last executing test programs: 15m34.952966833s ago: executing program 32 (id=1002): timer_create(0x3, 0x0, &(0x7f0000001400)) (async) clock_gettime(0x6, &(0x7f00000000c0)={0x0, 0x0}) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000370000000000000000d829ca4b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r3, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000073000040"]) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000340)="93", 0x1}], 0x1, 0x2, 0xc92b, 0x6) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002108ec28080000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{r0, r1+60000000}, {r9, r10+10000000}}, 0x0) (async) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r11, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r13 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) (async) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r14, 0xc0bc5310, &(0x7f00000000c0)={0x18}) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r13, 0xc0745645, &(0x7f0000000040)={0x9, [0x0, 0xfff, 0x6, 0x4, 0x15, 0xfff, 0xfff, 0xb, 0x5, 0x1, 0xf29f, 0x6, 0x594, 0xfffd, 0x2, 0x8, 0x8, 0x1ff, 0x0, 0x80, 0x200, 0x6, 0x54c, 0x1, 0x2, 0x1b8, 0x6, 0x3, 0x7, 0x0, 0x1, 0x0, 0x401, 0x6, 0x2, 0x3, 0x8000, 0x7, 0x4, 0x7, 0x51, 0x1ff, 0x4, 0x8, 0xa, 0xad1, 0xb]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='rxrpc_notify_socket\x00', r8, 0x0, 0xfffffffffffffff4}, 0x18) (async) ioctl$HIDIOCGUCODE(r12, 0xc018480d, &(0x7f0000000100)={0x1, 0x200, 0x1, 0x1200000, 0xfffffe00, 0xf51}) (async) unshare(0x40000000) 15m18.641693256s ago: executing program 1 (id=1124): socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000013000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) 15m17.337613274s ago: executing program 1 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xd228, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="cd1c0f81a34f8e7959553132d7cb8d418ee9b7271495f452cf7504b611bbc9804e4060b85cf0d7b9e50bce9e8ce9cc8db6af7fc30dea021e788bf809eb5792b0d70e1cbdb302331d62e7b32fb273609ae0b05b8a382ebc8a58201a6fcac62a855dff9b22dca633e2e3d6e7871179262a7a0f2be2a6719f7eaf50bb7aad3d446e4691c6c6f7b0e669c47d332053ccec74372d1cfddafc259b75b09587bd63360cd3ba82cfb0d32d8ebca4c92d762952826891ea6215ed73bf681a7de78c5a07ef41ec3ebcdd820330"}) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000600)={0x1, 0xfffffffb, 0x8, 0x579, 0x7fff, 0x8001, 0xa, 0x9, 0x70, 0x4, 0x4, 0x6}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000140)={0x8f, 0x0, 0x10}) 15m17.113429997s ago: executing program 1 (id=1133): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000d40)={0x55, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) unshare(0x6a000600) unshare(0x60000a00) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x0, 0x385}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x104, &(0x7f0000000240)=0xe2, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x3}}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x6, "f6a6946c9832508c"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x44, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0) r7 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_dump={0x7e, 0x4, 0x8, 0x81, "5d1cfaef8b10005a1d3e85507383eba69a039f3901b19aae8bb665afd1a6e63095b5860f69a8c9e9656b3ba67e199049d7f9ced841a3fb03179d46a5bcf5315562af4b2f24080d4ad94d277a297ef0c7742a532ed796fc361540962ad2ce5870393c096bb2937f85bcf4aea72f63d526ae2e744fe43dcd92fc75c99d745721061d"}}) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) read$dsp(r6, &(0x7f0000002200)=""/4128, 0x1020) creat(&(0x7f0000000000)='./file0\x00', 0xc2) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x2, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x42) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r9, &(0x7f0000000180)=ANY=[], 0x6c) 15m16.136832096s ago: executing program 1 (id=1140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000005002000000000000000040"]) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') getpid() r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905810345a5"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="200008000000c000fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000002140)={{0x12, 0x1, 0x0, 0x8d, 0xdf, 0xb2, 0x40, 0xb49, 0x64f, 0xd4fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x1, 0xe6, 0xf6, 0x52, 0x0, [], [{{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3d, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x101, 0xff, 0x1, {0x22, 0xa9c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x9, 0xe, 0x8, 0x4}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7, 0xf000, 0xff81, [0xffff5f, 0x3f00, 0x10100ff, 0xc030]}]}, 0x2, [{0xc2, &(0x7f00000000c0)=@string={0xc2, 0x3, "273cb14ae5ea4ce9bf6f7a2e3f3523b8669f22cebbde2ae3f5fa05ff7af2cab99ce51723d76ab8b76f1c63651fd70fe0e4e586332458c3d34fa4f7278cfd830d8be1c5b2203687fd83a8bdb7de1de1f6cebcf0efe8feac454e9a8120aabb296acfdde21de0bebc7a57841c49df8d0316012e2570e05bc96b0a9e868389611d2fbd4f3c83b6e46fdabec7c3a9089265c142029e1363c1cbec97cb40c0913d65481b1055f30f30c30ff49ca35f69220d3e09fedb415bc11021da55682c4bf8e459"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x430}}]}) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0x4e23, 0x1000000080000, @mcast2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x4}, 0x0) 15m12.466527539s ago: executing program 1 (id=1149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000240)="9f", 0x1}], 0x2, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000180)="57ef4faab23aae50a54c41bc6ce752789c5baa47bfb3bb4ddd5e813b602bcbb876fd49d4dc85daf2731372b3554215323400007ce5603a7539af5fafd422c3a2b162542175b8ea30afd8464d9d522612af4722afffc855d77caf815e05666fe669863467bcb7aa4bfc0a19137cc84b077b0f32ff029752265424d7a8fc33df02", 0x3f, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='\t']) 15m11.779388881s ago: executing program 1 (id=1150): syz_clone(0x40008000, &(0x7f0000000040)="30c66f7d1a", 0x5, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="c8887f3742ec5825451e7c70dbfd4b5195438eeccc62c980e2ab26de5e4b86280a470c04acda0501bb45d7570e72a0db6aaaf3799018edfe124e5ffe3a49df099c021e9dc1bd413c5ac723b9f098329a3e74ffc696a985782309f7729236888c6a58987ac62e375b3b286eb5cd658cd9bc8e9f2c0038ccad23253e9dae283b3257605728c1ae51aab71650") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000040900"/18, @ANYRES64=r3, @ANYBLOB='\x00'/21], 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x9e) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x540, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@generic="d6057a9295c84e783bddf800e80ff247ddcdb6e5991b43b1f54f68565fc5ce6ddf2e303f871c564a9b6f232b0a353e236307e2925a3303a7d75f33360f70cd83791e0209448d589a655dc601a4f4f415017adc15d09209a6eea53154850f7547c52a0d27babc41e39f087628efc5e2c1b31045f6a95d08ac900053e13bebebb9642c7320ea507258ae043bc9753ef8a08fcdfd6d18d0e592e2e69c4eefedfc", @nested={0x488, 0x1, 0x0, 0x1, [@nested={0x47f, 0x13, 0x0, 0x1, [@nested={0x169, 0x87, 0x0, 0x1, [@generic="a26499d5a10ddec1de0e1a07f3ff83f3d375b1c374d74e675d7b07998e4d8e41186c3af8619bd9735831b344a7a708a83f06897bd204f4d45b7ae978dbf7530cafabd98532bbbaa006f44fff9e5708c732038f64f653421ffd389f95f86b2acb6e76a325b30023feda77d0834c1bcf967ee1d553dfe7066d2d15e3a72c101e6c87e4fe92fb9e7db97b2bcb89fe346c5c6b34bd665ba75f00e043347a3a0c180d6d9f149278543ae27fa69821b07040adb1c4a5a6", @generic="0e4160213e30dc19302b5852a19309c37016b09dcea2cf3588f81615cbdd9d8b11c4545acff81a54e2d4bbb26d61d70565fb0bc73e52a438cea3b46bcc8090c5e95c5ff64acd875f668713a571e91702832cf9e31edb83484d516422da11fbd4027acea64da2327482ba6a1e373c97e045daf0", @nested={0x4, 0xfc}, @nested={0x4, 0x82}, @generic="337209a224ab3257ab3471592b30e9d10a0a67dc38fd7af6decdad96242c45cb7dfdf53887a4eab30798", @nested={0x4, 0x14d}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@local}]}, @nested={0xd6, 0x1, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="fc1a273dabb7006781828fd0b2e19e8fd2a4ef4209ced13aeaef165b82ef4e19f3230f367ee1ba859c67d451ea25a59c15652f4b5b99c1af5e2a3967967bfe31269ae28a188b1964025b2b174e27e971841d3d0e12ffff6768b97920f5e42c1fd0ab544ed7aeee07a7897511ae8d2360f804be9ac67ea5579a0990022a8b73c2c4b657fd28f35f3380e10c2e5c552d70de0906030be9a2ead052928b33b9e882ef2afe28f1832cd08a2a469408b84992bd725e5715fe2a5608796f951c22f377c0406412624134f68630"]}, @nested={0x10d, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="0a49018775d751c3c7b54f2af361630a8d1cc7ca1de52f76e22d4eefa9137fa04b4867aeff310293eae909d2335536d33ffdfd3b3d4498fa90902b6f67e54880d5a05734473800bd36e8ad12cb476868e928fa5fb520227f25b23f024b9a7c55317e3bf2900d26eaf5cd", @generic="a67b50d57d4a7958dc26fe2882c465a11f7829e98fe4b80b276cfc1c957228c16afa6dc97b5376d510d26ab20b059a744779af3d9fc97eb2bbff6d3d338b8ff917d3b812a2b8ce6c47b1d9ef1e85cdacea96e1af9988d06df1bab53a61224fde01b851ff75c31de43b54f5f9cddac8155a0dd150e2b0cfb70db228385e32a958f60d11257dbf711102ac04283473b6ada2dcc0", @nested={0x4, 0x13e}]}, @generic="e141a4da0df99807f4a653e98c967d97bfeb75503ddaab5486792093e589aab324a0ab7a27e06198802eff7820b4d035", @generic="28f8a092b5ed69af5e9760cf186f877d62c0af82e5090b8101790a453a69e83b2053a4f48f2997c74ae0d06de0e015ec5cc50b64630b75c647e840ae7bc223e888fe3f867236a98a231aa1b19a8902e932df73d4dc82d28abb260d838204647ae8ae9fab235a019910fdcc20a631a23840449923a96b8baa490c0dce12c088dc5d029489c247510bf4547f2d46f43ffbbc5c8b83bc6ab5d63e8ad2833719f7d51ec206a9f2ae187e5480fbfc00f39c9a9c52ce9ffc7aabf1fe455b6f24f2eccf081c0fd788808647285669821934f8169c5729106a098137d9ffb32e654795", @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x10, 0x61, 0x0, 0x1, [@nested={0x4, 0x130}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0xe6}]}]}, @nested={0x4, 0x65}]}, @typed={0x4, 0x8}]}, 0x540}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 15m11.610745663s ago: executing program 33 (id=1150): syz_clone(0x40008000, &(0x7f0000000040)="30c66f7d1a", 