750c3e715910f79bafbb293e7ce4ef0270f802fdfcf704b8532662238b81f7c34d3cebf34ea1348c3fb32aaa158ceb369d69a83286ec76159bf31634c0de89a378193117a5756eae3f1d3e3f380da02841fd0cb1b134d1d3aaf16917c7111ae20e84d7185de30bf5226af20807d6701d2e7e6b9e9e12ca3ea67630aef412a19e453d2d10bf15fb0b6ed307f84649f39b7bbd423cded437a728acf4446ae61e4ef1cacd226c22565de592cb3734be9bd28f497f8b9b83aea185b3b9773e003fec644e42826b083fd2326249a3f53cd5151e8a28a26c6ed80d4250e0439cd24b16a6cd8cce08597e2160fecf6c0d522207bbb8476a97884827fc45327fc7f561f1170debec4d80b634a94398c8b88163cda0cea6a9c9a63a25a52a79d9bb5ed671d5cadb682b00b688c367fe589aeae4a65ca37933e3d902a4a75e87d32702849582c8bedc347677d47e6ab2c27588e0a83b896014d7acaff5bb18986618f8b4d216307207af243365744c305971fd98ad57bcf431920f8aca6c2d09cb59cfb713252e1daecaa160249e847a6a75942309488dac600c846368f387b7612d811f4bb59af55030a32082c9ddd78d55d78bf592a37efc5568fc5759fa9bef50e5cc6ebf61f8e074e37a172c2eaa9a6cc2cc4e5878f81bf06e1adf92b54a17039a7ebbf1f8b5ea31920b01606a7b6d923b058ef2a760bcb6abb94b5187f6832a1d9ca9591a8186f2dc193a738a16d6c9ac6a3d3ef5dd037228201c5d541e9d309d89b31a5d708f1330700c9d7de3020eb9cff4a5cdb554530c240b20fe17e4adc30006724f84f3b9ed42dadaad9ff7b5cf5917fb9bfb9693b5bc0c399071128b00db55b469fab935df385fa0d457054b080b35ca192e6f0ea3dc969bd67fcbeb69c0d5ea33a042d2c68bca8d86c72f4844f6447cdd50a49b40c70c27b4c93b390f479b2279a551e56b22927631c6ff7eddb96138b25cb6950286cb7432f5aeae70c98a7a79cbccdf615e2eb24bf293c5d102eaed1b0097033f12208d5ccd9ebd0e61017b7589a731eb6979b29abd90510735ea79442594ce693923be54bed643a079f759cfd9dcdf0d099eee2ccf3b41b5f01be2c8961d0aa17daefe3d0154d70998de7b7178380ba1fa628e96f813ca05b2a84d32ffecedfb4dc25d8dc17fe449c066c2328bcdadc13d9509f05a2536dfdacbbec9ba2c7bf2154f101d2d57fd17b06015d788492759fa655fd2693993fece7c245b13c46f6ff4dd7a2abe02642179d0f0a581596fb53caffe9a3f0aa6c0101d895367941be56b33190569fe31ccea790d2ba9951b03154566da773ec429b77324828e8cfe8550ddab0e97efe823bfdf91aac9fbead877fb17b48c779c471e11477ebb5ddc6a3bca4bcc175c537ce42818fac9db386353a0b4f7c73332d017a99f17e5962b95545d0169fbdb217052eb857e946647eeec030185e204bdcf961caac8cc2f35db5453897a1c10210e24af8ddbb90af084b899cd98c76e17a347e157639d789626818d17d8ae0bae48c1a490f31d318ee8fcbe2cc8eb53bae9c8c31e22ef4279570c9f2d00738442d37923d63040acf8953c88c936e3f6f45744ff55e2dafa61577647b97e6f99d72da1e8d994da2704df6c825b5d2cbccc24162faeb5f9d46593c05d9e167eeccdb6c6926d0e5711816eb045e0a90d1fbd8ae4d61508c24d5ad71f5ee5e7ed023f9f8f6bed2f4bb45c26d501b20213e2e7f35989f8c009c8afb76f13d1877067d15d1cf854f7b18e245824b94112eb5f9159c15105799f551c0f6f8b657e2300327a7b4a134469caf15e37ca8ed8697ab8ead18badd2253968ceba603607249085775a00966685ab9093fa06af8c1dd1e123f901ca8e72bc4a02a545f69b37747c78a4b356e11acf63ffa04427d5690f12e4334af8b687eb9ac81cab12dbaf2ef424e11292e7ffce4f72f5eabbec3bc54a32ff5bfc6c4d5b5e66342ab5da8bcaf08d35c060de2ae6ac6bc9f4eeb18229af89c5ef1bc981c8125291ba102cdd10f68c9ae8523a83a7959328ca4df84ba5bca872755c172ad31396add0531e00fa376dfb0abd9d51f9a7453c6f214f1180f10e0ba3b6f0e3bb2441044f2c6014781451d45a2f7a19797ddc676dae10921737f17aa65bbc9bcd739f8b3dcebb012d2c7bc2de8cbf0eba683154d655dcacf739e9fdafcca1c16850523be2d926b8419e68ba633667de0001e0c9d214c27ec0d79398a17f41c45205cc5e45d2c6d8615ec55c020c9469bb2fadb35a4dbdce6a54842243cb4c773664b85ca1be23b09a8f65cfb8b98d1cdfca86cb2e3104e06cfe8a419bdb5f17359993d68f64c7fc5cd37ee27d37a5774dd0170001c38d48936e387e8d340e56b10d3de8d1dd9cbd3072613e56e238fb00a11f00ce82fb70880acf5fb90b417cfcfea22245cac18c9e7925cc48a5acc41368401f77074704f5517c5d40fd9897b3411d8ce5ed80e8e8aea2f6d5488127f88a80d36fac592cd0ac3a817310294e8f1d3e39f5841cfd6fddfe83d7a4a2de1d2c33d57be6cbdabea81151e7d74f0c598177803abe42deec86b945eacf18661d9f3553ede4fd199044f7e2a33340207dc760f49b59953a402de49bed9930dff8ba2a75af68be1679bb1026517b9bf975ba8f2918c870ce00d4dfce4588351778849c82eb8a179e697550e17d9aeeb6859e84f70125659565d4489ad802610ab7c993aa860b72a9ed70cc80bd0baa61c140755cf69cfb01b51c12fbc56e4eddbaa0ad8200b7469bc014a5ac271d7a1495c8cdba13aa221a64bcfbe1e2a0fb0fbc7ff48cee21f686c6d17881c8a4f2f81289ac6ad54183120582874cce2f187f442f0b127ba76fba8872748202aeca494a4b2c4ae38c896a136d4712d3ad93c0d412360877edcfc2ba084063effecf75e1a3ca042889e7b6022c931c0f753938a3aebde6a179cfc3dffa926d0ceba2c39a6ea384705df9753df21942121d5cb9ae5a3ede92bbebbc6231988ae79a34fe43884568445a79eb42f58dfea3008a5651b70f558ef57567f7fad27f9ae759ad77cab07f6c0232692cd22fc417d578fec86668571bd394266d097cfa1a19c6c3008427e97d4ce3d3f8b2dcde8d416555816f03dfaab46b5566393e66b711e5853262fd5f303467d11b35e46e55b43a49ef2c93ebfb289a9f08fefe87cd31c82099505673f1b62e535a45b3e5b97e2c30d83989ae2e528a26703df11470cc75c97c8207ece00854a02ce9a0cb744ba9dafa594bfaddef0d1164e2bcf01e151a80cf76448bc3496a6e4bdfd489198cb2e2de21b3311b7f9eed078e79e409981cec89c13ba3c43262b87272e177a59e039b5e1b421320c97aca2168738c623b5bdbc6ec842452bfa95b8a50c5703f8a78422a775db14f00252883545765c5f20ce3d7c9373a13c1d461eeb140cd3eb35d673cad1eae64592bd2ae24c4d2f75805e6c6396b03b0a10de45451a55a834ae9bf8d3b09c7423b635d9f18d92e5a294aeb1010981c981b726c3a360773fefc395e09dee5d8d957c2c1567c1751f9447abfe86413a50150be00635199d68a2e3c7ffa3cfadc8f64501bd426c670f163dfed814d86804b19544f329329c682cfaa207a2a041894269424c4d295d7e8ee504f93b8136f950ff961ce50c49fa11914d6f0c40322bdc9d0313fb4619d3e1c84d"}, {0x110, 0x6, 0x8, "ecb48132217611b84e3a74b33eceb2ae704f4167fe74dd68a66259fba339e27688b5739f60c3ffe0ce50c1222725353cac4a56eff0059e5f48b864b36b63755266056eb0f3ab08285afe8b3d395a46c811e4da8e186e7d5e0219f0c5dde59c4c766d6e05411b440f5080dbf9c6d7025ecec9cf4b8493d37c2934e21bc16a6532d178c3ee47f9c921f6617121d737a670cb5a26b48a9a118ca5e41eb1bb0efa376403f376233332640cb2f78a5871b09d04bb3f050f14cf412167829634858cea10553c266b9515c952d3134a67eca887109e0e86844dc937779445cfc07bf6aa930fb8c13384f6c37a40e882f9f0260cce881d16939be27473"}, {0xb8, 0x84, 0x6c, "d5d1ef638caeb0cc501d260a33c1498eb83e32371c3afafd419d4dbb2793fc04ad19722754404accba880e468996c5476dba63298a8558c80ce332853ee3221e1ee8ba93596f5da13cdb5cf1a79ff07fbb471be39741b269c18174df8b3dbbc8cd50317f352688717ffc24843d9124c2fe890d5195abd68f7e7c0fb5d1c276d0a73a49583e24e56e4aa0aaa82dd7e4bc84765d95989e8e67f622ba7c9f455c8bfe65e3778b"}], 0x12c0}}, {{&(0x7f0000000ac0)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)="699db6cbf3adef", 0x7}], 0x1}}], 0x4, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0xc, 0x40000000}, {}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x9, 0x0, 0x0, @void, @value}, 0x28) 8.90396192s ago: executing program 0 (id=1368): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) io_submit(0x0, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) open$dir(0x0, 0x20a40, 0x90) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_emit_vhci(0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="800002000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$inet(r2, 0x0, 0xc800) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r7, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r7, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 8.824638255s ago: executing program 4 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000080)=r7) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x86) unshare(0x22020400) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 7.739200168s ago: executing program 34 (id=1335): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000100000000000d89614e090df447c0000", @ANYRES32=r3, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000020000000100"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000005000000000000000400c410f8ff100000000cb000ddecf0bc009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd202baabeb92017ed64eb580cfd4c9acb82f85a304f216e0fe22ec4d0701f103257f92125e03b845d00"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000000), &(0x7f00000001c0)) write$char_usb(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000800)={0x0, 0xa0, "25c8b7b4f1206ffb24cee36916288f2fb1bdc885311cd4c0c44db1da812079cffc40971e4f0c82275194e4c1c4a122c7ea3023bcdac9c191fae94ca5b6274500792fcce2cb009aad67df3d80d816f6fa87b4a92d9ddad0787017aba287e4ae9eda87dff7746e035ee0c071f848f083c7327b24b560acc44a696ab946ba3e345d4d10e6b048f3e85f82b163ce27f9d3067d2b8a9dc118b3777969a74c05c4f053"}, &(0x7f0000000040)=0xa8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={r8, 0x8}, 0x8) mknod$loop(0x0, 0x6000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) 7.671023363s ago: executing program 4 (id=1371): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x2000000) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) unshare(0x2c020600) r2 = userfaultfd(0x80001) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x1c, 0x2, 0x0, 0x0, "0dd3b885ca94ebbf0c6d93d76530a0582fe00e1b48a2915c19aef94ac0d045f3e748187030cfe96cf23936dece48949d0c0deaf3578501dc9841c475f3f0f1b5"}}}}, &(0x7f00000001c0)={0x1, 0x2, [0xe54, 0x75, 0x4d, 0xf25]}) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000000d28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000000000000000000004900", 0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) unshare(0x22020600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000050000128008000100677265000820028004001200"], 0x34}}, 0x0) sendto$packet(r4, &(0x7f0000000180)="399d", 0x2, 0x0, &(0x7f0000000200)={0x11, 0x7, r7, 0x1, 0x0, 0x6, @random="b3e32da2d696"}, 0x14) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x201}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) 7.620993322s ago: executing program 0 (id=1372): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x6, 0x1}, {0x30}, {0x6, 0x1}]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket(0x23, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x24000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x2}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket(0x11, 0x800000003, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f7508", 0x25) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e1c, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) 7.551377523s ago: executing program 6 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\x9b\xac\xe3\xbf\xa5\xdf\xbd\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x02\x00\x00\x00\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x1b\x88\xf8C\xaa\xa7\xbb\xfdZ\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\x00'/143, 0x6) pwrite64(r4, 0x0, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = open(0x0, 0x1850c2, 0x14c) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x1ac, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x22048105}, 0x4080) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000100)={0xa, 0x1, 0x3, "ba7802000000169916ea42230659006b79b299fc817c031a5406000600", 0x59555956}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.482429526s ago: executing program 6 (id=1374): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) open(0x0, 0x1a1142, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x690000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f00000007c0)="a2ac", 0x2}, {&(0x7f0000000d80)="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", 0xc3f}], 0x2, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="11", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) 6.016619373s ago: executing program 0 (id=1375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d08, &(0x7f0000000040)=0x45) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000080)=r7) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x86) unshare(0x22020400) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 5.287617183s ago: executing program 4 (id=1376): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b//\\o/\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setfsgid(0xffffffffffffffff) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) 3.962088446s ago: executing program 4 (id=1380): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x27}, @jmp={0x5, 0x0, 0x9, 0x0, 0xb, 0xfffffffffffffe88}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) ioperm(0x0, 0x82, 0x1f) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x3, 0x0, 0x0, 0x2, 0x9, 0xfe, 0x1, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x3, 0x8, 0x3, '\x00', 0x4, 0x8000000000002}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r1, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)={0x0, 0xd, 0xa, "cab4e545862094c00603"}, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r11, 0x5b03, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r9, r12, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000200)="f281d10f0066b9800000c00f326635000100000f300f01c9baf80c66b8ad0afc8d66efbafc0cb0c3eebaf80c66b8fbcba18e66efbafc0cecf2a70f21263e720e660fe115b800008ee0", 0x49}], 0x1, 0x42, &(0x7f0000000380), 0x0) sendmmsg(r0, &(0x7f0000007980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=[{0x10, 0x84, 0x1}], 0x10}}], 0x1, 0x14) 3.648638987s ago: executing program 1 (id=1381): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESHEX=0x0, @ANYRES64], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000180), &(0x7f0000001540)=""/4108, 0x100c, &(0x7f0000001480)={0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="34000000220001000000000000000000240000800c080100040000000000000014000b00200100"/52], 0x34}], 0x1}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x6d, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 3.13057807s ago: executing program 6 (id=1382): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) setrlimit(0xa, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_usb_connect$cdc_ecm(0x4, 0x4f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002020000402505a1a440000102030109023d00110101407809040000020206000e0724060000eef105240002000d240f0101000000ff013e1a0609058202000406097f090503021000cf580c17a58a10c6c6ea33625a51ec690adc648fa6c1b82ecaf0"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x800}, 0x841) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x8, 0x7ffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.786337389s ago: executing program 0 (id=1383): socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socketpair(0x29, 0x6, 0xa, &(0x7f0000000000)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @loopback}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x9, 0x7fff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0xf800, 0x1ff, 0xc0000}}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x3, 0x7, 0x4a, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, 0x7800, 0x10, 0x8, 0x6}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 48.406746ms ago: executing program 0 (id=1384): sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x8000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYRESDEC=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000080008000e00000000ff", 