0x5, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="c8887f3742ec5825451e7c70dbfd4b5195438eeccc62c980e2ab26de5e4b86280a470c04acda0501bb45d7570e72a0db6aaaf3799018edfe124e5ffe3a49df099c021e9dc1bd413c5ac723b9f098329a3e74ffc696a985782309f7729236888c6a58987ac62e375b3b286eb5cd658cd9bc8e9f2c0038ccad23253e9dae283b3257605728c1ae51aab71650") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000040900"/18, @ANYRES64=r3, @ANYBLOB='\x00'/21], 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x9e) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x540, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@generic="d6057a9295c84e783bddf800e80ff247ddcdb6e5991b43b1f54f68565fc5ce6ddf2e303f871c564a9b6f232b0a353e236307e2925a3303a7d75f33360f70cd83791e0209448d589a655dc601a4f4f415017adc15d09209a6eea53154850f7547c52a0d27babc41e39f087628efc5e2c1b31045f6a95d08ac900053e13bebebb9642c7320ea507258ae043bc9753ef8a08fcdfd6d18d0e592e2e69c4eefedfc", @nested={0x488, 0x1, 0x0, 0x1, [@nested={0x47f, 0x13, 0x0, 0x1, [@nested={0x169, 0x87, 0x0, 0x1, [@generic="a26499d5a10ddec1de0e1a07f3ff83f3d375b1c374d74e675d7b07998e4d8e41186c3af8619bd9735831b344a7a708a83f06897bd204f4d45b7ae978dbf7530cafabd98532bbbaa006f44fff9e5708c732038f64f653421ffd389f95f86b2acb6e76a325b30023feda77d0834c1bcf967ee1d553dfe7066d2d15e3a72c101e6c87e4fe92fb9e7db97b2bcb89fe346c5c6b34bd665ba75f00e043347a3a0c180d6d9f149278543ae27fa69821b07040adb1c4a5a6", @generic="0e4160213e30dc19302b5852a19309c37016b09dcea2cf3588f81615cbdd9d8b11c4545acff81a54e2d4bbb26d61d70565fb0bc73e52a438cea3b46bcc8090c5e95c5ff64acd875f668713a571e91702832cf9e31edb83484d516422da11fbd4027acea64da2327482ba6a1e373c97e045daf0", @nested={0x4, 0xfc}, @nested={0x4, 0x82}, @generic="337209a224ab3257ab3471592b30e9d10a0a67dc38fd7af6decdad96242c45cb7dfdf53887a4eab30798", @nested={0x4, 0x14d}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@local}]}, @nested={0xd6, 0x1, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="fc1a273dabb7006781828fd0b2e19e8fd2a4ef4209ced13aeaef165b82ef4e19f3230f367ee1ba859c67d451ea25a59c15652f4b5b99c1af5e2a3967967bfe31269ae28a188b1964025b2b174e27e971841d3d0e12ffff6768b97920f5e42c1fd0ab544ed7aeee07a7897511ae8d2360f804be9ac67ea5579a0990022a8b73c2c4b657fd28f35f3380e10c2e5c552d70de0906030be9a2ead052928b33b9e882ef2afe28f1832cd08a2a469408b84992bd725e5715fe2a5608796f951c22f377c0406412624134f68630"]}, @nested={0x10d, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="0a49018775d751c3c7b54f2af361630a8d1cc7ca1de52f76e22d4eefa9137fa04b4867aeff310293eae909d2335536d33ffdfd3b3d4498fa90902b6f67e54880d5a05734473800bd36e8ad12cb476868e928fa5fb520227f25b23f024b9a7c55317e3bf2900d26eaf5cd", @generic="a67b50d57d4a7958dc26fe2882c465a11f7829e98fe4b80b276cfc1c957228c16afa6dc97b5376d510d26ab20b059a744779af3d9fc97eb2bbff6d3d338b8ff917d3b812a2b8ce6c47b1d9ef1e85cdacea96e1af9988d06df1bab53a61224fde01b851ff75c31de43b54f5f9cddac8155a0dd150e2b0cfb70db228385e32a958f60d11257dbf711102ac04283473b6ada2dcc0", @nested={0x4, 0x13e}]}, @generic="e141a4da0df99807f4a653e98c967d97bfeb75503ddaab5486792093e589aab324a0ab7a27e06198802eff7820b4d035", @generic="28f8a092b5ed69af5e9760cf186f877d62c0af82e5090b8101790a453a69e83b2053a4f48f2997c74ae0d06de0e015ec5cc50b64630b75c647e840ae7bc223e888fe3f867236a98a231aa1b19a8902e932df73d4dc82d28abb260d838204647ae8ae9fab235a019910fdcc20a631a23840449923a96b8baa490c0dce12c088dc5d029489c247510bf4547f2d46f43ffbbc5c8b83bc6ab5d63e8ad2833719f7d51ec206a9f2ae187e5480fbfc00f39c9a9c52ce9ffc7aabf1fe455b6f24f2eccf081c0fd788808647285669821934f8169c5729106a098137d9ffb32e654795", @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x10, 0x61, 0x0, 0x1, [@nested={0x4, 0x130}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0xe6}]}]}, @nested={0x4, 0x65}]}, @typed={0x4, 0x8}]}, 0x540}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 7m17.350993401s ago: executing program 0 (id=2820): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x2b1, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x3, 0xe6}, 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000080)={0x80}) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25DELFWD(r2, 0x89eb, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4800) 7m17.253895828s ago: executing program 0 (id=2822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x10000, 0xf1}}, 0x50) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x2, 0x6}}, 0x28) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88001) fstat(r3, 0x0) 7m16.626991768s ago: executing program 0 (id=2824): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_CAPBSET_READ(0x59616d61, 0xdaffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 7m15.827652868s ago: executing program 0 (id=2826): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x88901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x46, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xf8, 0x7d, 0x8f, 0x8, 0x19d2, 0xffa0, 0x380e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x4, 0x6f, 0xfe}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x0, 0x6, 0x3, [@generic={0x7, 0x5, "85dbd1502b"}]}}, {{0x9, 0x5, 0x9b, 0x3, 0x3ff, 0x3a, 0xff, 0x4}}]}}]}}]}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x201) 7m12.059695567s ago: executing program 0 (id=2838): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000980)={@val={0x0, 0x9100}, @void, @eth={@empty, @random="1f00", @val, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x56) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000980)={@val={0x0, 0x9100}, @void, @eth={@empty, @random="1f00", @val, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x56) (async) 7m11.823063963s ago: executing program 0 (id=2841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m11.562593995s ago: executing program 34 (id=2841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m37.77944639s ago: executing program 4 (id=3796): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000700)}) io_uring_enter(r2, 0x400567, 0x3, 0x18, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x800}, &(0x7f0000000100), &(0x7f0000000500)=0x0) syz_io_uring_setup(0x8c67, &(0x7f0000000580)={0x0, 0xe2c9, 0x4, 0x4000000, 0xb6, 0x0, r5}, &(0x7f0000000300)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) pipe2(&(0x7f0000000040), 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000103810101400000000000109022400010000000009040002010300020009210000640122f80409058103ff05000000a28ba219d5a0cb1a5c0234e1cef8713d9fcac17d754f53632b28600867129a1a8206ffe853118268f595b3"], 0x0) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008beb00"/28], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000000000000080072b7c34589748c7a945f125b380e8bcbb60117428f35eea84d989da9abb92bd7049bc2c88a790550de9b7035799add22f210835430953dfcc4b9ac381c30ad8ef365826ca0b0b37fc598b224b871ecf35b7712af32a9ee7a6672874c18af788689ea109ffd75b0f06c48f129e0d87810c622d3b521ea5295e58ab1d5ebaf3fc9f0f1b5747b3bbf06", @ANYRES32, @ANYRES8, @ANYRES64=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) clock_getres(0xfffffffffffffff5, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r13, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 2m33.984739993s ago: executing program 4 (id=3806): fdatasync(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x2000, 0x11) shutdown(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0xfe, 0x7, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0xffffffff, 0x4}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@mcast2, r2}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x4, 0x2, 0x2, 0x4, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x1, 0x7f, 0xc6}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x6, 'geneve1\x00', {0x5}, 0x6}) getpid() chdir(&(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x3ff}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x21, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e20, 0x3, 'sed\x00', 0x10, 0x10001, 0x8}, 0x2c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000d, 0x1010, r1, 0xcf53b000) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x58, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x47}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x68, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0xb0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeda6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3c4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x12c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "e3930101233ddca0d6a44a8fe6a367488d943b5c303523598fb1cd914760ec8327a79d06c6dc6b33f8e2476dcffc89e7ce1d92b398bfd8e5313a38cd7da9a85bcd3ade405e6051cde8090d02708043f0988c9c2df620e3f05b355b427e632b175ce757fb78d15fe2585beefd091a5b23f91cc95dd482e73ffe2262a48c8dec3b2a84843fdb848166ff1d99c24055334f33641966d0b3e2f65f784686c663855af699f4ae510d0cb6f177e49297f421ff24a3f6b41b0273fcd33216557c18c10d0515e6cc2d59f7601801249dcfb18c2b78d651a8179cfe"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x134, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x418}, 0x1, 0x0, 0x0, 0x24040802}, 0x90) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000800), 0x10) recvmsg$kcm(r0, &(0x7f0000000a00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/42, 0x2a}], 0x1, &(0x7f0000000940)=""/144, 0x90}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000b80)) r6 = syz_open_dev$sndmidi(&(0x7f0000000bc0), 0x1000, 0x40000) fallocate(r6, 0x14, 0x3fd8, 0x3) r7 = syz_open_dev$vcsu(&(0x7f0000000c00), 0x5, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000c40)=@usbdevfs_connect={0x2}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000c80)={0x0, 0x3, 0xffff50f2, 0xfffffff9, 0x0, [], [0x2ed3, 0x62, 0x9, 0x3], [0x1, 0x4, 0x4, 0xdd01], [0x400, 0xb, 0x3, 0x7]}) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x3, 0x40) bind$inet6(r1, &(0x7f0000000d40)={0xa, 0x4e21, 0x3, @loopback, 0x3f}, 0x1c) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048890}, 0x0) 2m33.747435618s ago: executing program 4 (id=3808): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001400)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f0000000640)=[{0x0}], 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000800)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)) 2m31.958579636s ago: executing program 4 (id=3814): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000000)='./file0\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000032c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f0000568400"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={r7, r5, r6}) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet(0x2, 0x2, 0x0) sendmsg$xdp(r3, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002080)="1b0ee37eada90bccb713494252422e83eefb5fbf43a2c8dcae89ec9ca817bdec534d4187b7ee98d0937f", 0x2a}, {&(0x7f00000020c0)="94fd4216fcff9176d44cee5bb0fa19eb7f10010a4d86477d8ee9eb3303cc739cfb4115e413647a39bcbfe1b5db48fac8dca38539cb8aecebdb8977e31d8e39bca7613c", 0x43}, {&(0x7f0000002140)="91ae6c6e46e7f9c46bf4480f6df4258baad17869219acc4d1063c85cc0b2f972475b0fc16f6a3f5b60f695334b8d3993319d864405c1c480e7012857850a048c8b80c1171f7144508a864d24", 0x4c}, {&(0x7f00000021c0)="285739b106ccc80d4ad5e2b0577d9712e2f7b77eee721e40e2b75d13e64a86e69aee68ed184ccdd0f2ea", 0x2a}, {&(0x7f0000002200)="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", 0x1000}], 0x5, 0x0, 0x0, 0x44010}, 0x2000c844) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={r11, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000200)={r11, 0x3, 0x6}, 0x10) close_range(r8, r9, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000a00)={r7, r5, r6}) write$vhost_msg(r0, 0x0, 0x0) 2m31.743404027s ago: executing program 4 (id=3818): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) syz_open_dev$dri(&(0x7f0000000140), 0x1f7, 0x284043) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f00000001c0)={@loopback, @private=0xa010100, @broadcast}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f00000004c0)=@ethtool_coalesce={0x7}}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x50, 0x4) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r3}) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) 2m31.529809137s ago: executing program 4 (id=3820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 2m30.591638543s ago: executing program 35 (id=3820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 2m25.759152036s ago: executing program 3 (id=3836): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000000c0)='/.//', &(0x7f0000000300)='./file0\x00', 0x0, 0x2089038, 0x0) 2m25.016363365s ago: executing program 3 (id=3838): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005"], 0x48) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x831}, 0x48080) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x2, 0x0, 0xfffffffffffffffe, 0x1, 0x4, {0x6, 0x80, 0x8, 0x8, 0x0, 0x5, 0x6, 0x800, 0x6, 0x2000, 0x7fffffff, r8, r9, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m20.603227546s ago: executing program 3 (id=3845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000200), &(0x7f0000000080)=@tcp6=r5}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000200), &(0x7f0000000080)=@udp=r3}, 0x20) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000f4000040"]) 2m20.310653887s ago: executing program 3 (id=3850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, r2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010300a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905f6fefffffff000072501"], 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000200)=0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x1e, "020a2b8aa2012c974c8bf8f423d129eb3133272ad87483127ce6fb7e71cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x8140aecc, &(0x7f0000000140)) 2m15.859476396s ago: executing program 3 (id=3863): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "dee8c1f5884ca573752f759fd1a1a16b15f34cbf1520e9bf3f3a2649714ed865b4d4e66f9a99ca41772fb702b0b1b2abffafb55c59a02411a61b920a5f5e85d0", 0x12}, 0x48, 0xfffffffffffffffb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xe0003, 0x0, [0x5, 0x0, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x8000003]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200010000040009c46f005ee1cdd836e808bb047a8118e0e99264310ca6104786156c0c72f1fbce930d137f5afecc89ab4142a71c4620b582e366572492b2553f1a44b3d6554825d9e14f464d25f18f8fc992c3e76e6b90074709ca6c959d"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x0, 0x67b}]}, 0x10) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r7, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000200)) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5d, 0x2}, &(0x7f0000000240)=0x8) keyctl$unlink(0x9, r0, r0) add_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="ae9bfc513ec85b4caf4dde6bbd12b5a679f5f8a173b596643ff612c7921c26897370bcbe91d6ac72478db842be1f67f2", 0x30, r0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='neigh_create\x00', r8, 0x0, 0x81}, 0x18) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000480)={0x4, 0x8, "4c19ea", 0x8, 0x1}) 2m12.440713432s ago: executing program 3 (id=3877): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x20004094) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000006c0)) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m56.204613742s ago: executing program 36 (id=3877): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x20004094) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000006c0)) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m17.211964265s ago: executing program 9 (id=4082): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x5fc, 0x65, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x5b8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x598, 0x7, [@m_ct={0x100, 0x3, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x4, 0x7, 0xfffff374, 0xf}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}]}, {0x99, 0x6, "1426d3280c9cede5ba3cf25b98b07c1f8bef126c99570c2540016528250f2ac782c3ccf707baef0a06e6063cbc26b1cc375787fd6b9f5a1a38fd65271e32c2972849923cc64febec8211584cad96587bd88f07785ddb6602c2b61bca929bc21252b5f720a779344f4af3c4bd64975321ea2c0f39aa5977c66f631a58b5d1ad29c6e2db23d343014c6d413ef3e670e8ad417c1f0d75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x70, 0x17, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffa, 0xffff, 0x6, 0x7fff, 0xbd32}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa}]}, {0x15, 0x6, "8494f004bfb8659a599d2d1a48b8890c87"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x160, 0x15, 0x0, 0x0, {{0x7}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x72, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a02000100000000000000000000000046f841e7f4b3add6227cac237ad6ba7242b5dbca42a31eec5e9ba2dc7c4bb3e660541faa6688ce0ed8f8996c9b4cc2b9aa987f7f564f9a07c36dd8b96ab89c3e5b4adc68151ae2be1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x68, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x29, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xa4, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x75, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0xf8, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x69, 0x6, "df9a6806000000000000002a7c6a5ea7f10d7b15c41faef3da9f4375bd8f91553172863ecfe1c9e3d8c1d8dd79d4c84e29271134e8cff9e780ec3751c8a6148ad92a817319a415c6e73c921365afc6b961922a2ca77717589fb39927c99e587fa5834a0000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1m16.948434123s ago: executing program 9 (id=4083): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x4000000000000e9, 0x12) 1m16.361801044s ago: executing program 9 (id=4085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendto$inet6(r1, 0x0, 0x0, 0x20004000, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000280)=r2) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000500)=ANY=[@ANYBLOB="db000000", @ANYBLOB="166d70acf6f3c77895c6a122c5e1fb4db13224eaa31cd4aa3f8971ed197dbc072e5ac91e27c70502a34a4c4ed12a3884ce52f34c74a260750197aa9cc59c04f42b89d228f236c76fc52bf2a1fa26f6cc4603458361313f8187a351ac498684ef3a8d9b3732c545c8d6c8f7892151fee4b0c1d81a4335f39345e823125f62ee5ad8d563a2089fa5eb1094658341f3d13487599cee8709a77645ce862620c18a60db0fa38e7a837dafb772c2722de535ee66bb9f8d7302eed7eca89ccf7dacd3741a7bdca9d5", @ANYBLOB="27040000000000000000010000000800020000000000080001327d2924931b3e48d4d612744c9d5111"], 0x24}}, 0x0) 1m15.602725331s ago: executing program 9 (id=4086): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x673b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x20000090) prlimit64(0x0, 0x9, &(0x7f00000001c0)={0xd, 0x57}, &(0x7f0000000200)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x561000, 0x0) r3 = eventfd(0x80) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000280)={0x2, r3}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000002c0), 0x4) connect$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x95, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff, 0x2}, 0xe) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000340)={0x4, 0x8, 0x0, 0xfffffffd}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0x10, 0x8) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={0x0, @private}, &(0x7f00000005c0)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4f, 0x4f, 0x4, [@datasec={0xa, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x101, 0x5d}, {0x3, 0x9, 0x9}], "3b1dcb"}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x3}}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000680)=""/1, 0x6c, 0x1, 0x1, 0x5, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x8, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x28b}, @ldst={0x0, 0x1, 0x4, 0x9, 0x1, 0x80, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x6, 