0x24) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000880)="19a992aa0c19fa7fe99191439341ad19d4d09255d69e8172499f1cdb597fdd2c93873636bf70225f0627b807cd7fb74ea8b1de93d365ca9b365267d3277bb8770db8dba1b065eebd90c44cdca4e02491b61dd3d56fe6cd44cd7fc5b4aa2ffb9654bf3d06703f39df1427b053fb9b50102b35f7b7fe7150ac19c8e69494e0165f62458b7adc27756f4f4df5e91181e414ebbe95e676d03ddf3a4966d0a2d5c0214610f784bb1616990d9d3a3cb7e79183ff91ad9633b48c3e174857b175204a0772d9adcfc2fd5bda0c9987d179760d372508c33b77f4553d70a7f7c329b26ff3117f0c0af69c7c1da21518e8de123eb9b137b1ba2dcb8a5058db85368defbf74b918dfa309af42026399464486a303e921cbbd6748fbd4bc304a46d8db75040ee1b95d2e9c24cc90312d018228170cb07302379583141b61091bea4be3c9e8a9f10bba6f5f20c1af59dc9368a4a83869404b2d6c6f98e64f90ac569ac610f07d1e57534d8d0f20b20c9bc60d6761b13c0079ef332fe2bcadde33307bdcaa547a8729eede860b0275cf3b0973c1c4ffa51a6964700c4dd60f382cd8e7c1e8f546d750b60ae4516591a0cdbd2257f49a80799ed28e58a0cf6c8e8514a989a83a4c5f3b605d4557ff5204bfbc10aa0b38798007e19b4a13ca3e56acb607b04ca26f7b96ed07e00cefc88fe706bf178bb07d79d58ce00178f4770453ce22d6cbc4a2a7a4b12bee8d1aff0773c97b0e9206579d87e259e4a6fd27a0c7c9bb47d8d78b603e56dd6d00e4c9d93559c587e6712ff6ba488a1648434fb1647e63644508eb61a764c241dfbc1133bc982f92de5f2b75ed4e87dadbf1cae47d1c1b6eb1c95212d3f539866918cfe021efe9dc7329c44db1ad29eb0f8169522876208d458e44c436afafa35142c3d5963afdfa93f9fc2c65bdc14350a738c7370e30ee793b0d5ef60b15d6fa0b67d385097cc7e57aac64ab2525f0b196321065816752528aee40b7a443cd9280e4943ed80f45dab9658256f25ecf9504191aeb5350f0c06a9abe0b81bec3c0821a8c4b95c78995608d2e117c63d71dec2a12f5b8a894d8acf68d705a47f6181202143e908509674fc334553ae5e07acb32475f253f9c589978314b57a4563f8009c1279943315410fc94237acdd2c23e5470d1f98278f7da82ae02c53e269366e565ca4c5d76a3ffb9221362918dcb3015edb9f2251f52531944559057361cdd54632ac2a3be729aea1dd03a3e355b25481a26f9cb5fe1810b7eabe04a4eb8a0b39754ab9f3899f50247fccc33c4bfb34bdebfe21ec7e33cea08e6d51ce2050001145ba0b3d927e27b588b637aaebc499b132a1fcf8db7629803b7f8b3351164a3ced773e9c9038f8b6830ead4258a3f5e17c5b9b5ba9955418f7135796ad10bd455235f1514f0668504237b8e0b99d0ba47643356b07edb38dee51b61b53cae8cf7cf18109d2f58269460feb3e7c685a08728e8192e44b4aeff94b27f3de0cdd0f1036fcf4bd4d11a7f12e7a1b7217ed7b6772f498fd3c48c93812a5adac28bce3c7790110e287453583be3c6b71b0a6b3933ed22293a46a75dd43e511fa7ca3889b63400b825a9f1a126ae75fe33437d1c2de5097c96fefa2974aea83e1a24ff7e73ec81b2d01178c5c635f7939107521716b710e5408557aaabbe0d1381d0e60776ef74fc270fb2d7566eaff8d3cfe47f31760f64a279f54f4dc5e9e3c68b2abc0313fc42b77cb049b1e1e3c3b67bb6cc44f8002e584854c217df8e26674d14f552c2b448b39682a64c3379c91109d30b64544e8f50fdc57c0f3851891600a33f50e0fa3c2a2b3fe3040b0c134b6fbff278376b63271e98de39a3cc4568aa1adf60382df4e8aa3605f2f2821541f9e7bc45546090b56f8f2501d1aa62393b0a234c3fb8def061f39d10e50278c6ec9dc3f52025e9bb1e02c4b282dadfca1d1eaac9b8f78a78fe7afc97ba1fcceada1297aff6d059529eda3cf8ca05b57e3d05a5b570165e8c93921da442816b7d6f95d177f664798c53c07a8a045c8afa776d1c64732db3e5f9a86a0c3d4bd94397bd9ffa9c0fc65040530768aea4cbd628330f41d43581ff8d97c5898bfa44090fa550b6ce73ddc4c2fa5b29fb2f9c6469130a77e43099245a8f518e4ba44dd9b32cd4d7708a98859d9e697c69157eca121e2eab172d7572cb5650df8ae60dd3b214ce5f1f6eb29ec22ff6dbb8401e77ee3d976562006ef3b286c8c80dc95684c7c2df9815f3c7492939a83a6b5d5320154e0b1b5b6950f73b73b2a190dd4432f4826e56a2f037b92840d8b9719b3e2753e36ddc05bd5442e1b362c3656aa0646aa44792e3e63b3e27fd0eaf16f7ff99bbcb16077e41a52a6c1eed239a82263355f47dd4feffea2319261448fe1d43f64bab0c6288048ceee0abfb5d51bc779465b0a00a879c67f98c577da95d5cf3a37b2074d4fa54347041e17ab6ddacd80f544460f54b50cb80f9b70c7431ca1469088d193c388044ee3c88c091208fc1a3b68129c287ca701f7b043a0f9c5e261ec0bba3c44c6db2a73775f5d72b61e94eae914fa5bb7cd0ef671ba415c96dad99fd6e17e25b61252e4f0ce0d8bf7bf6992dba828f659158b747759ea8573331a499bc14a24d5ea65dcbd085dbb3346e5df421b25f69eab94ebcb783ebf319f345d633d34f50df1a62f90b44e4c584e6aee7465ca44768e472dabfec068faad24b7e4a0580c0d7cfe5752cef01312b38f98177116a670ff614ba9120becdfcbc623e7840bc8cdcef4c16b636fa4a77e32f940fa02c8772bfabf0a45d7d37308695b30f7a58011115667389ef37c82947cdb613d06aa553a6d34b7dd945bc932a1514f9f9d10ba9dd5e12175b4ff59d4784fed9040fa1b10d97aeb713c5edaa893811d3e59cef3baf6ac7e611785b75a1bddc60b53fd313bdf2fb3fdea47bf6371282bdd324da3d7b5d872da42f100e76bc3f4e25e6553926e729ab35dc085be060ac383267bfffb5b3469803e94da50de5d16d94852ce5e344fb344ceff132ff817b23cdca8ddf5c85a50c970dd200eca559a492f2bd037ddd91f0e7fd24e4fbd5ec7eabbea5b65b97f9a388f9d0e62f990d5de31a738720f81e1d675a5e854c4e488c926cd3b80632886d32b09b112eb0e5accee3adc496188def70a895899f371301eca6e9dcb4a15e5368c3e7d895f139fba15e3f3c503d638239062fc7c30299cc1a4eac4a7e12f238a174c7e3c6800992cef7d0f6ccf68527605a6c3893922f0a3b8d132d9fed43aa146582653feee9b1dd6c3957343cc1448f6fd44f191dde5135b0940883ffd475f6bc5054058c56e3b21e75a6bd751494a1d6fa25777f4a588a5d6799276270e93c566bc9ff96e1d6faba31301e31b880a89f4773c3cea07431e0f2de8d1bbaf10b7750db81ad13cbc888475dcfc4a04922617b7f9ae9147186ee54e232cdea72c8a6791b7d29906e0e114ffe6da30c974ce02d018bc85621ff30791ae4ecc8a4f91b8fcde2416ffaecfc578c07c3e90c5825c98f5705e4b8fc1fc2c8269024d2d3352d7b38867d6fa6340fce4f8f614b59f86eba23133b3f7b61350e21c56952836b3268c0447aab37825ea25f39a412f76e70834504f84a4f5bd4c043e2adbc21abd1506727a2d037c300d3d89092a0274c9608faf2fd640ade7e4fbda8c6b17c57991c1ccf30aebcda043bdbce7daebbb24f7b6a1a8550b4bec75304d08d70e3967342a976594e672c0e7431d61a83af2a01f5021069c673eaf5e09ae517caf80315e830a02e56b405f3b0d1885a9895876e88ed036be6f0a3c5c3bb57f144793270f23cd9373957dc277aca5b78204fd001597b2a62c2d5cd1005b2b43b108099853ae65c36eaa72c165c5fe0201593ea4d8e4f5e643cc579dcb312add0811a2b26b635b0a977abb92340a6b8800bcff71a29512405292e4cea6a654833ea452adf9d5330711e59efe9560740e3d1ade2f07fb608d00d180b3b65d5e8a6d7c293809f342ab1c72dfc1f6bd8d0d11d64b63570877b298e7720a0b57437e4fa640f242bfa34ed9fc24a1ace8c212affb7ab1e5c1fb69c4bfd6825824ecd071e22829515fc73ac534784b5944a8af7edca4fcf07d5d98195dc7b59ae6274802ee9319040e3ecc14733ac42291d5c2aa639cd522e060ff16406490d77afa5fe5154e6db741443e61e0466498239d0eb931b7357e8718632c297bf764fdd3b45b576bb9a01ef5c015c7c07fd2f366a35e4b0c70c480987d068cb990ba37719d22c8ce4c5cf3c622a2dc40dd6ab77b2f6f2e395aac1a04a223065ff9c550d902b48b248129852e193133a7d4b580e72df7fca722b6a66a952714fd20acd43d0e5dcec3dafd3c02503bc096f984328bef4fffd8c23d7a418e3ade7efc446fbfca2a55392326df705ead0c286eff044d6823ef2d2c9473f36736901f8593c93f674ad6ae913dfa19961d4ce5c0a84bcf3e0ff8d9206da1af4bdfbaf1c45f877f74619989c9f372f77aab859dd4e323ff415a87b7f3a8a32e150cb25b1fc00d2e30da6fdd3e96ffe36bdad3e0a84e8462c54b903a361458e9a939bddccb94e52c640cf2a8fb5005ecad599eea533a726f7bef5e077b09d115923744772e898154e342ee7c5b03ce837dd856dbf4add2bd2b267b3fa6db2d2a8481ad189d0920269f670245388e79bd7847a0c8d7a66b186b07a19b4a18ec3b4a369e04b82fd0c4a8360184fad12c69d94f99e652f69ae63e578c63accfe312562c936e523aaf0f8400e2a244359884e8f8e670a2f6aff7b08719c6dbb8492fc2e181dadf1553978c0c768d1701c77b055cd58ea4f607c76c7218f5b68c9e872a679df09c1e06d62caa3930e323b05cbbcebf8ce881dc94915abd0ce0c27b2580521d9f992c26923ef7ab79faa34be1f811315407f8821fce2c4521c2f09259a81bb15648dd3b64e4a763c98b95db93beedb20936003d84ab30b1ef9968bd9df60b2144854961ca726a72670b79489d3a05721899c05f43ff46efb39f3b64cda9ce3ce7a36fa822a23074d8f6e81f6b9c74d801a0c0962eefd12e47b3bf96ecd9a1b3982dc58a1f63b2735b4b591ebc4112070de7ab967422e33272498b69997066093a908a7838090715d8b0908615b5327d60d919b5ce7eb23a4d5e5e3a3ab7ff58e035f3dfb2ac4babaaf050d65250f68966805ffc719f78a3a933cd7c6ca21a4a062b792306152b45f3f2e29efec2fb0e9784dea9e6162c830b7e5d653e979a4dabc14831a6bee683d033b042c9c29c7a7c8e9d799ec61e24d80e7e96b3288820b6e7d137e96aa4dae65fcd1a2876f501720e949c6974dd8094273d35277379df8658cd7fb1f644ca7be30c5028398b98f637a938a324fa12660fae975da9ec6081d8a6ee801e6f241e5a9f1ec0987dbee52637d26d6e327aaafd5fd1c8a54a51939685fcfa3bd27a19a7b9ac4446789c16d2a034f60eb1c9ee651c6ea0f38589258768f079c7015f8d86181ee761c731fdd86347a36e7446cca3edcb1a97624b1a69f940453570f772cbd81ba28258b82086a11c3aba5de6e5b3ec8c2098ef0b4196512494a790fdae8a603745bc3c009cfcc66f615da19ef2b3d5f4e52b565960c223de3df708ded73106e25e377e0ae0a2713ff22dd8ad6f987ce005ab54675991d224f59b4c9b3bd9d5f99c0ffe16c5acff98946b839a8172fe44349004e59d80056ac913ae1e63b7e799f0f622f6b8083552010cb341bb4e5e21e07a571b22226e4b77aac0741d195b909f6edb40788a5ab6acbc638", &(0x7f0000000040)=@udp=r4, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) epoll_create(0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 521.789µs ago: executing program 4 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x7a, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) r3 = socket$qrtr(0x2a, 0x2, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) (async) sendmsg$sock(r3, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @empty, 0x87}, {0xa, 0x400, 0x0, @empty, 0xfffffffd}, r2}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, r6}}, 0xfffffe10) (async) listen(r0, 0xfff) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x5) (async) socket(0x10, 0x3, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000003c0)="2e65420f43fb66baf80cb8d2241887ef66bafc0c66b80d0066ef450f0dba722fd1b466460ff85600b95b0900000f323e66400f38822081a1f32ecd4cd25880bb0f20e035000040000f22e066ba4200edc744240014000000c74424020e000000ff1c24", 0x63}], 0x1, 0x34, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x4, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 1 (id=1386): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) kernel console output (not intermixed with test programs): ][ T980] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 388.110636][ T980] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 388.124729][ T980] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 389.273247][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.440038][ T980] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 389.497176][ T980] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 389.534161][ T980] usb 4-1: Product: syz [ 389.549184][ T980] usb 4-1: Manufacturer: syz [ 389.553857][ T980] usb 4-1: SerialNumber: syz [ 389.684953][ T980] usb 4-1: config 0 descriptor?? [ 389.845898][ T8331] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.171244][ T980] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 390.209010][ T8351] 9pnet_virtio: no channels available for device syz [ 390.250660][ T980] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 390.261497][ T8329] lo speed is unknown, defaulting to 1000 [ 392.691397][ T8374] No control pipe specified [ 393.422684][ T980] usb 4-1: USB disconnect, device number 14 [ 394.192952][ T980] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 397.679409][ T8418] No control pipe specified [ 399.659050][ T8441] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 399.710304][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.708'. [ 400.127005][ T8450] binder: 8449:8450 ioctl c018620c 0 returned -14 [ 400.243963][ T5933] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 400.273226][ T8454] No control pipe specified [ 400.536962][ T5933] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 400.673602][ T5933] usb 5-1: config 0 has no interface number 0 [ 400.803962][ T5933] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 401.116710][ T5933] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 401.129990][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.157620][ T5933] usb 5-1: Product: syz [ 401.191273][ T5933] usb 5-1: Manufacturer: syz [ 401.195924][ T5933] usb 5-1: SerialNumber: syz [ 401.233866][ T5933] usb 5-1: config 0 descriptor?? [ 401.250531][ T8447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.273679][ T5933] usb-storage 5-1:0.20: USB Mass Storage device detected [ 401.282754][ T8463] 9pnet_virtio: no channels available for device syz [ 401.488297][ T8469] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 401.513705][ T8465] input: syz0 as /devices/virtual/input/input23 [ 401.549608][ T5933] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 401.918349][ T5933] scsi host1: usb-storage 5-1:0.20 [ 402.137254][ T8476] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 402.281022][ T5933] usb 5-1: USB disconnect, device number 15 [ 403.424595][ T8493] No control pipe specified [ 404.772428][ T8503] netlink: 'syz.1.726': attribute type 10 has an invalid length. [ 404.813971][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.726'. [ 406.086138][ T5933] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 406.293488][ T5933] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 406.338619][ T5933] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 406.401587][ T5933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 406.562894][ T5933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 406.681704][ T5933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 406.885816][ T5933] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 406.945441][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.052462][ T5933] usb 2-1: Product: syz [ 407.412332][ T5933] usb 2-1: Manufacturer: syz [ 407.438186][ T5933] cdc_wdm 2-1:1.0: skipping garbage [ 407.459456][ T5933] cdc_wdm 2-1:1.0: skipping garbage [ 407.479891][ T5933] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 407.485869][ T5933] cdc_wdm 2-1:1.0: Unknown control protocol [ 407.856964][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.889427][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.544482][ T8547] No control pipe specified [ 409.457113][ T8547] overlayfs: failed to resolve './file0': -2 [ 409.563529][ T5876] usb 2-1: USB disconnect, device number 17 [ 411.473276][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 411.504635][ T8567] bridge0: port 3(batadv0) entered disabled state [ 411.511975][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.519909][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.300412][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 414.457683][ T8608] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 414.465491][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.756'. [ 415.527607][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 415.580358][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 415.592096][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 417.311201][ T5876] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 417.871200][ T5876] usb 1-1: device descriptor read/64, error -71 [ 418.155875][ T5876] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 419.289482][ T5876] usb 1-1: device descriptor read/64, error -71 [ 419.301661][ T8657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.323204][ T8657] batadv_slave_0: entered promiscuous mode [ 419.337725][ T8657] batadv_slave_0: entered allmulticast mode [ 419.428716][ T5876] usb usb1-port1: attempt power cycle [ 419.568388][ T8657] warn_alloc: 1 callbacks suppressed [ 419.568416][ T8657] syz.2.773: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 419.863362][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.2.773 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 419.863397][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.863420][ T8657] Call Trace: [ 419.863436][ T8657] [ 419.863446][ T8657] dump_stack_lvl+0x189/0x250 [ 419.863486][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.863509][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.863560][ T8657] warn_alloc+0x214/0x310 [ 419.863583][ T8657] ? stack_depot_save_flags+0x429/0x900 [ 419.863618][ T8657] ? __pfx_warn_alloc+0x10/0x10 [ 419.863643][ T8657] ? kasan_save_track+0x4f/0x80 [ 419.863673][ T8657] ? xskq_create+0x56/0x170 [ 419.863691][ T8657] ? xsk_init_queue+0xb0/0x110 [ 419.863719][ T8657] ? xsk_setsockopt+0x43f/0x710 [ 419.863747][ T8657] ? do_sock_setsockopt+0x257/0x3e0 [ 419.863773][ T8657] ? __x64_sys_setsockopt+0x18b/0x220 [ 419.863797][ T8657] ? do_syscall_64+0xfa/0x3b0 [ 419.863816][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.863847][ T8657] __vmalloc_node_range_noprof+0x125/0x1340 [ 419.863905][ T8657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 419.863934][ T8657] ? __kasan_kmalloc+0x93/0xb0 [ 419.863967][ T8657] vmalloc_user_noprof+0xad/0xf0 [ 419.863989][ T8657] ? xskq_create+0xbf/0x170 [ 419.864008][ T8657] xskq_create+0xbf/0x170 [ 419.864031][ T8657] xsk_init_queue+0xb0/0x110 [ 419.864065][ T8657] xsk_setsockopt+0x43f/0x710 [ 419.864098][ T8657] ? __pfx_xsk_setsockopt+0x10/0x10 [ 419.864125][ T8657] ? __lock_acquire+0xab9/0xd20 [ 419.864158][ T8657] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 419.864178][ T8657] ? __pfx_xsk_setsockopt+0x10/0x10 [ 419.864210][ T8657] do_sock_setsockopt+0x257/0x3e0 [ 419.864241][ T8657] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 419.864274][ T8657] ? __fget_files+0x2a/0x420 [ 419.864304][ T8657] __x64_sys_setsockopt+0x18b/0x220 [ 419.864339][ T8657] do_syscall_64+0xfa/0x3b0 [ 419.864358][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.864379][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.864399][ T8657] ? clear_bhb_loop+0x60/0xb0 [ 419.864425][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.864444][ T8657] RIP: 0033:0x7f4467d8e969 [ 419.864464][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.864484][ T8657] RSP: 002b:00007f4468b44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 419.864507][ T8657] RAX: ffffffffffffffda RBX: 00007f4467fb5fa0 RCX: 00007f4467d8e969 [ 419.864522][ T8657] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 419.864535][ T8657] RBP: 00007f4467e10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 419.864548][ T8657] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.864562][ T8657] R13: 0000000000000000 R14: 00007f4467fb5fa0 R15: 00007ffff4280f58 [ 419.864597][ T8657] [ 419.864999][ T8657] Mem-Info: [ 419.866151][ T5876] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 420.253675][ T8657] active_anon:3148 inactive_anon:5867 isolated_anon:0 [ 420.253675][ T8657] active_file:5653 inactive_file:36283 isolated_file:0 [ 420.253675][ T8657] unevictable:768 dirty:115 writeback:0 [ 420.253675][ T8657] slab_reclaimable:10390 slab_unreclaimable:102515 [ 420.253675][ T8657] mapped:31650 shmem:4249 pagetables:1120 [ 420.253675][ T8657] sec_pagetables:0 bounce:0 [ 420.253675][ T8657] kernel_misc_reclaimable:0 [ 420.253675][ T8657] free:1337695 free_pcp:706 free_cma:0 [ 420.847113][ T5876] usb 1-1: device not accepting address 26, error -71 [ 420.854345][ T8657] Node 0 active_anon:12516kB inactive_anon:34772kB active_file:22416kB inactive_file:145132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134000kB dirty:556kB writeback:0kB shmem:26784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11320kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 421.131304][ T8657] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 421.267489][ T8657] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.316998][ T8657] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 421.323414][ T8657] Node 0 DMA32 free:1402564kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:12512kB inactive_anon:34732kB active_file:20644kB inactive_file:145064kB unevictable:1536kB writepending:556kB present:3129332kB managed:2561708kB mlocked:0kB bounce:0kB free_pcp:6896kB local_pcp:6144kB free_cma:0kB [ 421.380583][ T8657] lowmem_reserve[]: 0 0 1 1 1 [ 421.386122][ T8657] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 421.414721][ T8657] lowmem_reserve[]: 0 0 0 0 0 [ 421.420450][ T8657] Node 1 Normal free:3917256kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1376kB local_pcp:1376kB free_cma:0kB [ 421.450912][ T5876] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 421.692351][ T5876] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 421.792769][ T8657] lowmem_reserve[]: 0 0 0 0 0 [ 421.853935][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.922713][ T8657] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 421.972603][ T5876] usb 1-1: config 0 descriptor?? [ 422.469907][ T8657] Node 0 DMA32: 164*4kB (UME) 356*8kB (UME) 409*16kB (UME) 101*32kB (UME) 262*64kB (UME) 164*128kB (UME) 98*256kB (UME) 47*512kB (UM) 14*1024kB (UME) 5*2048kB (UM) 315*4096kB (UM) = 1415008kB [ 422.489974][ T8657] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 422.502128][ T8657] Node 1 Normal: 2*4kB (E) 6*8kB (UME) 33*16kB (UME) 242*32kB (UME) 111*64kB (UME) 35*128kB (UME) 16*256kB (UME) 8*512kB (UM) 2*1024kB (ME) 4*2048kB (UE) 947*4096kB (M) = 3917256kB [ 422.521089][ T8657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.534849][ T8657] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 422.545641][ T8657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.555933][ T8657] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 422.566011][ T8657] 46165 total pagecache pages [ 422.570830][ T8657] 0 pages in swap cache [ 422.571925][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.782'. [ 422.575042][ T8657] Free swap = 124996kB [ 422.588780][ T8657] Total swap = 124996kB [ 422.593056][ T8657] 2097051 pages RAM [ 422.596929][ T8657] 0 pages HighMem/MovableOnly [ 422.597754][ T5876] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 422.601662][ T8657] 424517 pages reserved [ 422.614103][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 422.673376][ T8657] 0 pages cma reserved [ 422.981664][ T5876] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 423.699470][ T5876] [drm] Initialized udl on minor 2 [ 427.702493][ T2150] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 429.306642][ T5876] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 429.358300][ T5876] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 429.489215][ T980] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 429.586577][ T980] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 431.011628][ T8728] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 431.665543][ T43] usb 1-1: USB disconnect, device number 27 [ 433.373427][ T8756] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 433.385295][ T8750] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A [ 433.429251][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.803'. [ 434.790407][ T2150] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 435.250351][ T2150] usb 1-1: device descriptor read/64, error -71 [ 435.518315][ T2150] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 435.689081][ T2150] usb 1-1: device descriptor read/64, error -71 [ 435.817452][ T2150] usb usb1-port1: attempt power cycle [ 436.388894][ T8785] FAULT_INJECTION: forcing a failure. [ 436.388894][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 436.401850][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.3.808 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 436.401877][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.401889][ T8785] Call Trace: [ 436.401897][ T8785] [ 436.401905][ T8785] dump_stack_lvl+0x189/0x250 [ 436.401939][ T8785] ? __pfx____ratelimit+0x10/0x10 [ 436.401972][ T8785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.402000][ T8785] ? __pfx__printk+0x10/0x10 [ 436.402028][ T8785] ? ref_tracker_alloc+0x318/0x460 [ 436.402055][ T8785] should_fail_ex+0x414/0x560 [ 436.402081][ T8785] should_failslab+0xa8/0x100 [ 436.402114][ T8785] kmem_cache_alloc_noprof+0x73/0x3c0 [ 436.402143][ T8785] ? skb_clone+0x212/0x3a0 [ 436.402176][ T8785] skb_clone+0x212/0x3a0 [ 436.402208][ T8785] __netlink_deliver_tap+0x404/0x850 [ 436.402248][ T8785] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.402275][ T8785] netlink_deliver_tap+0x19c/0x1b0 [ 436.402302][ T8785] netlink_unicast+0x72f/0x8d0 [ 436.402337][ T8785] netlink_sendmsg+0x805/0xb30 [ 436.402373][ T8785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.402408][ T8785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.402427][ T8785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.402453][ T8785] __sock_sendmsg+0x219/0x270 [ 436.402483][ T8785] ____sys_sendmsg+0x505/0x830 [ 436.402517][ T8785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.402554][ T8785] ? import_iovec+0x74/0xa0 [ 436.402587][ T8785] ___sys_sendmsg+0x21f/0x2a0 [ 436.402617][ T8785] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.402683][ T8785] ? __fget_files+0x2a/0x420 [ 436.402702][ T8785] ? __fget_files+0x3a0/0x420 [ 436.402734][ T8785] __x64_sys_sendmsg+0x19b/0x260 [ 436.402764][ T8785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.402802][ T8785] ? __pfx_ksys_write+0x10/0x10 [ 436.402828][ T8785] ? rcu_is_watching+0x15/0xb0 [ 436.402856][ T8785] ? do_syscall_64+0xbe/0x3b0 [ 436.402881][ T8785] do_syscall_64+0xfa/0x3b0 [ 436.402902][ T8785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.402921][ T8785] ? asm_sysvec_call_function_single+0x1a/0x20 [ 436.402940][ T8785] ? clear_bhb_loop+0x60/0xb0 [ 436.402965][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.402984][ T8785] RIP: 0033:0x7f0280d8e969 [ 436.403001][ T8785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.403018][ T8785] RSP: 002b:00007f0281bbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.403039][ T8785] RAX: ffffffffffffffda RBX: 00007f0280fb6160 RCX: 00007f0280d8e969 [ 436.403054][ T8785] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000006 [ 436.403066][ T8785] RBP: 00007f0281bbe090 R08: 0000000000000000 R09: 0000000000000000 [ 436.403078][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.403090][ T8785] R13: 0000000000000000 R14: 00007f0280fb6160 R15: 00007ffdc5ab38c8 [ 436.403122][ T8785] [ 436.719380][ T8785] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 436.728814][ T8785] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 436.738427][ T8785] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 436.901260][ T30] audit: type=1800 audit(1748738660.587:249): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.808" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 437.165737][ T8791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.242377][ T2150] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 437.295329][ T2150] usb 1-1: device descriptor read/8, error -71 [ 437.581780][ T2150] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 437.647551][ T2150] usb 1-1: device descriptor read/8, error -71 [ 437.765040][ T2150] usb usb1-port1: unable to enumerate USB device [ 440.368162][ T8827] FAULT_INJECTION: forcing a failure. [ 440.368162][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 440.495248][ T8831] FAULT_INJECTION: forcing a failure. [ 440.495248][ T8831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.516255][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.0.820 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 440.516284][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.516297][ T8827] Call Trace: [ 440.516305][ T8827] [ 440.516314][ T8827] dump_stack_lvl+0x189/0x250 [ 440.516348][ T8827] ? __pfx____ratelimit+0x10/0x10 [ 440.516381][ T8827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.516409][ T8827] ? __pfx__printk+0x10/0x10 [ 440.516436][ T8827] ? ref_tracker_alloc+0x318/0x460 [ 440.516463][ T8827] should_fail_ex+0x414/0x560 [ 440.516490][ T8827] should_failslab+0xa8/0x100 [ 440.516523][ T8827] kmem_cache_alloc_noprof+0x73/0x3c0 [ 440.516553][ T8827] ? skb_clone+0x212/0x3a0 [ 440.516586][ T8827] skb_clone+0x212/0x3a0 [ 440.516618][ T8827] __netlink_deliver_tap+0x404/0x850 [ 440.516658][ T8827] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.516685][ T8827] netlink_deliver_tap+0x19c/0x1b0 [ 440.516711][ T8827] netlink_unicast+0x72f/0x8d0 [ 440.516746][ T8827] netlink_sendmsg+0x805/0xb30 [ 440.516786][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.516821][ T8827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.516840][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.516867][ T8827] __sock_sendmsg+0x219/0x270 [ 440.516891][ T8827] ____sys_sendmsg+0x505/0x830 [ 440.516924][ T8827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.516961][ T8827] ? import_iovec+0x74/0xa0 [ 440.516994][ T8827] ___sys_sendmsg+0x21f/0x2a0 [ 440.517023][ T8827] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.517090][ T8827] ? __fget_files+0x2a/0x420 [ 440.517107][ T8827] ? __fget_files+0x3a0/0x420 [ 440.517138][ T8827] __x64_sys_sendmsg+0x19b/0x260 [ 440.517168][ T8827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.517227][ T8827] ? __pfx_ksys_write+0x10/0x10 [ 440.517272][ T8827] ? rcu_is_watching+0x15/0xb0 [ 440.517302][ T8827] ? do_syscall_64+0xbe/0x3b0 [ 440.517328][ T8827] do_syscall_64+0xfa/0x3b0 [ 440.517347][ T8827] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.517367][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.517388][ T8827] ? clear_bhb_loop+0x60/0xb0 [ 440.517413][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.517433][ T8827] RIP: 0033:0x7f143938e969 [ 440.517451][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.517469][ T8827] RSP: 002b:00007f143a160038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.517491][ T8827] RAX: ffffffffffffffda RBX: 00007f14395b5fa0 RCX: 00007f143938e969 [ 440.517506][ T8827] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000005 [ 440.517519][ T8827] RBP: 00007f143a160090 R08: 0000000000000000 R09: 0000000000000000 [ 440.517532][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.517544][ T8827] R13: 0000000000000000 R14: 00007f14395b5fa0 R15: 00007ffe98161cf8 [ 440.517577][ T8827] [ 440.802154][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.809395][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.1.821 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 440.809425][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.809438][ T8831] Call Trace: [ 440.809446][ T8831] [ 440.809454][ T8831] dump_stack_lvl+0x189/0x250 [ 440.809487][ T8831] ? __pfx____ratelimit+0x10/0x10 [ 440.809517][ T8831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.809543][ T8831] ? __pfx__printk+0x10/0x10 [ 440.809562][ T8831] ? __might_fault+0xb0/0x130 [ 440.809600][ T8831] should_fail_ex+0x414/0x560 [ 440.809625][ T8831] _copy_from_user+0x2d/0xb0 [ 440.809652][ T8831] do_sock_getsockopt+0x1cd/0x650 [ 440.809681][ T8831] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 440.809704][ T8831] ? do_syscall_64+0xa0/0x3b0 [ 440.809722][ T8831] ? __fget_files+0x3a0/0x420 [ 440.809738][ T8831] ? __fget_files+0x2a/0x420 [ 440.809763][ T8831] __x64_sys_getsockopt+0x1a5/0x250 [ 440.809786][ T8831] ? do_syscall_64+0xa0/0x3b0 [ 440.809806][ T8831] ? do_syscall_64+0xa0/0x3b0 [ 440.809828][ T8831] do_syscall_64+0xfa/0x3b0 [ 440.809847][ T8831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.809864][ T8831] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 440.809881][ T8831] ? clear_bhb_loop+0x60/0xb0 [ 440.809903][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.809921][ T8831] RIP: 0033:0x7f9f66f8e969 [ 440.809937][ T8831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.809953][ T8831] RSP: 002b:00007f9f67de2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 440.809973][ T8831] RAX: ffffffffffffffda RBX: 00007f9f671b5fa0 RCX: 00007f9f66f8e969 [ 440.809986][ T8831] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 440.809997][ T8831] RBP: 00007f9f67de2090 R08: 00002000000000c0 R09: 0000000000000000 [ 440.810009][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.810020][ T8831] R13: 0000000000000000 R14: 00007f9f671b5fa0 R15: 00007ffe4dab26f8 [ 440.810049][ T8831] [ 441.022428][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.600435][ T8841] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 441.600462][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.824'. [ 442.480821][ T8843] dummy0: entered promiscuous mode [ 442.480986][ T8843] macsec1: entered allmulticast mode [ 442.481011][ T8843] dummy0: entered allmulticast mode [ 442.512654][ T8843] dummy0: left allmulticast mode [ 442.512758][ T8843] dummy0: left promiscuous mode [ 442.654799][ T8850] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 444.683782][ T8857] syz.3.829 (8857) used greatest stack depth: 15512 bytes left [ 446.026376][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 447.006018][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 448.159137][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 448.196556][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 448.585037][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 448.594656][ T10] usb 4-1: config 0 interface 0 has no altsetting 1 [ 448.881007][ T5876] usb 2-1: device descriptor read/64, error -71 [ 449.223104][ T5876] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 449.411724][ T10] usb 4-1: string descriptor 0 read error: -71 [ 449.465044][ T5876] usb 2-1: device descriptor read/64, error -71 [ 449.496448][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 449.589345][ T8895] FAULT_INJECTION: forcing a failure. [ 449.589345][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 449.626588][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.657072][ T5876] usb usb2-port1: attempt power cycle [ 449.755177][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: syz.0.839 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 449.755208][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.755221][ T8895] Call Trace: [ 449.755231][ T8895] [ 449.755240][ T8895] dump_stack_lvl+0x189/0x250 [ 449.755276][ T8895] ? __pfx____ratelimit+0x10/0x10 [ 449.755309][ T8895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.755339][ T8895] ? __pfx__printk+0x10/0x10 [ 449.755366][ T8895] ? ref_tracker_alloc+0x318/0x460 [ 449.755394][ T8895] should_fail_ex+0x414/0x560 [ 449.755422][ T8895] should_failslab+0xa8/0x100 [ 449.755456][ T8895] kmem_cache_alloc_noprof+0x73/0x3c0 [ 449.755486][ T8895] ? skb_clone+0x212/0x3a0 [ 449.755520][ T8895] skb_clone+0x212/0x3a0 [ 449.755555][ T8895] __netlink_deliver_tap+0x404/0x850 [ 449.755600][ T8895] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.755625][ T8895] netlink_deliver_tap+0x19c/0x1b0 [ 449.755653][ T8895] netlink_unicast+0x72f/0x8d0 [ 449.755690][ T8895] netlink_sendmsg+0x805/0xb30 [ 449.755727][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.755763][ T8895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.755784][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.755811][ T8895] __sock_sendmsg+0x219/0x270 [ 449.755837][ T8895] ____sys_sendmsg+0x505/0x830 [ 449.755879][ T8895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.755918][ T8895] ? import_iovec+0x74/0xa0 [ 449.755952][ T8895] ___sys_sendmsg+0x21f/0x2a0 [ 449.755983][ T8895] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.756052][ T8895] ? __fget_files+0x2a/0x420 [ 449.756072][ T8895] ? __fget_files+0x3a0/0x420 [ 449.756103][ T8895] __x64_sys_sendmsg+0x19b/0x260 [ 449.756130][ T8895] ? schedule+0x165/0x360 [ 449.756161][ T8895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.756202][ T8895] ? rcu_is_watching+0x15/0xb0 [ 449.756232][ T8895] ? do_syscall_64+0xbe/0x3b0 [ 449.756257][ T8895] do_syscall_64+0xfa/0x3b0 [ 449.756280][ T8895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.756300][ T8895] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 449.756319][ T8895] ? clear_bhb_loop+0x60/0xb0 [ 449.756345][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.756365][ T8895] RIP: 0033:0x7f143938e969 [ 449.756383][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.756401][ T8895] RSP: 