0x8, 0x7, 0xfffffffffffffff4}], &(0x7f0000000440)='GPL\x00', 0x200, 0xcc, &(0x7f0000000480)=""/204, 0x41100, 0x10, '\x00', r5, @fallback=0xf, r6, 0x8, &(0x7f0000000700)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x3, 0x3}, 0x10, 0x0, r2, 0x2, &(0x7f0000000780)=[r2, r2, r2], &(0x7f00000007c0)=[{0x3, 0x5, 0xd, 0x5}, {0x5, 0x4, 0x9, 0xb}], 0x10, 0x1, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000085}, 0xc801) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000a40)={0x6, 0xe1, 0x9}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r9, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x810) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000c00), 0x1, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000002cc0)={0x50, 0xfffffffffffffff5, r11, {0x7, 0x29, 0x10001, 0x210, 0x8, 0x83bb, 0x1, 0x3, 0x0, 0x0, 0x8, 0x2}}, 0x50) r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002d40), 0x800, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000002d80)=0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002dc0)={'vlan0\x00'}) lremovexattr(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)=@random={'btrfs.', ':\x00'}) 1m14.208884429s ago: executing program 9 (id=4090): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x430200) dup2(r1, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6c, &(0x7f0000000340)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x36, 0x3a, 0x0, @mcast2, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, [], "1e520b4c951e"}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="280000000000000029000000050000"], 0x28}}], 0x1, 0x400c1) unshare(0x400) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x423f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) epoll_create1(0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff2d000200475400f6a13bb1000000080089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 1m14.043567005s ago: executing program 9 (id=4091): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) socket$inet_sctp(0x2, 0x5, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1e9466c122a68ebdfdf89c767e35b713dfc9ce56cb25736225d8f5e55060d4943dc6f6c27669387fe274365535bd695f9668a9caac66aa1e72d5bfa16d833a2cdf561364d0ea8b6e68cf141ed3c9700611", 0x51}, {&(0x7f0000000240)="a55b40f1af471a3d1c25e38a16e5e655dd3f", 0x12}, {&(0x7f00000003c0)="f9f97de490242b2fd3c48ab30072ebf8eb59463c55edf8c11213b59800a5fb83467d049d4f80648ef5834fa9da1d7a0c1ff0b04d9904a3bbae2d09ad5fc9d0a4588799c051e14be09af0f0fe5d2c226c1d09cf68aa981a4094daa1ad7d", 0x5d}], 0x3}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) setrlimit(0x1, &(0x7f0000000000)) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000440)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "293107b352f4611750eb8ddaf17a1c4b11cae791673d41465971b8064c09441a", 0x6, 0x8, 0x468, 0x86e}, 0x3c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000200)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(r7, 0x0, 0xfdef) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1e9466c122a68ebdfdf89c767e35b713dfc9ce56cb25736225d8f5e55060d4943dc6f6c27669387fe274365535bd695f9668a9caac66aa1e72d5bfa16d833a2cdf561364d0ea8b6e68cf141ed3c9700611", 0x51}, {&(0x7f0000000240)="a55b40f1af471a3d1c25e38a16e5e655dd3f", 0x12}, {&(0x7f00000003c0)="f9f97de490242b2fd3c48ab30072ebf8eb59463c55edf8c11213b59800a5fb83467d049d4f80648ef5834fa9da1d7a0c1ff0b04d9904a3bbae2d09ad5fc9d0a4588799c051e14be09af0f0fe5d2c226c1d09cf68aa981a4094daa1ad7d", 0x5d}], 0x3}}], 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async) setrlimit(0x1, &(0x7f0000000000)) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000440)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "293107b352f4611750eb8ddaf17a1c4b11cae791673d41465971b8064c09441a", 0x6, 0x8, 0x468, 0x86e}, 0x3c) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) (async) write$P9_RVERSION(r0, &(0x7f0000000200)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) write$FUSE_DIRENTPLUS(r7, 0x0, 0xfdef) (async) 57.974939268s ago: executing program 37 (id=4091): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) socket$inet_sctp(0x2, 0x5, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1e9466c122a68ebdfdf89c767e35b713dfc9ce56cb25736225d8f5e55060d4943dc6f6c27669387fe274365535bd695f9668a9caac66aa1e72d5bfa16d833a2cdf561364d0ea8b6e68cf141ed3c9700611", 0x51}, {&(0x7f0000000240)="a55b40f1af471a3d1c25e38a16e5e655dd3f", 0x12}, {&(0x7f00000003c0)="f9f97de490242b2fd3c48ab30072ebf8eb59463c55edf8c11213b59800a5fb83467d049d4f80648ef5834fa9da1d7a0c1ff0b04d9904a3bbae2d09ad5fc9d0a4588799c051e14be09af0f0fe5d2c226c1d09cf68aa981a4094daa1ad7d", 0x5d}], 0x3}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) setrlimit(0x1, &(0x7f0000000000)) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000440)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "293107b352f4611750eb8ddaf17a1c4b11cae791673d41465971b8064c09441a", 0x6, 0x8, 0x468, 0x86e}, 0x3c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000200)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(r7, 0x0, 0xfdef) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1e9466c122a68ebdfdf89c767e35b713dfc9ce56cb25736225d8f5e55060d4943dc6f6c27669387fe274365535bd695f9668a9caac66aa1e72d5bfa16d833a2cdf561364d0ea8b6e68cf141ed3c9700611", 0x51}, {&(0x7f0000000240)="a55b40f1af471a3d1c25e38a16e5e655dd3f", 0x12}, {&(0x7f00000003c0)="f9f97de490242b2fd3c48ab30072ebf8eb59463c55edf8c11213b59800a5fb83467d049d4f80648ef5834fa9da1d7a0c1ff0b04d9904a3bbae2d09ad5fc9d0a4588799c051e14be09af0f0fe5d2c226c1d09cf68aa981a4094daa1ad7d", 0x5d}], 0x3}}], 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async) setrlimit(0x1, &(0x7f0000000000)) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000440)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "293107b352f4611750eb8ddaf17a1c4b11cae791673d41465971b8064c09441a", 0x6, 0x8, 0x468, 0x86e}, 0x3c) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) (async) write$P9_RVERSION(r0, &(0x7f0000000200)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) write$FUSE_DIRENTPLUS(r7, 0x0, 0xfdef) (async) 19.500794506s ago: executing program 5 (id=4284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\a\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 19.34885784s ago: executing program 5 (id=4286): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a0000", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 8) 17.047396764s ago: executing program 5 (id=4289): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x82000, 0x0) getpgrp(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000479000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r5}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0xc018aec0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15.835563802s ago: executing program 5 (id=4294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x17, 0x1, "d3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3}) syz_usb_control_io$printer(r0, 0x0, 0x0) 9.615054705s ago: executing program 8 (id=4314): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000040)={0x14}, 0x14) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) r2 = memfd_secret(0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) (async) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000140)) (async) r3 = geteuid() quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000180)=@filename='./file0\x00', r3, &(0x7f00000001c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000240)={0x1, 0x8, 0x9}) (async) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f0000000280)="ce7769dbaeaed3f9b2761f9191d0bca0e4ca4ed0bbb74f1774f359508f0e6e138ab8dfb60b39fd318281dbef3b0a9ecb93f60c1b463405ff52655815e044c4e5a1e752b1e7a8918236b398836b84dd78755d224c033b4691fc101b0219ac897858cce793553e2e9e888cce74928e0ddb08fd0d62bda5445f4a155a22e670e965fc307f46a49690c1dc2cbb28654f93e91cc1d5f835f30201", 0x98}, {&(0x7f0000000340)="be320d8dfdeb4319371ca5b70e93071868cf8f19027de35dc2ae6635609c674fd3c42c18bb23df168f92ff0e2f77440c98f3ed2e33726a3e64c345269b73f6bc34a2e71a7c724e2c01919503741940d6ea3e35be8a1ad7031bb275b418f8363fdef7c3b3016b43a1ed457f2f1e1df0adc44b51dbf18bf2721e863b7c70301717fb43fd7d7ff9a87ab7d8ef2005a6f292a1fb40b10b08cc78dd1bbb630e715536908bee2af02f2a0dcbdded9931ff082a284fa52f5dccae8d9d84c9dc1993e99c09471e85796bcecc94045a43be0c873d8717415d0671cfa3f304eac2f5adaeb25bfe400dd8", 0xe5}, {&(0x7f0000000440)="ee5ad79a320ebf64dcb150e93628d2b654c0931db00e76be56d252096464fbb4cedb683f5751", 0x26}], 0x3, 0x4) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000004c0)={0x1, 0x2, 0x8, 0x100, 0x9, 0x4ac}) socketpair(0x1d, 0x6, 0x5, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x6c040, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r7}}, {@posixacl}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$+]'}}, {@fsname={'fsname', 0x3d, 'vxcan1\x00'}}, {@uid_lt={'uid<', r3}}, {@smackfshat={'smackfshat', 0x3d, '!:'}}, {@obj_type={'obj_type', 0x3d, '/dev/fuse\x00'}}, {@measure}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000780)={0xd, 0x3, 0x0, 0xf770}, 0x8) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000dc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x118, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ac3}]}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa72b}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}]}, @NFT_MSG_DELTABLE={0x2e0, 0x2, 0xa, 0xb00, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x97, 0x6, "be2c5883b912be7176776c5a18aa4408d30c47915db4382ea06a90108d9bac1928db918e3ccbdc19895bbd91d5f5c28f24e950d40339aa170968d86baa3c01af4148602a354c8e1a4d124ddf05c3a5f49f6a05a4995979bf545f51bfa1d62cadcd45c50f2f3839bd421daba7bcae6ecccc10bfb09f9056b27443a0fd5b6b80815087e5b7f7f6dfb9698ce9725de83c7ef7fbab"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xa0, 0x6, "40a240868b1dfa581d82202807d18e317fcfa37ac429aa038cb4e25f5d5187c20f4530679c373b9f8a8f8724e4c486276d46d021d9aea6532c4066953fcb630c21c2bba176b9485b9d299e7ea09773c09a0656c4bac17a409dff8d22e82c19b7ade95a3155616e40c569a4d664567014738a5d138607f796ff4ebad482ad1c0b3f8a941df5b2f8fcafa6551e6e4afd981fa95bf05a4238a54ad0104d"}, @NFTA_TABLE_USERDATA={0x94, 0x6, "e563612b67fc5db7308a4608ca6fefea1566a18304906b9a728a25bfec64eade28ec567b96362a741a146b5166dd7ce4a6e1a3f4993f2384b2ed42474acd1915f5afc75af4620165aa5c015163797e3f97c38a8525daca706525952335a8d169304f2d2c7026b47aba216dcbf35f0f8a879700cbe9620d9cdffe81484cd1dd8353fd11779fc4b731173bb1e582edfad3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "d953719c34cb4226c8f85f6c87617c4ed9af7e1345ec356c271e905d3afd9e0c91007a6e0a99bc1246a7f1d3277771dc7ea08d9d0753766d8ae251043083cb19337eb18f762975a9f13ff18dd25c2b2a1f0da40c755ce2c9c1dd2e61618dd2fb9caed5746d7fd2b71ca19c187e937c670932e2449cf6a5f98e31ba966d029e34ca8f02b3a89c3e174b8378311e5d8832053163b1a7f3bd2b87af07998ca9106a8be880bf10cf2a3abc8e2290bd90a1ecce47536247"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x118, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xef0}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x558}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) r8 = openat(r2, &(0x7f0000000e40)='\x00', 0x1a1002, 0x100) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@cgroup=r2, r1, 0x1a, 0x2, r1, @void, @value=r8}, 0x20) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r5) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf0, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='dlm_recv\x00', r2, 0x0, 0x3ff}, 0x18) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000001100)=0x2, 0x4) (async) r10 = openat$cgroup_int(r8, &(0x7f0000001140)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000001180)=0x7f, 0x12) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000011c0)={0x1, 0x0, [{0x80000008, 0x7, 0x1, 0x5, 0x1, 0xfffffc00, 0x5}]}) 9.269925285s ago: executing program 8 (id=4316): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x4, 0x802) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x5, 0x3, 0x5, 0x10, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x90a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) r3 = semget$private(0x0, 0x4, 0x30) semctl$SEM_STAT_ANY(r3, 0x1, 0x14, &(0x7f00000001c0)=""/119) 8.422164586s ago: executing program 8 (id=4320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3f, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) (fail_nth: 6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x5000aea5, &(0x7f0000000080)=ANY=[]) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x7d7000, 0x0) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) 8.407602493s ago: executing program 7 (id=4321): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmmsg(r2, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="bd9593e9b985b0f3", 0x8}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x29}, 0xff000000, 0xff000000, 'veth0_to_bond\x00', 'wg2\x00', {}, {}, 0x1d, 0x0, 0x4}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0x123, 0x2f2f3ed66d169063, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@loopback, @rand_addr=0x64010100, 0xff, 0xff000000, 'vlan1\x00', 'dvmrp1\x00', {}, {0xff}, 0x73, 0x6, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "431e"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "f5df", 0x1}}, @common=@ttl={{0x28}, {0x3, 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f00000001c0)={0x0}, 0x7, 0x0, 0x0, 0x20040800}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) r5 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r7, 0x3b65, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08009f000400000008002600800900000800a21005000000"], 0x34}}, 0x0) 7.515438182s ago: executing program 8 (id=4322): socket(0x10, 0x3, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "11fe75df0cf0b7f306c1c38d006cbcdab485a55631f68b733ef073100463e2c05e2150e7dc069d29328a3e6d3ac59b178d0d1f12d530e9e1513e7ee918c29fd0", 0x23}, 0x48, 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000340), 0x4, 0x1000) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000380)={0x4, "09000000e287d4255e31cede5e440b5979b4223a00000000002000", 0x1, 0x4b5b, 0x4, 0x100, 0x400, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = mq_open(&(0x7f0000000000)='}{\x00', 0x40, 0x46, 0x0) mq_notify(r4, &(0x7f0000000080)={0x0, 0xb}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000400)=ANY=[], 0x40) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x7, @vifc_lcl_ifindex=r7, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x4, 0x200072}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xa3) r9 = open$dir(&(0x7f0000000000)='./file0\x00', 0x753240, 0x8) name_to_handle_at(r9, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00'], &(0x7f0000000100), 0x1200) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r0, 0x55, 0xad}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'sha384-generic\x00'}}, &(0x7f0000000480)="bd7a29364a051680047f4d9b25d8ed03750aca611a48a4ec94fc1acb04bcbacd3a5c1efffb9f5f5fafd52bf102985616ed42cdd22d4f89e6833f9e497705580e75ee5f6985c95b6b1cbd30a87a418d4e03099b6e35", &(0x7f0000000500)="519a74ac388d9c74b929d182d393017c9ffd9167b7919688b9aa75dc81fde96b93a241cc985b5dedc5054fcba62f788514e20359ad5a3ebde7b776c72fe0c8b701a3b7d7f9f4bd698c527ffedf1653ee623e9e9b574fe464e78dd667b83151a71daeccb78a1c09de640419e67370c9758e68f0b1c5f8111c85be47b56e6b8bdcbb28c6a030088dbbfb64861ead5badd72d98a164fb905d9f28c42479cf00575c21dd6f92acc242544f3052b33f") 6.838917529s ago: executing program 6 (id=4325): r0 = socket$inet6(0xa, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0414f9f4070009040081000000000003400000000008000f0001000000", 0x24) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x48}}, 0x20048000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x20, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000000600)={0x400, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000001680)=""/248, 0xf8}], &(0x7f0000000180)=[0x6244d656], 0x6}, 0x20) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029300030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r8, @ANYBLOB="05", @ANYRES8=r8], 0x0) 6.735126303s ago: executing program 7 (id=4326): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="00000000000000064e02000000af", 0xe}, {&(0x7f0000000840)="984c1ccba544021b110beb4e4f9e4df114a1cf157eaa0a839893e3", 0x1b}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13", 0xf}], 0x1}}], 0x2, 0xc4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='U\n\x00'/12], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="201625"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000000c0)={0x2}) syz_emit_vhci(0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000540)={0x14, &(0x7f00000005c0)={0x40, 0xe, 0xa0, {0xa0, 0x2, "8ec48851a28baf634d035f43099bd0efe9e77244332460d48f3a73f91d78d34dfe35a81f0f1f18141cceff0368a161a7fce3f458b0409a9f67d6f396909d9237140b32ee5ec6410b0934c64ea9ccb8bcd18e986c9905b32de90ff35e29803d609934f194832698f1b09c91044925d11f870ca883fea44af51297cfc10730b102bb7055c670b4e3d0585c39ed8525fb3d714a724488bb16c08c96a91019e5"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000680)={0x20, 0x6, 0x3c, "c7a59dc53194577db5471b29c0152659852e08d795df672c7bcecd024dd9b097e41ec896761662255b0d29f60e1f42c53144ea7335bc568195dfb267"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x20}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0x300}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180005"], 0x4c}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@fd={0x6, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x1, 0x2, 0x9f, 0x9, 0x7, 0x10, "958131d4"}, 0x8, 0x4, {}, 0x8001}) 6.480523168s ago: executing program 2 (id=4328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f000000, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.325765564s ago: executing program 2 (id=4329): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)=0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4bfb, 0x10000000000004) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x44000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$inet6(r0, &(0x7f0000000080)='\f', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r7 = dup(r6) epoll_create1(0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000ac0)=[@textreal={0x8, 0x0}], 0x1, 0x23, 0x0, 0x0) 5.317505884s ago: executing program 2 (id=4330): syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x921880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x14, r1, 0x31f, 0x70bd2d, 0xfffffff9}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="bb", 0x1}], 0x1}, 0x4040004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000014e70095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x4}, 0x2) 4.232585516s ago: executing program 8 (id=4331): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect(0x3, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000632000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000500)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1e, r5}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r7, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x810, 0x0, 0x0) 4.159574986s ago: executing program 2 (id=4332): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x37, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioprio_get$pid(0x2, r1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x1}, 0x1c) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}], 0x10) ftruncate(r0, 0xfb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) sendto$inet6(r0, &(0x7f0000000500)="21c1c5ba", 0x4, 0x4000850, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x3b}}, 0x1c) 3.866647647s ago: executing program 7 (id=4333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x2e, 