002b:00007f143a160038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.756423][ T8895] RAX: ffffffffffffffda RBX: 00007f14395b5fa0 RCX: 00007f143938e969 [ 449.756439][ T8895] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 449.756452][ T8895] RBP: 00007f143a160090 R08: 0000000000000000 R09: 0000000000000000 [ 449.756464][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.756477][ T8895] R13: 0000000000000000 R14: 00007f14395b5fa0 R15: 00007ffe98161cf8 [ 449.756510][ T8895] [ 450.216282][ T8900] No control pipe specified [ 450.228574][ T8900] overlayfs: failed to resolve './file1': -2 [ 450.441086][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.449126][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.274529][ T10] usb 4-1: config 0 descriptor?? [ 451.371893][ T980] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 451.379676][ T10] usb 4-1: can't set config #0, error -71 [ 451.394153][ T10] usb 4-1: USB disconnect, device number 16 [ 451.553287][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 451.561222][ T980] usb 5-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 451.602208][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.638238][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.666431][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.676490][ T980] usb 5-1: Product: syz [ 451.680825][ T980] usb 5-1: Manufacturer: syz [ 451.694612][ T980] usb 5-1: SerialNumber: syz [ 452.229827][ T980] usb 5-1: 0:2 : does not exist [ 452.234857][ T980] usb 5-1: unit 9 not found! [ 452.337943][ T980] usb 5-1: USB disconnect, device number 16 [ 452.401776][ T6806] udevd[6806]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.692747][ T8933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.899524][ T8940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.914256][ T8940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.927089][ T8940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.935469][ T8940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.953775][ T8940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 453.985899][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.015605][ T8943] No control pipe specified [ 454.038533][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.056060][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.067184][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.077890][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.099200][ T8943] overlayfs: failed to resolve './file1': -2 [ 454.526179][ T10] libceph: connect (1)[c::]:6789 error -101 [ 454.532277][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 454.571904][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 454.681756][ T10] libceph: connect (1)[c::]:6789 error -101 [ 454.740037][ T8963] ceph: No mds server is up or the cluster is laggy [ 454.742357][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.749787][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 455.124402][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 455.363844][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.372450][ T8976] batadv_slave_0: entered promiscuous mode [ 456.166383][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 456.247014][ T8940] Bluetooth: hci5: command tx timeout [ 456.599753][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.692893][ T8939] lo speed is unknown, defaulting to 1000 [ 456.700152][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 456.725422][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 456.771840][ T43] usb 2-1: SerialNumber: syz [ 457.541262][ T8956] (syz.1.858,8956,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 457.549990][ T8956] (syz.1.858,8956,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 457.570641][ T8983] overlay: filesystem on ./file1 not supported [ 457.597530][ T43] usb 2-1: 0:2 : does not exist [ 457.607751][ T43] usb 2-1: unit 5: unexpected type 0x09 [ 457.653418][ T43] usb 2-1: USB disconnect, device number 21 [ 457.830879][ T8993] dummy0: entered promiscuous mode [ 457.836465][ T8993] macsec1: entered allmulticast mode [ 457.903501][ T8993] dummy0: entered allmulticast mode [ 457.920037][ T6806] udevd[6806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.940191][ T8993] dummy0: left allmulticast mode [ 457.963637][ T8993] dummy0: left promiscuous mode [ 458.480660][ T8940] Bluetooth: hci5: command tx timeout [ 459.647615][ T9004] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 459.655392][ T9004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.870'. [ 459.697792][ T8939] chnl_net:caif_netlink_parms(): no params data found [ 459.924817][ T5874] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 459.951486][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 460.191198][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 460.221143][ T43] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 460.291019][ T9019] FAULT_INJECTION: forcing a failure. [ 460.291019][ T9019] name failslab, interval 1, probability 0, space 0, times 0 [ 460.304163][ T9019] CPU: 1 UID: 0 PID: 9019 Comm: syz.1.873 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 460.304191][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.304204][ T9019] Call Trace: [ 460.304212][ T9019] [ 460.304220][ T9019] dump_stack_lvl+0x189/0x250 [ 460.304253][ T9019] ? __pfx____ratelimit+0x10/0x10 [ 460.304285][ T9019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.304314][ T9019] ? __pfx__printk+0x10/0x10 [ 460.304340][ T9019] ? __pfx___might_resched+0x10/0x10 [ 460.304363][ T9019] ? fs_reclaim_acquire+0x7d/0x100 [ 460.304390][ T9019] should_fail_ex+0x414/0x560 [ 460.304416][ T9019] should_failslab+0xa8/0x100 [ 460.304449][ T9019] __kmalloc_noprof+0xcb/0x4f0 [ 460.304477][ T9019] ? kernfs_fop_write_iter+0x158/0x4f0 [ 460.304510][ T9019] kernfs_fop_write_iter+0x158/0x4f0 [ 460.304545][ T9019] vfs_write+0x54b/0xa90 [ 460.304577][ T9019] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 460.304606][ T9019] ? __pfx_vfs_write+0x10/0x10 [ 460.304646][ T9019] ? __fget_files+0x2a/0x420 [ 460.304675][ T9019] ksys_write+0x145/0x250 [ 460.304705][ T9019] ? __pfx_ksys_write+0x10/0x10 [ 460.304739][ T9019] ? do_syscall_64+0xbe/0x3b0 [ 460.304763][ T9019] do_syscall_64+0xfa/0x3b0 [ 460.304782][ T9019] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.304801][ T9019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.304821][ T9019] ? clear_bhb_loop+0x60/0xb0 [ 460.304845][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.304864][ T9019] RIP: 0033:0x7f9f66f8e969 [ 460.304882][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.304906][ T9019] RSP: 002b:00007f9f67da0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.304927][ T9019] RAX: ffffffffffffffda RBX: 00007f9f671b6160 RCX: 00007f9f66f8e969 [ 460.304942][ T9019] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 460.304954][ T9019] RBP: 00007f9f67da0090 R08: 0000000000000000 R09: 0000000000000000 [ 460.304966][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.304978][ T9019] R13: 0000000000000000 R14: 00007f9f671b6160 R15: 00007ffe4dab26f8 [ 460.305011][ T9019] [ 460.586952][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 460.594086][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 460.672243][ T43] usb 4-1: config 0 has no interface number 0 [ 460.694461][ T8940] Bluetooth: hci5: command tx timeout [ 460.703205][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=96.a7 [ 460.712429][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.723584][ T43] usb 4-1: Product: syz [ 460.727791][ T43] usb 4-1: Manufacturer: syz [ 460.732369][ T43] usb 4-1: SerialNumber: syz [ 460.746319][ T43] usb 4-1: config 0 descriptor?? [ 460.751380][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.770941][ T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.234/input/input25 [ 460.818738][ T5874] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.900204][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.912831][ T5874] usb 1-1: Product: syz [ 460.918810][ T5874] usb 1-1: Manufacturer: syz [ 460.944810][ T5874] usb 1-1: SerialNumber: syz [ 460.953838][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.970623][ T5874] usb 1-1: config 0 descriptor?? [ 460.980418][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.993061][ T5173] bcm5974 4-1:0.234: could not read from device [ 461.016473][ T5874] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.031051][ T8939] bridge_slave_0: entered allmulticast mode [ 461.059973][ T5173] bcm5974 4-1:0.234: could not read from device [ 461.071406][ T5874] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 461.143383][ T8939] bridge_slave_0: entered promiscuous mode [ 461.331423][ T5173] bcm5974 4-1:0.234: could not read from device [ 461.595742][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.612459][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.613977][ T43] usb 4-1: USB disconnect, device number 17 [ 461.620012][ T8939] bridge_slave_1: entered allmulticast mode [ 461.633066][ T5173] bcm5974 4-1:0.234: could not read from device [ 461.679957][ T8939] bridge_slave_1: entered promiscuous mode [ 461.727570][ T5874] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 461.943570][ T5874] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 462.141318][ T5874] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 462.843686][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.907061][ T5874] em28xx 1-1:0.0: No AC97 audio processor [ 462.919097][ T8940] Bluetooth: hci5: command tx timeout [ 462.944694][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.989603][ T5874] usb 1-1: USB disconnect, device number 32 [ 462.993807][ T9036] overlay: filesystem on ./file1 not supported [ 463.031251][ T5874] em28xx 1-1:0.0: Disconnecting em28xx [ 463.084167][ T5874] em28xx 1-1:0.0: Freeing device [ 463.889931][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 463.899624][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 463.911237][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 464.249159][ T8939] team0: Port device team_slave_0 added [ 464.344876][ T8939] team0: Port device team_slave_1 added [ 464.368390][ T30] audit: type=1326 audit(1748738686.442:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.417894][ T9055] input: syz0 as /devices/virtual/input/input26 [ 464.522500][ T30] audit: type=1326 audit(1748738686.442:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.556803][ T30] audit: type=1326 audit(1748738686.442:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.635687][ T30] audit: type=1326 audit(1748738686.442:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.691003][ T30] audit: type=1326 audit(1748738686.442:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.723599][ T30] audit: type=1326 audit(1748738686.470:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.768710][ T30] audit: type=1326 audit(1748738686.479:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.836938][ T30] audit: type=1326 audit(1748738686.479:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 464.894631][ T30] audit: type=1326 audit(1748738686.489:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 465.703504][ T980] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 465.744018][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.773165][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.782643][ T30] audit: type=1326 audit(1748738686.489:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 465.829945][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.859993][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.867020][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.932224][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 465.933305][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.959239][ T980] usb 4-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 465.999208][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.043669][ T980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.069057][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.098114][ T980] usb 4-1: Product: syz [ 466.102360][ T980] usb 4-1: Manufacturer: syz [ 466.102575][ T8939] hsr_slave_0: entered promiscuous mode [ 466.108100][ T980] usb 4-1: SerialNumber: syz [ 466.134017][ T8939] hsr_slave_1: entered promiscuous mode [ 466.169260][ T8939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.206637][ T8939] Cannot create hsr debugfs directory [ 466.423001][ T9067] loop2: detected capacity change from 0 to 7 [ 466.458169][ T9067] Dev loop2: unable to read RDB block 7 [ 466.467491][ T9067] loop2: AHDI p1 p2 p3 [ 466.472089][ T9067] loop2: partition table partially beyond EOD, truncated [ 466.488327][ T9067] loop2: p1 start 1601398130 is beyond EOD, truncated [ 466.495199][ T9067] loop2: p2 start 1702059890 is beyond EOD, truncated [ 466.532740][ T980] usb 4-1: 0:2 : does not exist [ 466.537727][ T980] usb 4-1: unit 9 not found! [ 466.637396][ T9072] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 466.665913][ T6809] udevd[6809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.673098][ T980] usb 4-1: USB disconnect, device number 18 [ 466.723290][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 466.746577][ T9073] netlink: 'syz.1.887': attribute type 3 has an invalid length. [ 466.754287][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 466.810631][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 467.619801][ T8939] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 467.682569][ T8939] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 467.746585][ T8939] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 467.809950][ T8939] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 468.189330][ T9085] overlay: filesystem on ./file1 not supported [ 468.375662][ T9070] lo speed is unknown, defaulting to 1000 [ 468.392873][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.265779][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.319854][ T9092] netlink: 'syz.3.893': attribute type 11 has an invalid length. [ 469.336574][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.343886][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.366993][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.374222][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.775900][ T9102] input: syz0 as /devices/virtual/input/input27 [ 470.538945][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 470.538964][ T30] audit: type=1326 audit(1748738692.213:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 470.559195][ T9114] input: syz1 as /devices/virtual/input/input28 [ 470.613990][ T30] audit: type=1326 audit(1748738692.223:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 470.772887][ T30] audit: type=1326 audit(1748738692.223:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 471.044113][ T30] audit: type=1326 audit(1748738692.232:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 471.325313][ T30] audit: type=1326 audit(1748738692.232:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 471.417554][ T30] audit: type=1326 audit(1748738692.232:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 471.490727][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.532330][ T30] audit: type=1326 audit(1748738692.232:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 471.609436][ T30] audit: type=1326 audit(1748738692.232:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 471.696414][ T30] audit: type=1326 audit(1748738692.232:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 472.501663][ T30] audit: type=1326 audit(1748738692.232:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9111 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57add8d2d0 code=0x7ffc0000 [ 474.096555][ T9130] overlayfs: failed to resolve './file1': -2 [ 474.484988][ T9149] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 474.501287][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.907'. [ 476.442362][ T8939] veth0_vlan: entered promiscuous mode [ 476.490924][ T8939] veth1_vlan: entered promiscuous mode [ 476.581360][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 476.614229][ T8939] veth0_macvtap: entered promiscuous mode [ 476.659791][ T8939] veth1_macvtap: entered promiscuous mode [ 476.720889][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.775678][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.820713][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 476.866658][ T8939] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.899888][ T8939] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.956561][ T8939] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.024610][ T8939] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.347945][ T9172] FAULT_INJECTION: forcing a failure. [ 477.347945][ T9172] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 477.361725][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.0.913 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 477.361753][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.361767][ T9172] Call Trace: [ 477.361776][ T9172] [ 477.361786][ T9172] dump_stack_lvl+0x189/0x250 [ 477.361822][ T9172] ? __pfx____ratelimit+0x10/0x10 [ 477.361856][ T9172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.361885][ T9172] ? __pfx__printk+0x10/0x10 [ 477.361908][ T9172] ? fs_reclaim_acquire+0x7d/0x100 [ 477.361941][ T9172] should_fail_ex+0x414/0x560 [ 477.361969][ T9172] prepare_alloc_pages+0x213/0x610 [ 477.362002][ T9172] __alloc_frozen_pages_noprof+0x123/0x370 [ 477.362031][ T9172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 477.362068][ T9172] ? policy_nodemask+0x27c/0x720 [ 477.362107][ T9172] ? kfree+0x18e/0x440 [ 477.362140][ T9172] alloc_pages_mpol+0x232/0x4a0 [ 477.362178][ T9172] alloc_pages_noprof+0xa9/0x190 [ 477.362212][ T9172] get_zeroed_page_noprof+0x1a/0x90 [ 477.362237][ T9172] uart_startup+0x351/0x13f0 [ 477.362277][ T9172] uart_ioctl+0x14e3/0x19c0 [ 477.362313][ T9172] ? preempt_schedule_irq+0xde/0x150 [ 477.362345][ T9172] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 477.362381][ T9172] ? __pfx_uart_ioctl+0x10/0x10 [ 477.362407][ T9172] ? irqentry_exit+0x74/0x90 [ 477.362426][ T9172] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.362458][ T9172] ? tty_ioctl+0x763/0xde0 [ 477.362488][ T9172] ? tty_jobctrl_ioctl+0x20/0xb70 [ 477.362517][ T9172] ? __pfx_tty_ioctl+0x10/0x10 [ 477.362547][ T9172] tty_ioctl+0x929/0xde0 [ 477.362576][ T9172] ? __pfx_tty_ioctl+0x10/0x10 [ 477.362603][ T9172] __se_sys_ioctl+0xf9/0x170 [ 477.362634][ T9172] do_syscall_64+0xfa/0x3b0 [ 477.362656][ T9172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.362676][ T9172] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 477.362695][ T9172] ? clear_bhb_loop+0x60/0xb0 [ 477.362721][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.362741][ T9172] RIP: 0033:0x7f143938e969 [ 477.362760][ T9172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.362779][ T9172] RSP: 002b:00007f143a11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.362801][ T9172] RAX: ffffffffffffffda RBX: 00007f14395b6160 RCX: 00007f143938e969 [ 477.362816][ T9172] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000005 [ 477.362829][ T9172] RBP: 00007f143a11e090 R08: 0000000000000000 R09: 0000000000000000 [ 477.362842][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.362855][ T9172] R13: 0000000000000000 R14: 00007f14395b6160 R15: 00007ffe98161cf8 [ 477.362888][ T9172] [ 478.265656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.940766][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.113255][ T4567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.140265][ T4567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.187926][ T9187] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 479.219259][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 479.219279][ T30] audit: type=1326 audit(1748738700.342:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9184 comm="syz.1.918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f66f8e969 code=0x0 [ 479.274692][ T2150] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 479.309256][ T9187] Cannot find add_set index 0 as target [ 479.323937][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.918'. [ 479.467033][ T2150] usb 1-1: Using ep0 maxpacket: 16 [ 479.487132][ T2150] usb 1-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 479.526540][ T2150] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.568786][ T2150] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.581699][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.759970][ T2150] usb 1-1: Product: syz [ 479.765064][ T2150] usb 1-1: Manufacturer: syz [ 479.770186][ T2150] usb 1-1: SerialNumber: syz [ 480.780330][ T2150] usb 1-1: 0:2 : does not exist [ 480.800689][ T2150] usb 1-1: unit 9 not found! [ 480.901312][ T2150] usb 1-1: USB disconnect, device number 33 [ 480.969617][ T6806] udevd[6806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.968149][ T30] audit: type=1326 audit(1748738702.914:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 482.043246][ T30] audit: type=1326 audit(1748738702.942:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 482.149745][ T30] audit: type=1326 audit(1748738702.942:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 482.663812][ T30] audit: type=1326 audit(1748738702.942:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 482.687382][ T30] audit: type=1326 audit(1748738702.942:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 482.710091][ T30] audit: type=1326 audit(1748738702.942:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 482.767535][ T30] audit: type=1326 audit(1748738702.942:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 482.982816][ T30] audit: type=1326 audit(1748738702.942:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 483.632296][ T30] audit: type=1326 audit(1748738702.942:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 484.300522][ T9239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.443971][ T9255] netlink: 128 bytes leftover after parsing attributes in process `syz.5.936'. [ 486.478632][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.936'. [ 486.516517][ T9257] loop2: detected capacity change from 0 to 7 [ 486.549442][ T6806] Dev loop2: unable to read RDB block 7 [ 486.571981][ T6806] loop2: AHDI p1 p2 p3 [ 486.595849][ T6806] loop2: partition table partially beyond EOD, truncated [ 486.643300][ T6806] loop2: p1 start 1601398130 is beyond EOD, truncated [ 486.680990][ T6806] loop2: p2 start 1702059890 is beyond EOD, truncated [ 486.718847][ T9257] Dev loop2: unable to read RDB block 7 [ 486.736549][ T9257] loop2: AHDI p1 p2 p3 [ 486.773633][ T9257] loop2: partition table partially beyond EOD, truncated [ 486.808433][ T9257] loop2: p1 start 1601398130 is beyond EOD, truncated [ 486.844556][ T9257] loop2: p2 start 1702059890 is beyond EOD, truncated [ 486.907515][ T5933] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 487.106187][ T5933] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 487.128851][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.751307][ T5933] usb 1-1: Product: syz [ 487.846304][ T5933] usb 1-1: Manufacturer: syz [ 487.951168][ T5933] usb 1-1: SerialNumber: syz [ 488.330705][ T5933] usb 1-1: config 0 descriptor?? [ 488.358753][ T5933] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 034 [ 489.557692][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.630436][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.705385][ T9260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.114598][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 490.752431][ T5933] (null): failure reading functionality [ 490.791202][ T5933] i2c i2c-1: failure reading functionality [ 490.808785][ T10] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 490.839085][ T5933] i2c i2c-1: connected i2c-tiny-usb device [ 490.844451][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 490.844472][ T30] audit: type=1326 audit(1748738711.211:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 490.873369][ T10] usb 6-1: config 0 has no interface number 0 [ 490.879495][ T5933] usb 1-1: USB disconnect, device number 34 [ 490.879521][ T10] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 490.933685][ T10] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.958206][ T30] audit: type=1326 audit(1748738711.267:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.019677][ T10] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 491.038969][ T30] audit: type=1326 audit(1748738711.267:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.066354][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.108733][ T10] usb 6-1: Product: syz [ 491.123946][ T10] usb 6-1: Manufacturer: syz [ 491.128612][ T10] usb 6-1: SerialNumber: syz [ 491.142720][ T30] audit: type=1326 audit(1748738711.286:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.168578][ T10] usb 6-1: config 0 descriptor?? [ 491.190820][ T9285] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 491.203326][ T30] audit: type=1326 audit(1748738711.286:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.213392][ T10] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 491.253557][ T10] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 491.280212][ T30] audit: type=1326 audit(1748738711.286:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.376489][ T30] audit: type=1326 audit(1748738711.286:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.452941][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.468855][ T30] audit: type=1326 audit(1748738711.286:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.525668][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.536935][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 491.558623][ T30] audit: type=1326 audit(1748738711.286:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57add8e969 code=0x7ffc0000 [ 491.592907][ T30] audit: type=1326 audit(1748738711.295:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9291 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57add8d2d0 code=0x7ffc0000 [ 491.752970][ T10] usb 6-1: USB disconnect, device number 2 [ 491.814544][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 491.868722][ T10] cyberjack 6-1:0.69: device disconnected [ 494.487166][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 495.213825][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 495.254041][ T5876] usb 6-1: config 0 has an invalid interface number: 183 but max is 0 [ 495.277719][ T5876] usb 6-1: config 0 has no interface number 0 [ 495.283944][ T5876] usb 6-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 495.334864][ T5876] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 495.352726][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.360794][ T5876] usb 6-1: Product: syz [ 495.388520][ T5876] usb 6-1: Manufacturer: syz [ 495.393189][ T5876] usb 6-1: SerialNumber: syz [ 495.584150][ T5876] usb 6-1: config 0 descriptor?? [ 495.590280][ T9316] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 495.736142][ T9337] netlink: 'syz.1.959': attribute type 2 has an invalid length. [ 496.549673][ T5876] net1080 6-1:0.183: probe with driver net1080 failed with error -71 [ 496.584208][ T5876] usb 6-1: USB disconnect, device number 3 [ 496.771928][ T9341] netlink: 'syz.0.963': attribute type 10 has an invalid length. [ 496.863726][ T9341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.963'. [ 501.243776][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 501.419115][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.974'. [ 501.504418][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 501.504436][ T30] audit: type=1326 audit(1748738721.192:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 501.633910][ T30] audit: type=1326 audit(1748738721.239:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 501.636372][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 501.671602][ T43] usb 4-1: no configurations [ 501.676262][ T43] usb 4-1: can't read configurations, error -22 [ 501.688676][ T30] audit: type=1326 audit(1748738721.239:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 501.711940][ T30] audit: type=1326 audit(1748738721.239:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 501.744126][ T30] audit: type=1326 audit(1748738721.239:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 502.336550][ T30] audit: type=1326 audit(1748738721.239:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 502.359012][ T30] audit: type=1326 audit(1748738721.239:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 502.381108][ T30] audit: type=1326 audit(1748738721.239:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 502.403681][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 502.473040][ T30] audit: type=1326 audit(1748738721.239:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 502.557161][ T30] audit: type=1326 audit(1748738721.239:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9385 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f66f8e969 code=0x7ffc0000 [ 502.612236][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 502.618482][ T43] usb 4-1: no configurations [ 502.638038][ T43] usb 4-1: can't read configurations, error -22 [ 502.678284][ T43] usb usb4-port1: attempt power cycle [ 502.974834][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 502.998967][ T9409] overlay: Unknown parameter 'fowner' [ 503.280211][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 503.321228][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 503.327553][ T43] usb 4-1: no configurations [ 503.409380][ T43] usb 4-1: can't read configurations, error -22 [ 504.505870][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.987'. [ 504.523591][ T9431] 9pnet_fd: Insufficient options for proto=fd [ 504.690783][ T9431] nftables ruleset with unbound set [ 504.970931][ T9423] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 505.249931][ T9440] fuse: Bad value for 'fd' [ 505.391539][ T9446] 9pnet_virtio: no channels available for device syz [ 505.519594][ T5876] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 505.563351][ T5900] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 505.712067][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 505.725927][ T5876] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.910775][ T5876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.920126][ T5876] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 505.929090][ T5900] usb 6-1: not running at top speed; connect to a high speed hub [ 506.267899][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.303996][ T5900] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.324014][ T5876] usb 1-1: config 0 descriptor?? [ 506.354857][ T5900] usb 6-1: config 1 interface 0 has no altsetting 0 [ 506.396991][ T5900] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.40 [ 506.417071][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.443678][ T5900] usb 6-1: Product: М [ 506.448111][ T5900] usb 6-1: Manufacturer: 骦坫䶣嚽♷臔燮剱눺Ί糿눉ᓸꛚ恥촼鄹ẋ덛븪麎巊飳 [ 506.495326][ T5900] usb 6-1: SerialNumber: syz [ 506.523699][ T9443] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 506.999948][ T5876] uclogic 0003:5543:0781.0003: ignoring exceeding usage max [ 507.000181][ T9436] overlay: Unknown parameter 'hash' [ 507.020023][ T5876] uclogic 0003:5543:0781.0003: unbalanced collection at end of report description [ 507.052535][ T5876] uclogic 0003:5543:0781.0003: parse failed [ 507.072298][ T5876] uclogic 0003:5543:0781.0003: probe with driver uclogic failed with error -22 [ 507.244694][ T5900] usbhid 6-1:1.0: can't add hid device: -71 [ 507.262730][ T5900] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 507.278448][ T5876] usb 1-1: USB disconnect, device number 35 [ 507.296203][ T5900] usb 6-1: USB disconnect, device number 4 [ 507.436954][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 507.436971][ T30] audit: type=1326 audit(1748738726.739:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9460 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0280d8e969 code=0x7ffc0000 [ 507.475598][ T30] audit: type=1326 audit(1748738726.767:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9460 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0280d8e969 code=0x7ffc0000 [ 507.752674][ T30] audit: type=1326 audit(1748738726.767:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9460 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0280d8e969 code=0x7ffc0000 [ 507.775184][ T30] audit: type=1326 audit(1748738726.767:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9460 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0280d8e969 code=0x7ffc0000 [ 507.826282][ T30] audit: type=1326 audit(1748738726.767:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9460 comm="syz.3.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0280d8e969 code=0x7ffc0000 [ 508.310714][ T9479] FAULT_INJECTION: forcing a failure. [ 508.310714][ T9479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.382309][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.4.1000 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 508.382341][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.382354][ T9479] Call Trace: [ 508.382363][ T9479] [ 508.382372][ T9479] dump_stack_lvl+0x189/0x250 [ 508.382410][ T9479] ? __pfx____ratelimit+0x10/0x10 [ 508.382443][ T9479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.382473][ T9479] ? __pfx__printk+0x10/0x10 [ 508.382507][ T9479] should_fail_ex+0x414/0x560 [ 508.382536][ T9479] _copy_to_user+0x31/0xb0 [ 508.382569][ T9479] simple_read_from_buffer+0xe1/0x170 [ 508.382606][ T9479] proc_fail_nth_read+0x1df/0x250 [ 508.382633][ T9479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.382659][ T9479] ? rw_verify_area+0x258/0x650 [ 508.382686][ T9479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.382711][ T9479] vfs_read+0x200/0x980 [ 508.382744][ T9479] ? __pfx___mutex_lock+0x10/0x10 [ 508.382767][ T9479] ? __pfx_vfs_read+0x10/0x10 [ 508.382796][ T9479] ? __fget_files+0x2a/0x420 [ 508.382821][ T9479] ? __fget_files+0x3a0/0x420 [ 508.382839][ T9479] ? __fget_files+0x2a/0x420 [ 508.382869][ T9479] ksys_read+0x145/0x250 [ 508.382895][ T9479] ? __fget_files+0x3a0/0x420 [ 508.382916][ T9479] ? __pfx_ksys_read+0x10/0x10 [ 508.382949][ T9479] ? do_syscall_64+0xbe/0x3b0 [ 508.382975][ T9479] do_syscall_64+0xfa/0x3b0 [ 508.382994][ T9479] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.383014][ T9479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.383034][ T9479] ? clear_bhb_loop+0x60/0xb0 [ 508.383070][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.383090][ T9479] RIP: 0033:0x7f57add8d37c [ 508.383109][ T9479] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 508.383127][ T9479] RSP: 002b:00007f57aeb80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.383148][ T9479] RAX: ffffffffffffffda RBX: 00007f57adfb6080 RCX: 00007f57add8d37c [ 508.383164][ T9479] RDX: 000000000000000f RSI: 00007f57aeb800a0 RDI: 0000000000000006 [ 508.383177][ T9479] RBP: 00007f57aeb80090 R08: 0000000000000000 R09: 0000000000000000 [ 508.383190][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.383202][ T9479] R13: 0000000000000001 R14: 00007f57adfb6080 R15: 00007ffd16bf97d8 [ 508.383234][ T9479] [ 509.714479][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 510.040320][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 510.049921][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 510.071814][ T9499] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 510.093515][ T9499] bridge0: port 5(team0) entered blocking state [ 510.590383][ T9499] bridge0: port 5(team0) entered disabled state [ 510.622163][ T9499] team0: entered allmulticast mode [ 510.647880][ T9499] team_slave_0: entered allmulticast mode [ 510.669633][ T9499] team_slave_1: entered allmulticast mode [ 510.706962][ T9499] team0: entered promiscuous mode [ 510.712074][ T9499] team_slave_0: entered promiscuous mode [ 510.789063][ T9499] team_slave_1: entered promiscuous mode [ 510.815196][ T9499] bridge0: port 5(team0) entered blocking state [ 510.821750][ T9499] bridge0: port 5(team0) entered forwarding state [ 510.868512][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 511.164303][ T9493] sctp: failed to load transform for md5: -2 [ 511.380754][ T9513] hsr_slave_1 (unregistering): left promiscuous mode [ 511.534458][ T9530] input: syz0 as /devices/virtual/input/input29 [ 511.645367][ T5876] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 512.106855][ T5876] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 512.175312][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.205713][ T5876] usb 4-1: Product: syz [ 512.221862][ T5876] usb 4-1: Manufacturer: syz [ 512.513362][ T5876] usb 4-1: SerialNumber: syz [ 512.586651][ T5876] usb 4-1: config 0 descriptor?? [ 512.609831][ T5876] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 512.892480][ T9548] input: syz1 as /devices/virtual/input/input30 [ 513.512801][ T5876] sonixb 4-1:0.0: Error writing register 01: -110 [ 513.537746][ T5876] sonixb 4-1:0.0: probe with driver sonixb failed with error -110 [ 515.406933][ T2150] usb 4-1: USB disconnect, device number 23 [ 515.793973][ T5933] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 516.019559][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 516.054121][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 516.155946][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.173573][ T5933] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 516.210672][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 516.218917][ T5933] usb 6-1: Product: syz [ 516.291795][ T5933] usb 6-1: Manufacturer: syz [ 516.298992][ T9567] overlay: filesystem on ./file1 not supported [ 516.323421][ T5933] usb 6-1: SerialNumber: syz [ 516.366723][ T5933] usb 6-1: config 0 descriptor?? [ 517.022118][ T9589] bio_check_eod: 2 callbacks suppressed [ 517.022161][ T9589] syz.3.1032: attempt to access beyond end of device [ 517.022161][ T9589] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 518.680370][ T2150] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 518.964500][ T2150] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 518.989280][ T2150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.032298][ T2150] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 519.068495][ T2150] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 519.106229][ T2150] usb 2-1: config 0 interface 0 has no altsetting 0 [ 519.134612][ T2150] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 519.196119][ T2150] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 519.237910][ T2150] usb 2-1: Product: syz [ 519.251518][ T2150] usb 2-1: Manufacturer: syz [ 519.259153][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 519.268807][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 519.271844][ T2150] usb 2-1: SerialNumber: syz [ 519.277908][ T9612] netlink: 'syz.4.1039': attribute type 7 has an invalid length. [ 519.296135][ T2150] usb 2-1: config 0 descriptor?? [ 519.306479][ T9598] lo speed is unknown, defaulting to 1000 [ 519.309153][ T2150] ldusb 2-1:0.0: Interrupt in endpoint not found [ 519.823659][ T10] usb 2-1: USB disconnect, device number 22 [ 520.175574][ T10] usb 6-1: USB disconnect, device number 5 [ 520.186355][ T9620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.311453][ T9628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1044'. [ 520.404786][ T9634] overlay: filesystem on ./file1 not supported [ 520.432806][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 520.440647][ T2150] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 520.676003][ T2150] usb 4-1: config 9 has an invalid interface number: 32 but max is 0 [ 520.721714][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 520.785803][ T2150] usb 4-1: config 9 has no interface number 0 [ 520.848484][ T43] usb 1-1: descriptor type invalid, skip [ 520.868336][ T2150] usb 4-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 520.898127][ T43] usb 1-1: descriptor type invalid, skip [ 520.933563][ T43] usb 1-1: descriptor type invalid, skip [ 520.959492][ T2150] usb 4-1: config 9 interface 32 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 521.014913][ T43] usb 1-1: config 1 interface 0 altsetting 48 bulk endpoint 0x1 has invalid maxpacket 32 [ 521.039801][ T2150] usb 4-1: config 9 interface 32 has no altsetting 0 [ 521.059431][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 521.076283][ T2150] usb 4-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 521.092967][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.104193][ T2150] usb 4-1: Product: syz [ 521.109406][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 521.130420][ T2150] usb 4-1: Manufacturer: syz [ 521.137664][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.148812][ T2150] usb 4-1: SerialNumber: syz [ 521.172290][ T43] usb 1-1: Product: syz [ 521.176639][ T43] usb 1-1: Manufacturer: syz [ 521.183576][ T43] usb 1-1: SerialNumber: syz [ 521.219280][ T9624] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 521.559726][ T2150] usb 4-1: USB disconnect, device number 24 [ 521.650739][ T43] usb 1-1: USB disconnect, device number 36 [ 521.748488][ T5933] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 521.951408][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 522.527027][ T5933] usb 6-1: unable to get BOS descriptor or descriptor too short [ 522.654020][ T5933] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 522.664309][ T5933] usb 6-1: can't read configurations, error -71 [ 523.766734][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1056'. [ 523.821001][ T9675] bridge0: port 3(vlan2) entered blocking state [ 523.828214][ T9675] bridge0: port 3(vlan2) entered disabled state [ 523.835877][ T9675] vlan2: entered allmulticast mode [ 523.841156][ T9675] bridge0: entered allmulticast mode [ 524.354233][ T9675] vlan2: left allmulticast mode [ 524.359370][ T9675] bridge0: left allmulticast mode [ 526.243755][ T9697] No control pipe specified [ 527.339896][ T9705] FAULT_INJECTION: forcing a failure. [ 527.339896][ T9705] name failslab, interval 1, probability 0, space 0, times 0 [ 527.378331][ T9705] CPU: 0 UID: 0 PID: 9705 Comm: syz.0.1067 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 527.378362][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.378375][ T9705] Call Trace: [ 527.378383][ T9705] [ 527.378393][ T9705] dump_stack_lvl+0x189/0x250 [ 527.378427][ T9705] ? __pfx____ratelimit+0x10/0x10 [ 527.378460][ T9705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.378490][ T9705] ? __pfx__printk+0x10/0x10 [ 527.378527][ T9705] ? __pfx___might_resched+0x10/0x10 [ 527.378562][ T9705] ? fs_reclaim_acquire+0x7d/0x100 [ 527.378589][ T9705] should_fail_ex+0x414/0x560 [ 527.378616][ T9705] should_failslab+0xa8/0x100 [ 527.378649][ T9705] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 527.378678][ T9705] ? __d_alloc+0x31/0x6f0 [ 527.378705][ T9705] __d_alloc+0x31/0x6f0 [ 527.378733][ T9705] d_alloc_pseudo+0x1f/0xb0 [ 527.378757][ T9705] alloc_file_pseudo+0xcc/0x210 [ 527.378783][ T9705] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 527.378810][ T9705] ? _raw_spin_unlock+0x28/0x50 [ 527.378838][ T9705] ? alloc_fd+0x64c/0x6c0 [ 527.378872][ T9705] anon_inode_getfile_fmode+0xb0/0x1c0 [ 527.378898][ T9705] __se_sys_fanotify_init+0x6b5/0x7e0 [ 527.378932][ T9705] do_syscall_64+0xfa/0x3b0 [ 527.378951][ T9705] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.378988][ T9705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.379008][ T9705] ? clear_bhb_loop+0x60/0xb0 [ 527.379034][ T9705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.379053][ T9705] RIP: 0033:0x7f143938e969 [ 527.379071][ T9705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.379088][ T9705] RSP: 002b:00007f143a160038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 527.379110][ T9705] RAX: ffffffffffffffda RBX: 00007f14395b5fa0 RCX: 00007f143938e969 [ 527.379125][ T9705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.379137][ T9705] RBP: 00007f143a160090 R08: 0000000000000000 R09: 0000000000000000 [ 527.379150][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.379162][ T9705] R13: 0000000000000000 R14: 00007f14395b5fa0 R15: 00007ffe98161cf8 [ 527.379195][ T9705] [ 529.454616][ T9724] input: syz0 as /devices/virtual/input/input31 [ 531.994899][ T9747] misc userio: No port type given on /dev/userio [ 535.300017][ T9751] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.600521][ T9767] input: syz1 as /devices/virtual/input/input32 [ 539.323801][ T9779] syzkaller1: entered promiscuous mode [ 539.329350][ T9779] syzkaller1: entered allmulticast mode [ 539.420141][ T9784] netlink: 'syz.3.1089': attribute type 16 has an invalid length. [ 539.847427][ T5810] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 541.151209][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 541.179113][ T5810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 541.215258][ T5810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 541.246849][ T5810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 541.259383][ T5810] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.294446][ T5810] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.324274][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.381009][ T9809] input: syz1 as /devices/virtual/input/input34 [ 541.567265][ T5810] usb 1-1: GET_CAPABILITIES returned 0 [ 541.583452][ T9819] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 541.613247][ T5810] usbtmc 1-1:16.0: can't read capabilities [ 542.667143][ T5810] usb 1-1: USB disconnect, device number 37 [ 544.493617][ T9849] FAULT_INJECTION: forcing a failure. [ 544.493617][ T9849] name failslab, interval 1, probability 0, space 0, times 0 [ 544.550719][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.4.1106 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 544.550750][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.550763][ T9849] Call Trace: [ 544.550772][ T9849] [ 544.550780][ T9849] dump_stack_lvl+0x189/0x250 [ 544.550814][ T9849] ? __pfx____ratelimit+0x10/0x10 [ 544.550847][ T9849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.550877][ T9849] ? __pfx__printk+0x10/0x10 [ 544.550905][ T9849] ? ref_tracker_alloc+0x318/0x460 [ 544.550932][ T9849] should_fail_ex+0x414/0x560 [ 544.550960][ T9849] should_failslab+0xa8/0x100 [ 544.550995][ T9849] kmem_cache_alloc_noprof+0x73/0x3c0 [ 544.551025][ T9849] ? skb_clone+0x212/0x3a0 [ 544.551060][ T9849] skb_clone+0x212/0x3a0 [ 544.551094][ T9849] __netlink_deliver_tap+0x404/0x850 [ 544.551134][ T9849] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.551161][ T9849] netlink_deliver_tap+0x19c/0x1b0 [ 544.551189][ T9849] netlink_unicast+0x72f/0x8d0 [ 544.551224][ T9849] netlink_sendmsg+0x805/0xb30 [ 544.551260][ T9849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.551295][ T9849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.551314][ T9849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.551339][ T9849] __sock_sendmsg+0x219/0x270 [ 544.551364][ T9849] ____sys_sendmsg+0x505/0x830 [ 544.551398][ T9849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.551436][ T9849] ? import_iovec+0x74/0xa0 [ 544.551467][ T9849] ___sys_sendmsg+0x21f/0x2a0 [ 544.551498][ T9849] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.551566][ T9849] ? __fget_files+0x2a/0x420 [ 544.551586][ T9849] ? __fget_files+0x3a0/0x420 [ 544.551616][ T9849] __x64_sys_sendmsg+0x19b/0x260 [ 544.551647][ T9849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.551694][ T9849] ? __pfx_ksys_write+0x10/0x10 [ 544.551719][ T9849] ? rcu_is_watching+0x15/0xb0 [ 544.551748][ T9849] ? do_syscall_64+0xbe/0x3b0 [ 544.551773][ T9849] do_syscall_64+0xfa/0x3b0 [ 544.551792][ T9849] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.551811][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.551831][ T9849] ? clear_bhb_loop+0x60/0xb0 [ 544.551855][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.551874][ T9849] RIP: 0033:0x7f57add8e969 [ 544.551893][ T9849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.551911][ T9849] RSP: 002b:00007f57aeba1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.551933][ T9849] RAX: ffffffffffffffda RBX: 00007f57adfb5fa0 RCX: 00007f57add8e969 [ 544.551948][ T9849] RDX: 00000000000400c0 RSI: 00002000000006c0 RDI: 0000000000000003 [ 544.551961][ T9849] RBP: 00007f57aeba1090 R08: 0000000000000000 R09: 0000000000000000 [ 544.551974][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.551987][ T9849] R13: 0000000000000000 R14: 00007f57adfb5fa0 R15: 00007ffd16bf97d8 [ 544.552019][ T9849] [ 544.583099][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 544.709681][ T9855] overlay: filesystem on ./file1 not supported [ 544.975599][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 545.198152][ T10] usb 6-1: config 7 has an invalid interface number: 83 but max is 0 [ 545.229076][ T10] usb 6-1: config 7 has no interface number 0 [ 545.386508][ T10] usb 6-1: config 7 interface 83 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0 [ 545.442936][ T10] usb 6-1: No eUSB2 isoc ep 7 companion for config 7 interface 83 altsetting 254 [ 545.463380][ T10] usb 6-1: config 7 interface 83 has no altsetting 0 [ 545.493062][ T10] usb 6-1: string descriptor 0 read error: -22 [ 545.499559][ T10] usb 6-1: New USB device found, idVendor=19d2, idProduct=0145, bcdDevice=44.f5 [ 545.527681][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.581453][ T10] option 6-1:7.83: GSM modem (1-port) converter detected [ 545.820634][ T10] usb 6-1: USB disconnect, device number 8 [ 545.840529][ T10] option 6-1:7.83: device disconnected [ 547.140059][ T10] kernel write not supported for file /nvram (pid: 10 