0x0}, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffff707, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = fcntl$dupfd(r0, 0x406, r0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r7, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='statm\x00') r9 = dup(r0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x9, 0x8001, 0x0, 0x0, r10, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x19, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0x5, 0x3, 0x3, 0x80, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @ldst={0x2, 0x2, 0x2, 0x7, 0xa, 0xffffffffffffffe0, 0x8}, @call={0x85, 0x0, 0x0, 0xad}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x2e, &(0x7f0000000340)=""/46, 0x41100, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xf, 0x241, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000000500)=[r5, r6, r7, r8, r9, r10, r0, r11], &(0x7f0000000540)=[{0x0, 0x2, 0x4, 0x4}, {0x1, 0x5, 0xe, 0x8}, {0x3, 0x4, 0x1, 0x2}, {0x2, 0x4, 0xa, 0xfd1af2014e9c3aa8}], 0x10, 0xa, @void, @value}, 0x94) sendto$inet6(r1, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r13, 0xff}, &(0x7f0000000140)=0x8) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x3}}}}}}}, 0x0) 3.859193117s ago: executing program 2 (id=4334): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x5fc, 0x65, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x5b8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x598, 0x7, [@m_ct={0x100, 0x3, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x4, 0x7, 0xfffff374, 0xf}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}]}, {0x99, 0x6, "1426d3280c9cede5ba3cf25b98b07c1f8bef126c99570c2540016528250f2ac782c3ccf707baef0a06e6063cbc26b1cc375787fd6b9f5a1a38fd65271e32c2972849923cc64febec8211584cad96587bd88f07785ddb6602c2b61bca929bc21252b5f720a779344f4af3c4bd64975321ea2c0f39aa5977c66f631a58b5d1ad29c6e2db23d343014c6d413ef3e670e8ad417c1f0d75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x70, 0x17, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffa, 0xffff, 0x6, 0x7fff, 0xbd32}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa}]}, {0x15, 0x6, "8494f004bfb8659a599d2d1a48b8890c87"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x160, 0x15, 0x0, 0x0, {{0x7}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x72, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a02000100000000000000000000000046f841e7f4b3add6227cac237ad6ba7242b5dbca42a31eec5e9ba2dc7c4bb3e660541faa6688ce0ed8f8996c9b4cc2b9aa987f7f564f9a07c36dd8b96ab89c3e5b4adc68151ae2be1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x68, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x29, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xa4, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x75, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0xf8, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x69, 0x6, "df9a6806000000000000002a7c6a5ea7f10d7b15c41faef3da9f4375bd8f91553172863ecfe1c9e3d8c1d8dd79d4c84e29271134e8cff9e780ec3751c8a6148ad92a817319a415c6e73c921365afc6b961922a2ca77717589fb39927c99e587fa5834a0000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 3.283575383s ago: executing program 7 (id=4335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f00000005002a000000000008000300", @ANYRES32=r6, @ANYBLOB="08003200000000000500380001"], 0x4c}}, 0x0) r8 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r8, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) setns(r4, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x80, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800000, 0xfffffffb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x80}, 0x1, 0xba01}, 0x0) 3.084706081s ago: executing program 2 (id=4336): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x8040) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_clone(0x800000, 0x0, 0xfffffcf6, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x1de, &(0x7f00000028c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088480000000000000000000000000000000000000300000000000000030000000000466501b00066000004019078000000000a010101009e0f14e665a8cd7abccc698955fff244241a91ac1414aa00008000ac1414aa00000008ac1e862ffdc50077ac1414aa0000000c9403f101940401000000441c5ba3ac1e000100000000ffffffff00000001ac1414bb00000004866a0000607544972a060c2a277f55e090f202ddea021238549587972df29a1087c488ca206f980112951e590bc68f6719325eaac4c43c158a01097bbb4b3362d0c0050fbc8c709c66cb51896d51ee992507126c93fc202467b4c429b21476ee988cdf6204898da073ec4c5597b6bec143ce4b37c181cf1ef39615817a58a8977efe9d1b5300fd61039582c0da45b7065ed80cc35dcae9832271105a7be102f3040d45717172476dced0241243da7d99f71afa0e0a64f393911f0e4970ecaab2b952e091b0d5e2458c59f0ab084413132a4035a5a5d411d19c0245f1e848c367051eba44fa6577be5bd158dbce09bbc56f6e91ddd90cd6f44a9b6a4b723e94a5b5c7581c6e4bff648a6bab012a5e69b1a4de7e28bdf7c233036ede532f53bdcc7ec08c9425776e83b3910fdffa83541f7c58622d2128273ed845b3"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0x8) fcntl$addseals(r5, 0x409, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) fallocate(r1, 0x0, 0x0, 0x3) 2.990058523s ago: executing program 7 (id=4337): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) unshare(0x24020400) r2 = socket$unix(0x1, 0x2, 0x0) unshare(0x2a020400) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@mpls_mc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd48", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000200)={'#! ', '', [{0x20, '!,,/].{^),#'}, {}], 0xa, "f7bd8c7d0b7a09007023579fc1dd6e43f68232717a3858a78fac0091"}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a310000000060000000160a03000000000000000000010000000900010073797a31000000000900020073797a31000000002c000380080002400000000008000140000000001800038014000100776c616e3100000000000000000000000800074000000001"], 0xa8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.87566403s ago: executing program 6 (id=4338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xffffc133}]}, 0x3c}}, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 2.67031455s ago: executing program 6 (id=4339): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0xc0045003, &(0x7f0000001100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) io_setup(0x5, &(0x7f0000000e80)) close(r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40015) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x18, r6, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) 2.431302993s ago: executing program 5 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = fanotify_init(0x8, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) open_by_handle_at(r0, &(0x7f0000000200)=@ocfs2_parent={0x18, 0x2, {{0x9, 0xfcf, 0x10000}, {0x3, 0x2, 0x1}}}, 0x0) fanotify_mark(r1, 0x41, 0x8000038, r2, 0x0) mkdir(0x0, 0x0) chdir(0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = dup3(r0, r0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000100)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.415740551s ago: executing program 7 (id=4340): socket(0x10, 0x3, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "11fe75df0cf0b7f306c1c38d006cbcdab485a55631f68b733ef073100463e2c05e2150e7dc069d29328a3e6d3ac59b178d0d1f12d530e9e1513e7ee918c29fd0", 0x23}, 0x48, 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000340), 0x4, 0x1000) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000380)={0x4, "09000000e287d4255e31cede5e440b5979b4223a00000000002000", 0x1, 0x4b5b, 0x4, 0x100, 0x400, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = mq_open(&(0x7f0000000000)='}{\x00', 0x40, 0x46, 0x0) mq_notify(r4, &(0x7f0000000080)={0x0, 0xb}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000400)=ANY=[], 0x40) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x7, @vifc_lcl_ifindex=r7, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x4, 0x200072}, 0x2c) r9 = open$dir(&(0x7f0000000000)='./file0\x00', 0x753240, 0x8) name_to_handle_at(r9, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00'], &(0x7f0000000100), 0x1200) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r0, 0x55, 0xad}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'sha384-generic\x00'}}, &(0x7f0000000480)="bd7a29364a051680047f4d9b25d8ed03750aca611a48a4ec94fc1acb04bcbacd3a5c1efffb9f5f5fafd52bf102985616ed42cdd22d4f89e6833f9e497705580e75ee5f6985c95b6b1cbd30a87a418d4e03099b6e35", &(0x7f0000000500)="519a74ac388d9c74b929d182d393017c9ffd9167b7919688b9aa75dc81fde96b93a241cc985b5dedc5054fcba62f788514e20359ad5a3ebde7b776c72fe0c8b701a3b7d7f9f4bd698c527ffedf1653ee623e9e9b574fe464e78dd667b83151a71daeccb78a1c09de640419e67370c9758e68f0b1c5f8111c85be47b56e6b8bdcbb28c6a030088dbbfb64861ead5badd72d98a164fb905d9f28c42479cf00575c21dd6f92acc242544f3052b33f") 1.371859646s ago: executing program 6 (id=4341): syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x921880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x14, r1, 0x31f, 0x70bd2d, 0xfffffff9}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="bb", 0x1}], 0x1}, 0x4040004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000014e70095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x4}, 0x2) 636.857403ms ago: executing program 5 (id=4342): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="00000000000000064e02000000af", 0xe}, {&(0x7f0000000840)="984c1ccba544021b110beb4e4f9e4df114a1cf157eaa0a839893e3", 0x1b}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13", 0xf}], 0x1}}], 0x2, 0xc4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='U\n\x00'/12], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="201625"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000000c0)={0x2}) syz_emit_vhci(0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000540)={0x14, &(0x7f00000005c0)={0x40, 0xe, 0xa0, {0xa0, 