comm: kworker/0:1) [ 547.264275][ T9895] input: syz1 as /devices/virtual/input/input35 [ 547.753350][ T9906] lo speed is unknown, defaulting to 1000 [ 547.819309][ T9908] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.849145][ T9908] overlayfs: failed to resolve './file1/file0': -2 [ 548.761543][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 549.046118][ T10] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 549.153765][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.404628][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 549.413740][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.437987][ T10] usb 6-1: SerialNumber: syz [ 549.467089][ T10] usb 6-1: 0:2 : does not exist [ 549.485463][ T10] usb 6-1: unit 48 not found! [ 549.768107][ T10] usb 6-1: USB disconnect, device number 9 [ 549.889747][ T9922] xt_hashlimit: max too large, truncated to 1048576 [ 550.140006][ T9928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.504971][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1138'. [ 550.843612][ T9930] openvswitch: netlink: Missing key (keys=40, expected=80) [ 550.859440][ T9936] input: syz1 as /devices/virtual/input/input36 [ 556.095140][ T9992] input: syz1 as /devices/virtual/input/input37 [ 556.115713][ T5882] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 556.278992][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 556.286730][ T5882] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 556.300457][ T5882] usb 2-1: config 150 has no interface number 0 [ 556.325572][ T5882] usb 2-1: config 150 interface 204 has no altsetting 0 [ 556.354028][ T5882] usb 2-1: config 150 interface 1 has no altsetting 0 [ 556.372229][ T5882] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 556.402079][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.410492][ T5882] usb 2-1: Product: syz [ 556.414794][ T5882] usb 2-1: Manufacturer: syz [ 556.431715][ T5882] usb 2-1: SerialNumber: syz [ 557.029263][ T5882] xr_serial 2-1:150.204: xr_serial converter detected [ 557.126476][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 557.147600][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 557.158338][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 557.196188][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 557.204674][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 557.839470][ T5876] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 557.890661][T10000] lo speed is unknown, defaulting to 1000 [ 557.960861][ T5882] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 558.012703][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.034729][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 558.063691][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 558.082260][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.100251][ T5876] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 558.111535][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.120222][ T5876] usb 6-1: Product: syz [ 558.125149][ T5876] usb 6-1: Manufacturer: syz [ 558.130324][ T5876] usb 6-1: SerialNumber: syz [ 558.140005][ T5876] usb 6-1: config 0 descriptor?? [ 558.146839][T10005] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 559.047618][ T5876] rc_core: IR keymap rc-imon-rsc not found [ 559.110706][ T5876] Registered IR keymap rc-empty [ 559.141170][ T5876] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 559.162783][T10000] chnl_net:caif_netlink_parms(): no params data found [ 559.170424][ T5882] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 559.182994][ T5876] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input39 [ 559.293890][ T5933] usb 6-1: USB disconnect, device number 10 [ 559.336649][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 559.350619][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.365600][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.376208][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.389180][ T5882] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 559.389817][ T5833] Bluetooth: hci2: command tx timeout [ 559.404606][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.416497][ T5882] usb 1-1: config 0 descriptor?? [ 559.475854][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.483351][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.494464][T10000] bridge_slave_0: entered allmulticast mode [ 559.503992][T10000] bridge_slave_0: entered promiscuous mode [ 559.513441][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.515431][T10032] input: syz1 as /devices/virtual/input/input40 [ 559.522414][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.534882][T10000] bridge_slave_1: entered allmulticast mode [ 559.544145][T10000] bridge_slave_1: entered promiscuous mode [ 559.626450][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.645692][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.715366][T10000] team0: Port device team_slave_0 added [ 559.729931][T10000] team0: Port device team_slave_1 added [ 559.865425][ T5882] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 559.900821][ T5882] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 559.919934][ T5882] microsoft 0003:045E:07DA.0004: no inputs found [ 559.927757][ T5882] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 560.281466][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.289921][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.937033][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.970898][T10043] openvswitch: netlink: Missing key (keys=40, expected=100) [ 560.977523][ T5810] usb 2-1: USB disconnect, device number 23 [ 560.997461][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.018080][ T5810] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 561.037676][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.077733][ T5810] xr_serial 2-1:150.204: device disconnected [ 561.127832][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.191756][T10052] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1173'. [ 561.268111][T10000] hsr_slave_0: entered promiscuous mode [ 561.269651][T10000] hsr_slave_1: entered promiscuous mode [ 561.285614][T10000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.285670][T10000] Cannot create hsr debugfs directory [ 561.367912][ T5882] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 561.528142][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 561.530589][ T5882] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 561.530616][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.530637][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.536081][ T5882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.536113][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.536136][ T5882] usb 6-1: Product: syz [ 561.536153][ T5882] usb 6-1: Manufacturer: syz [ 561.536170][ T5882] usb 6-1: SerialNumber: syz [ 561.620997][ T5833] Bluetooth: hci2: command tx timeout [ 561.712219][T10000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.718943][T10000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.724421][T10000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.728855][T10000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 562.523299][ T5882] usb 6-1: 0:2 : does not exist [ 562.564720][ T5882] usb 6-1: USB disconnect, device number 11 [ 562.594328][ T5900] usb 1-1: USB disconnect, device number 38 [ 562.689032][T10000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.723384][T10000] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.750611][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.750762][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.772106][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.772223][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.803464][T10061] overlayfs: failed to resolve './file0': -2 [ 562.895340][T10000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.848920][ T5833] Bluetooth: hci2: command tx timeout [ 564.546716][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.554003][T10085] binder: BINDER_SET_CONTEXT_MGR already set [ 564.554055][T10085] binder: 10081:10085 ioctl 4018620d 200000000040 returned -16 [ 564.555891][T10085] binder: 10081:10085 ioctl 4018620d 0 returned -22 [ 566.273608][ T5833] Bluetooth: hci2: command tx timeout [ 566.324057][T10101] No control pipe specified [ 567.539695][T10000] veth0_vlan: entered promiscuous mode [ 567.556434][T10000] veth1_vlan: entered promiscuous mode [ 567.636025][T10000] veth0_macvtap: entered promiscuous mode [ 567.656775][T10000] veth1_macvtap: entered promiscuous mode [ 567.723467][T10000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.759122][T10000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.840707][T10000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.872693][T10000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.926201][T10000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.951156][T10132] input: syz1 as /devices/virtual/input/input41 [ 567.972725][T10000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.461161][T10107] lo speed is unknown, defaulting to 1000 [ 568.531810][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.552642][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.731282][ T5949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.758946][ T5949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.503539][T10169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.260986][T10177] overlayfs: missing 'lowerdir' [ 572.569576][T10197] input: syz0 as /devices/virtual/input/input42 [ 575.271301][T10218] sctp: failed to load transform for md5: -2 [ 575.309130][T10232] overlayfs: missing 'lowerdir' [ 576.083601][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1223'. [ 576.093687][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1221'. [ 576.134929][T10243] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 576.840153][T10260] input: syz0 as /devices/virtual/input/input44 [ 579.301895][T10269] netlink: 'syz.1.1231': attribute type 6 has an invalid length. [ 579.924686][T10239] lo speed is unknown, defaulting to 1000 [ 580.045871][T10289] overlayfs: missing 'lowerdir' [ 581.111944][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1238'. [ 581.137804][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1238'. [ 581.805973][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.405547][ T30] audit: type=1804 audit(1748738796.866:408): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1244" name="/newroot/273/bus" dev="tmpfs" ino=1470 res=1 errno=0 [ 582.508049][T10321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.516775][T10321] batadv_slave_0: entered promiscuous mode [ 584.560721][T10333] overlayfs: missing 'lowerdir' [ 584.811373][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.820239][T10341] batadv_slave_0: entered promiscuous mode [ 586.402876][ T30] audit: type=1326 audit(1748738800.598:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 586.529190][ T30] audit: type=1326 audit(1748738800.598:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 586.646222][ T30] audit: type=1326 audit(1748738800.598:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 586.670007][T10353] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 586.687773][T10353] netlink: 'syz.5.1252': attribute type 3 has an invalid length. [ 586.695643][T10353] netlink: 'syz.5.1252': attribute type 3 has an invalid length. [ 586.703445][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 586.837521][ T30] audit: type=1326 audit(1748738800.598:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 586.860796][ T30] audit: type=1326 audit(1748738800.598:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 587.904403][ T30] audit: type=1326 audit(1748738800.626:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 587.995331][ T30] audit: type=1326 audit(1748738800.626:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 588.208511][ T30] audit: type=1326 audit(1748738800.626:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 588.447760][ T30] audit: type=1326 audit(1748738800.635:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 588.597076][ T30] audit: type=1326 audit(1748738800.635:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 588.628122][ T30] audit: type=1326 audit(1748738800.635:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 589.396575][ T30] audit: type=1326 audit(1748738800.635:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 589.515492][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 589.564782][ T30] audit: type=1326 audit(1748738800.635:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 589.601337][ T30] audit: type=1326 audit(1748738800.635:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 589.632323][ T30] audit: type=1326 audit(1748738800.635:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe047f8e969 code=0x7ffc0000 [ 590.812178][T10380] overlayfs: missing 'lowerdir' [ 590.938313][ T5810] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 591.111617][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 591.135961][ T5810] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 591.156305][ T5810] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 591.194190][ T5810] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 591.232786][ T5810] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 591.270755][ T5810] usb 5-1: config 0 interface 0 has no altsetting 0 [ 591.310487][ T5810] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 591.350563][ T5810] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 591.381290][ T5810] usb 5-1: Product: syz [ 591.385529][ T5810] usb 5-1: Manufacturer: syz [ 591.402027][ T5810] usb 5-1: SerialNumber: syz [ 591.453556][ T5810] usb 5-1: config 0 descriptor?? [ 591.480266][ T5810] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 591.518075][ T5810] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 591.555577][T10396] fuse: Bad value for 'rootmode' [ 591.853424][ T5810] usb 5-1: USB disconnect, device number 17 [ 591.871637][ T5810] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 597.576519][ T5900] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 598.488467][ T5900] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 598.679592][ T5900] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 598.843877][ T5900] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 599.933213][ T5900] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 600.115582][ T5900] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 600.152565][ T5900] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 600.171273][ T5900] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 600.210072][ T5900] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 600.249419][ T5810] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 600.258981][ T5900] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 600.441620][ T5900] usb 1-1: string descriptor 0 read error: -22 [ 600.448334][ T5900] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 600.535822][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.588562][ T5900] adutux 1-1:246.0: interrupt endpoints not found [ 601.639034][ T5876] usb 1-1: USB disconnect, device number 39 [ 606.094631][T10504] NILFS (nbd4): device size too small [ 606.888450][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 612.015638][T10506] lo speed is unknown, defaulting to 1000 [ 613.980070][ T10] usb 7-1: unable to read config index 0 descriptor/all [ 614.125390][ T5900] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 614.162208][ T10] usb 7-1: can't read configurations, error -110 [ 614.296367][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 614.352000][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.384152][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.420636][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 614.456940][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 614.468182][ T5900] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 614.697272][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.347089][ T5900] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 615.576488][ T5900] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 615.590077][ T5900] usb 1-1: Manufacturer: syz [ 615.631876][ T5900] usb 1-1: config 0 descriptor?? [ 615.647477][ T5900] usb 1-1: can't set config #0, error -71 [ 615.748859][ T5900] usb 1-1: USB disconnect, device number 40 [ 615.845344][T10577] overlay: filesystem on ./file1 not supported [ 616.755622][T10595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.834957][ T5876] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 618.046078][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 618.071704][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 618.102353][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 618.116868][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 618.127378][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 618.139299][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 618.245077][ T5900] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 618.487732][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 618.535109][ T5900] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 618.601145][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.118265][ T5876] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 619.121526][ T5900] usb 6-1: config 0 descriptor?? [ 619.127455][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.127481][ T5876] usb 1-1: Product: syz [ 619.127497][ T5876] usb 1-1: Manufacturer: syz [ 619.127513][ T5876] usb 1-1: SerialNumber: syz [ 619.168737][ T5876] usb 1-1: config 0 descriptor?? [ 619.180512][ T5900] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 619.297266][T10618] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1320'. [ 619.310545][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 619.330334][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 619.654940][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 619.876008][ T5900] gspca_vc032x: reg_w err -71 [ 619.949840][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.064449][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.174757][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.212184][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.219547][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.229856][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.236316][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.294076][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.299444][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.347565][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.352923][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.373958][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.384570][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.391473][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.400706][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.417637][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.417946][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.432936][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.454413][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.455345][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.465617][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.491998][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.511287][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.518523][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.521751][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.541359][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.557260][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.563523][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.563541][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.563551][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.563561][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.563571][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.563581][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.563591][ T5900] gspca_vc032x: I2c Bus Busy Wait 00 [ 620.563614][ T5900] gspca_vc032x: Unknown sensor... [ 620.563694][ T5900] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 620.573213][ T5900] usb 6-1: USB disconnect, device number 12 [ 620.617135][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.666166][ T5876] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 620.695929][ T5876] input input46: Timeout waiting for response from device. [ 620.745249][ T5876] usb 1-1: USB disconnect, device number 41 [ 622.182512][T10648] input: syz0 as /devices/virtual/input/input47 [ 622.818395][T10652] overlay: filesystem on ./file1 not supported [ 622.831090][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 622.858349][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 622.880917][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 622.907465][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1333'. [ 623.541108][T10671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.549941][T10671] batadv_slave_0: entered promiscuous mode [ 624.288964][T10672] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 624.300776][T10672] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 624.312023][T10672] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 624.994539][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 626.226470][T10693] input: syz0 as /devices/virtual/input/input48 [ 627.003243][T10702] input: syz1 as /devices/virtual/input/input49 [ 627.029150][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 627.029170][ T30] audit: type=1400 audit(1748738838.603:476): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10701 comm="syz.6.1347" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 [ 627.558710][T10700] overlayfs: failed to resolve './file1': -2 [ 630.288388][T10728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.311873][T10728] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 630.425708][T10728] bond0: (slave gre0): Error -95 calling set_mac_address [ 630.683625][T10736] input: syz0 as /devices/virtual/input/input50 [ 635.292859][T10760] tipc: Started in network mode [ 635.308675][T10760] tipc: Node identity ac14140f, cluster identity 4711 [ 635.334191][T10760] tipc: Enabled bearer , priority 10 [ 636.525056][ T5900] tipc: Node number set to 2886997007 [ 636.554502][ T5874] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 637.097322][ T5874] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 637.321329][ T5874] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 637.398956][ T5874] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 637.462649][ T5874] usb 7-1: config 220 has no interface number 2 [ 637.484637][ T5874] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 637.525859][ T5874] usb 7-1: config 220 interface 0 has no altsetting 0 [ 637.556847][ T5874] usb 7-1: config 220 interface 76 has no altsetting 0 [ 637.584623][ T5874] usb 7-1: config 220 interface 1 has no altsetting 0 [ 637.604670][ T5874] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 637.625440][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.650824][ T5874] usb 7-1: Product: syz [ 637.660445][ T5874] usb 7-1: Manufacturer: syz [ 637.687352][ T5874] usb 7-1: SerialNumber: syz [ 637.744276][T10786] input: syz0 as /devices/virtual/input/input51 [ 638.571968][T10795] bond0: (slave rose0): Enslaving as an active interface with an up link [ 639.428809][ T5874] usb 7-1: selecting invalid altsetting 0 [ 639.457192][ T5874] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 639.484573][ T5874] usb 7-1: No valid video chain found. [ 639.527904][ T5874] usb 7-1: selecting invalid altsetting 0 [ 639.533714][ T5874] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 639.615596][ T5874] usb 7-1: USB disconnect, device number 5 [ 639.692301][T10802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1364'. [ 641.153128][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1371'. [ 642.854377][T10826] overlay: filesystem on ./file1 not supported [ 643.189990][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 643.229675][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 643.250366][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 643.274261][T10839] input: syz0 as /devices/virtual/input/input52 [ 643.324299][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 643.341378][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 643.695810][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.008098][T10840] tipc: Enabling of bearer rejected, already enabled [ 644.134301][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 644.142067][ T5876] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 644.191101][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.283823][ T10] usb 2-1: device descriptor read/64, error -71 [ 644.308620][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.330250][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 644.349768][ T5876] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 644.375226][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.401313][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.402229][ T5810] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 644.432943][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 644.450933][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.486013][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 644.523839][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.564141][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.583097][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 644.627256][ T5810] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 644.635780][ T5810] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 644.666847][ T5810] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 644.714442][ T5810] usb 7-1: config 220 has no interface number 2 [ 644.744782][ T10] usb 2-1: device descriptor read/64, error -71 [ 644.756552][ T5810] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 644.781265][ T5876] usb 5-1: usb_control_msg returned -32 [ 644.797645][ T5810] usb 7-1: config 220 interface 0 has no altsetting 0 [ 644.808189][ T5876] usbtmc 5-1:16.0: can't read capabilities [ 644.820287][ T5810] usb 7-1: config 220 interface 76 has no altsetting 0 [ 644.833855][T10833] lo speed is unknown, defaulting to 1000 [ 644.849767][ T5810] usb 7-1: config 220 interface 1 has no altsetting 0 [ 644.861434][ T10] usb usb2-port1: attempt power cycle [ 644.881623][ T5810] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 644.903671][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.911739][ T5810] usb 7-1: Product: syz [ 644.939101][ T5810] usb 7-1: Manufacturer: syz [ 644.954803][ T5810] usb 7-1: SerialNumber: syz [ 645.027578][ T12] bridge_slave_1: left allmulticast mode [ 645.046873][ T12] bridge_slave_1: left promiscuous mode [ 645.054776][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.111985][ T12] bridge_slave_0: left allmulticast mode [ 645.127945][ T12] bridge_slave_0: left promiscuous mode [ 645.149608][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.246081][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 645.292224][ T10] usb 2-1: device descriptor read/8, error -71 [ 645.558181][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 645.589568][ T10] usb 2-1: device descriptor read/8, error -71 [ 645.617795][ T5833] Bluetooth: hci5: command tx timeout [ 645.740609][ T10] usb usb2-port1: unable to enumerate USB device [ 646.853977][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.889083][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.910681][ T12] bond0 (unregistering): Released all slaves [ 646.971994][T10869] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 646.984121][T10869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 646.994079][T10869] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 647.130699][ T5876] usb 5-1: USB disconnect, device number 18 [ 647.310141][ T12] ================================================================== [ 647.318269][ T12] BUG: KASAN: user-memory-access in tipc_crypto_stop+0x1fb/0x430 [ 647.326033][ T12] Write of size 4 at addr 00000000ffff00c0 by task kworker/u8:0/12 [ 647.333968][ T12] [ 647.336313][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 647.336338][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.336353][ T12] Workqueue: netns cleanup_net [ 647.336381][ T12] Call Trace: [ 647.336390][ T12] [ 647.336399][ T12] dump_stack_lvl+0x189/0x250 [ 647.336430][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.336458][ T12] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 647.336491][ T12] ? tipc_crypto_stop+0x1fb/0x430 [ 647.336517][ T12] ? tipc_crypto_stop+0x1fb/0x430 [ 647.336541][ T12] kasan_report+0x118/0x150 [ 647.336572][ T12] ? tipc_crypto_stop+0x1fb/0x430 [ 647.336600][ T12] kasan_check_range+0x2b0/0x2c0 [ 647.336631][ T12] tipc_crypto_stop+0x1fb/0x430 [ 647.336655][ T12] ? tipc_crypto_stop+0xea/0x430 [ 647.336681][ T12] tipc_exit_net+0x7b/0x140 [ 647.336702][ T12] ops_undo_list+0x49a/0x990 [ 647.336734][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 647.336763][ T12] cleanup_net+0x4c5/0x8a0 [ 647.336787][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 647.336811][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.336838][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 647.336860][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 647.336883][ T12] process_scheduled_works+0xade/0x17b0 [ 647.336920][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.336951][ T12] worker_thread+0x8a0/0xda0 [ 647.336986][ T12] kthread+0x711/0x8a0 [ 647.337015][ T12] ? __pfx_worker_thread+0x10/0x10 [ 647.337037][ T12] ? __pfx_kthread+0x10/0x10 [ 647.337064][ T12] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 647.337091][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.337108][ T12] ? __pfx_kthread+0x10/0x10 [ 647.337135][ T12] ret_from_fork+0x3fc/0x770 [ 647.337157][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 647.337180][ T12] ? __switch_to_asm+0x39/0x70 [ 647.337197][ T12] ? __switch_to_asm+0x33/0x70 [ 647.337214][ T12] ? __pfx_kthread+0x10/0x10 [ 647.337240][ T12] ret_from_fork_asm+0x1a/0x30 [ 647.337267][ T12] [ 647.337274][ T12] ================================================================== [ 647.361438][T10882] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 647.519528][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.674775][T10882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1384'. [ 647.789002][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 647.796283][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 647.807947][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.818031][ T12] Workqueue: netns cleanup_net [ 647.822847][ T12] Call Trace: [ 647.826153][ T12] [ 647.829106][ T12] dump_stack_lvl+0x99/0x250 [ 647.833917][ T12] ? __asan_memcpy+0x40/0x70 [ 647.838556][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.843792][ T12] ? __pfx__printk+0x10/0x10 [ 647.848420][ T12] panic+0x2db/0x790 [ 647.852349][ T12] ? __pfx_preempt_schedule+0x10/0x10 [ 647.857760][ T12] ? __pfx_panic+0x10/0x10 [ 647.862195][ T12] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 647.868112][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 647.874450][ T12] ? tipc_crypto_stop+0x1fb/0x430 [ 647.879486][ T12] check_panic_on_warn+0x89/0xb0 [ 647.884437][ T12] ? tipc_crypto_stop+0x1fb/0x430 [ 647.889479][ T12] end_report+0x78/0x160 [ 647.893732][ T12] kasan_report+0x129/0x150 [ 647.898329][ T12] ? tipc_crypto_stop+0x1fb/0x430 [ 647.903357][ T12] kasan_check_range+0x2b0/0x2c0 [ 647.908303][ T12] tipc_crypto_stop+0x1fb/0x430 [ 647.913152][ T12] ? tipc_crypto_stop+0xea/0x430 [ 647.918093][ T12] tipc_exit_net+0x7b/0x140 [ 647.922602][ T12] ops_undo_list+0x49a/0x990 [ 647.927196][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 647.932308][ T12] cleanup_net+0x4c5/0x8a0 [ 647.936729][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 647.941673][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.946881][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 647.952619][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 647.958383][ T12] process_scheduled_works+0xade/0x17b0 [ 647.963966][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.969964][ T12] worker_thread+0x8a0/0xda0 [ 647.974572][ T12] kthread+0x711/0x8a0 [ 647.978650][ T12] ? __pfx_worker_thread+0x10/0x10 [ 647.983774][ T12] ? __pfx_kthread+0x10/0x10 [ 647.988375][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.993590][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.998787][ T12] ? __pfx_kthread+0x10/0x10 [ 648.003383][ T12] ret_from_fork+0x3fc/0x770 [ 648.007981][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 648.013099][ T12] ? __switch_to_asm+0x39/0x70 [ 648.017880][ T12] ? __switch_to_asm+0x33/0x70 [ 648.022660][ T12] ? __pfx_kthread+0x10/0x10 [ 648.027266][ T12] ret_from_fork_asm+0x1a/0x30 [ 648.032063][ T12] [ 648.035426][ T12] Kernel Offset: disabled [ 648.039763][ T12] Rebooting in 86400 seconds..