0x2, "8ec48851a28baf634d035f43099bd0efe9e77244332460d48f3a73f91d78d34dfe35a81f0f1f18141cceff0368a161a7fce3f458b0409a9f67d6f396909d9237140b32ee5ec6410b0934c64ea9ccb8bcd18e986c9905b32de90ff35e29803d609934f194832698f1b09c91044925d11f870ca883fea44af51297cfc10730b102bb7055c670b4e3d0585c39ed8525fb3d714a724488bb16c08c96a91019e5"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000680)={0x20, 0x6, 0x3c, "c7a59dc53194577db5471b29c0152659852e08d795df672c7bcecd024dd9b097e41ec896761662255b0d29f60e1f42c53144ea7335bc568195dfb267"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x20}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0x300}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180005"], 0x4c}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@fd={0x6, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x1, 0x2, 0x9f, 0x9, 0x7, 0x10, "958131d4"}, 0x8, 0x4, {}, 0x8001}) 327.647809ms ago: executing program 6 (id=4343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x8000000}, 0x1c) 32.570808ms ago: executing program 6 (id=4344): r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x9, 0x4, 0x0, 0x3, {}, {0x2, 0x2, 0x95, 0x9, 0xc6, 0x9, "81a1be9a"}, 0x8, 0x2, {&(0x7f00000000c0)=[{0x401, 0x9, {0x0}, 0x80}, {0x5, 0x0, {0x0}, 0x5}]}, 0x2}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x0, 0x80000004], [0xfb]], '\x00', [{}, {}, {}, {0x0, 0x1, 0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x2}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0xfffffffe) 0s ago: executing program 8 (id=4345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x5fc, 0x65, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x5b8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x598, 0x7, [@m_ct={0x100, 0x3, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x4, 0x7, 0xfffff374, 0xf}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}]}, {0x99, 0x6, "1426d3280c9cede5ba3cf25b98b07c1f8bef126c99570c2540016528250f2ac782c3ccf707baef0a06e6063cbc26b1cc375787fd6b9f5a1a38fd65271e32c2972849923cc64febec8211584cad96587bd88f07785ddb6602c2b61bca929bc21252b5f720a779344f4af3c4bd64975321ea2c0f39aa5977c66f631a58b5d1ad29c6e2db23d343014c6d413ef3e670e8ad417c1f0d75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x70, 0x17, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffa, 0xffff, 0x6, 0x7fff, 0xbd32}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa}]}, {0x15, 0x6, "8494f004bfb8659a599d2d1a48b8890c87"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x160, 0x15, 0x0, 0x0, {{0x7}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4}}]}, {0x72, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a02000100000000000000000000000046f841e7f4b3add6227cac237ad6ba7242b5dbca42a31eec5e9ba2dc7c4bb3e660541faa6688ce0ed8f8996c9b4cc2b9aa987f7f564f9a07c36dd8b96ab89c3e5b4adc68151ae2be1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x68, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x29, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xa4, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x75, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0xf8, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x69, 0x6, "df9a6806000000000000002a7c6a5ea7f10d7b15c41faef3da9f4375bd8f91553172863ecfe1c9e3d8c1d8dd79d4c84e29271134e8cff9e780ec3751c8a6148ad92a817319a415c6e73c921365afc6b961922a2ca77717589fb39927c99e587fa5834a0000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): problems! [ 1198.573906][T19364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1198.590445][T19364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.614820][T19364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.075342][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.094631][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.107509][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.483506][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.672790][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1200.688770][T19544] FAULT_INJECTION: forcing a failure. [ 1200.688770][T19544] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.701570][T19544] CPU: 1 UID: 0 PID: 19544 Comm: syz.8.3866 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1200.712387][T19544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1200.722457][T19544] Call Trace: [ 1200.725747][T19544] [ 1200.728689][T19544] dump_stack_lvl+0x241/0x360 [ 1200.733388][T19544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.738611][T19544] ? __pfx__printk+0x10/0x10 [ 1200.743231][T19544] should_fail_ex+0x3b0/0x4e0 [ 1200.747926][T19544] should_failslab+0xac/0x100 [ 1200.752626][T19544] ? skb_clone+0x20c/0x390 [ 1200.757052][T19544] kmem_cache_alloc_noprof+0x70/0x380 [ 1200.762452][T19544] skb_clone+0x20c/0x390 [ 1200.766720][T19544] __netlink_deliver_tap+0x3cc/0x7f0 [ 1200.772033][T19544] ? netlink_deliver_tap+0x2e/0x1b0 [ 1200.777241][T19544] netlink_deliver_tap+0x19d/0x1b0 [ 1200.782364][T19544] netlink_unicast+0x7c4/0x990 [ 1200.787154][T19544] ? __pfx_netlink_unicast+0x10/0x10 [ 1200.792454][T19544] ? __virt_addr_valid+0x45f/0x530 [ 1200.797596][T19544] ? __phys_addr_symbol+0x2f/0x70 [ 1200.802634][T19544] ? __check_object_size+0x47a/0x730 [ 1200.807945][T19544] netlink_sendmsg+0x8e4/0xcb0 [ 1200.812738][T19544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.818048][T19544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.823347][T19544] __sock_sendmsg+0x221/0x270 [ 1200.828048][T19544] ____sys_sendmsg+0x52a/0x7e0 [ 1200.832837][T19544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.838130][T19544] ? __fget_files+0x2a/0x410 [ 1200.842736][T19544] ? __fget_files+0x2a/0x410 [ 1200.847351][T19544] __sys_sendmsg+0x269/0x350 [ 1200.851963][T19544] ? __pfx___sys_sendmsg+0x10/0x10 [ 1200.857114][T19544] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1200.863482][T19544] do_syscall_64+0xf3/0x230 [ 1200.868011][T19544] ? clear_bhb_loop+0x35/0x90 [ 1200.872707][T19544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.878617][T19544] RIP: 0033:0x7f8d5d785d29 [ 1200.883044][T19544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.902670][T19544] RSP: 002b:00007f8d5e510038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.911104][T19544] RAX: ffffffffffffffda RBX: 00007f8d5d976160 RCX: 00007f8d5d785d29 [ 1200.919087][T19544] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1200.927069][T19544] RBP: 00007f8d5e510090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.935055][T19544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.943033][T19544] R13: 0000000000000000 R14: 00007f8d5d976160 R15: 00007fff3b6682e8 [ 1200.951031][T19544] [ 1200.955075][T19544] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3866'. [ 1201.012818][T19543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.112201][T19551] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1201.127810][T19550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1201.139733][T19550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1201.173155][T19550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1201.182416][T19550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1201.243412][T19550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1201.252639][T19550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1202.657329][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3878'. [ 1202.671511][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3878'. [ 1202.899641][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1202.971392][T19585] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1203.049721][ T9] usb 8-1: device descriptor read/64, error -71 [ 1203.327352][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1203.605283][ T9] usb 8-1: device descriptor read/64, error -71 [ 1204.301754][ T9] usb usb8-port1: attempt power cycle [ 1204.546098][T19592] ubi0: attaching mtd0 [ 1204.560660][T19592] ubi0: scanning is finished [ 1204.587004][T19592] ubi0: empty MTD device detected [ 1204.614257][T19596] binfmt_misc: Unknown parameter 'grpquota‹' [ 1204.750409][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1204.785037][ T9] usb 8-1: device descriptor read/8, error -71 [ 1204.800954][T19592] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1204.818643][T19592] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1204.834650][T19592] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1204.848114][T19592] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1204.877371][T19592] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1204.888376][T19592] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1204.909530][T19592] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 870531618 [ 1204.931159][T19592] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1204.952662][T19599] ubi0: background thread "ubi_bgt0d" started, PID 19599 [ 1205.141376][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1205.507784][ T9] usb 8-1: device descriptor read/8, error -71 [ 1205.626147][ T9] usb usb8-port1: unable to enumerate USB device [ 1205.858408][T19615] netlink: 'syz.7.3889': attribute type 10 has an invalid length. [ 1205.873184][T19615] veth0_macvtap: left promiscuous mode [ 1205.901818][T19615] batman_adv: batadv0: Adding interface: macvtap0 [ 1205.913547][T19615] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.946462][T19615] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1206.885289][T19630] __nla_validate_parse: 2 callbacks suppressed [ 1206.885334][T19630] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3893'. [ 1206.977381][T19630] 9pnet_fd: Insufficient options for proto=fd [ 1208.510940][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3899'. [ 1208.926289][T19644] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 1208.984382][T19644] macvtap1: entered promiscuous mode [ 1209.027940][T19644] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 1209.330825][T19656] sit0: entered promiscuous mode [ 1209.339284][T19656] netlink: 'syz.7.3904': attribute type 1 has an invalid length. [ 1213.181832][T19706] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3915'. [ 1214.092250][T19719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1215.623767][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1215.623780][ T29] audit: type=1326 audit(2000004698.466:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96785d29 code=0x7fc00000 [ 1215.660188][ T29] audit: type=1326 audit(2000004698.485:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96785d29 code=0x7fc00000 [ 1215.688565][ T29] audit: type=1326 audit(2000004698.485:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96785d29 code=0x7fc00000 [ 1215.871294][T19729] binder: 19728:19729 ioctl c0306201 200002c0 returned -22 [ 1216.455362][ T5955] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1216.648534][ T5955] usb 8-1: Using ep0 maxpacket: 8 [ 1216.710003][ T5955] usb 8-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1216.731180][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1216.751298][ T5955] usb 8-1: Product: syz [ 1216.755735][ T5955] usb 8-1: Manufacturer: syz [ 1216.760353][ T5955] usb 8-1: SerialNumber: syz [ 1216.788621][ T5955] usb 8-1: config 0 descriptor?? [ 1217.324944][ T5955] usb 8-1: USB disconnect, device number 30 [ 1217.538483][ T29] audit: type=1326 audit(2000004700.243:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19749 comm="syz.8.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7fc00000 [ 1217.561429][ T29] audit: type=1326 audit(2000004700.243:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19749 comm="syz.8.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7fc00000 [ 1217.597680][ T29] audit: type=1326 audit(2000004700.252:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19749 comm="syz.8.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7fc00000 [ 1217.630847][ T29] audit: type=1326 audit(2000004700.252:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19749 comm="syz.8.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7fc00000 [ 1217.654828][ T29] audit: type=1326 audit(2000004700.252:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19749 comm="syz.8.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7fc00000 [ 1217.676646][ T29] audit: type=1326 audit(2000004700.252:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19749 comm="syz.8.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7fc00000 [ 1217.698585][ T29] audit: type=1326 audit(2000004700.252:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19749 comm="syz.8.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7fc00000 [ 1217.720251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.010119][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1219.030739][T19774] serio: Serial port pts0 [ 1219.125009][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1219.225391][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1219.653046][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1219.695482][ T5823] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1219.702959][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1220.741205][T19792] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3940'. [ 1220.774434][T19792] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3940'. [ 1221.788637][T19801] rdma_op ffff88805b7cb9f0 conn xmit_rdma 0000000000000000 [ 1221.950410][ T5823] Bluetooth: hci4: command tx timeout [ 1222.227786][ T5955] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1222.415654][ T5955] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1222.424311][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.458907][ T5955] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1222.469051][ T5955] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1222.477649][ T5955] usb 8-1: Manufacturer: syz [ 1222.496721][ T5955] usb 8-1: config 0 descriptor?? [ 1222.581781][ T5955] rc_core: IR keymap rc-hauppauge not found [ 1222.587797][ T5955] Registered IR keymap rc-empty [ 1222.605504][ T5955] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1222.617111][ T5955] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input53 [ 1223.178588][T19807] binder: 19806:19807 ioctl c018620b 200000c0 returned -14 [ 1223.273112][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.307900][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.317459][T19775] lo speed is unknown, defaulting to 1000 [ 1224.110808][ T5955] usb 8-1: USB disconnect, device number 31 [ 1224.198242][ T5823] Bluetooth: hci4: command tx timeout [ 1224.362644][T19775] chnl_net:caif_netlink_parms(): no params data found [ 1224.556663][T19775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.566633][T19775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.576135][T19775] bridge_slave_0: entered allmulticast mode [ 1224.589677][T19775] bridge_slave_0: entered promiscuous mode [ 1224.623135][T19775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.633752][T19775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.641219][T19775] bridge_slave_1: entered allmulticast mode [ 1224.648555][T19775] bridge_slave_1: entered promiscuous mode [ 1224.704093][T19775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.748805][T19775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.799264][T19851] netlink: 'syz.7.3955': attribute type 11 has an invalid length. [ 1224.852508][T19775] team0: Port device team_slave_0 added [ 1224.873052][T19775] team0: Port device team_slave_1 added [ 1224.989480][T19775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.001640][T19775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.142093][T19775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.301887][T19775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.312443][T19775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.356805][T19775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.053341][T19775] hsr_slave_0: entered promiscuous mode [ 1226.145315][T19775] hsr_slave_1: entered promiscuous mode [ 1226.152347][T19775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1226.159930][T19775] Cannot create hsr debugfs directory [ 1226.412965][ T5823] Bluetooth: hci4: command tx timeout [ 1227.832931][T19775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.902160][T19883] netlink: 'syz.6.3965': attribute type 11 has an invalid length. [ 1228.361021][T19775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.621539][ T5823] Bluetooth: hci4: command tx timeout [ 1228.648214][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.655428][ T9106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.702447][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.709671][ T9106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.234125][T19775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1229.244986][T19775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1229.947336][T14034] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1230.027375][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1230.036525][T19934] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1230.268347][T14034] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1230.297856][T14034] usb 9-1: not running at top speed; connect to a high speed hub [ 1230.457219][T14034] usb 9-1: config 7 has an invalid interface number: 178 but max is 0 [ 1230.590627][T14034] usb 9-1: config 7 has no interface number 0 [ 1230.597047][T14034] usb 9-1: config 7 interface 178 has no altsetting 0 [ 1230.610545][T14034] usb 9-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=50.c2 [ 1230.619720][T14034] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.655491][T14034] usb 9-1: Product: syz [ 1230.659719][T14034] usb 9-1: Manufacturer: syz [ 1230.673843][T14034] usb 9-1: SerialNumber: syz [ 1230.732649][T19775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.987119][T19944] FAULT_INJECTION: forcing a failure. [ 1230.987119][T19944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.017402][T19944] CPU: 0 UID: 0 PID: 19944 Comm: syz.5.3972 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1231.028225][T19944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1231.038305][T19944] Call Trace: [ 1231.041599][T19944] [ 1231.044542][T19944] dump_stack_lvl+0x241/0x360 [ 1231.049246][T19944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1231.054470][T19944] ? __pfx__printk+0x10/0x10 [ 1231.059087][T19944] ? __pfx_lock_release+0x10/0x10 [ 1231.064134][T19944] should_fail_ex+0x3b0/0x4e0 [ 1231.068830][T19944] _copy_from_user+0x2f/0xc0 [ 1231.073443][T19944] sctp_getsockopt_context+0xd8/0x5a0 [ 1231.078841][T19944] ? __local_bh_enable_ip+0x168/0x200 [ 1231.084241][T19944] ? __pfx_sctp_getsockopt_context+0x10/0x10 [ 1231.090252][T19944] sctp_getsockopt+0x4eb/0xbb0 [ 1231.095014][T19944] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1231.100908][T19944] do_sock_getsockopt+0x3c4/0x7e0 [ 1231.105935][T19944] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1231.111479][T19944] ? __fget_files+0x2a/0x410 [ 1231.116072][T19944] ? __fget_files+0x395/0x410 [ 1231.120763][T19944] ? __fget_files+0x2a/0x410 [ 1231.125399][T19944] __x64_sys_getsockopt+0x2a1/0x370 [ 1231.130613][T19944] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1231.136341][T19944] ? do_syscall_64+0x100/0x230 [ 1231.141134][T19944] ? do_syscall_64+0xb6/0x230 [ 1231.145819][T19944] do_syscall_64+0xf3/0x230 [ 1231.150332][T19944] ? clear_bhb_loop+0x35/0x90 [ 1231.155017][T19944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.160921][T19944] RIP: 0033:0x7fcc76f85d29 [ 1231.165333][T19944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1231.184954][T19944] RSP: 002b:00007fcc77d2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1231.193388][T19944] RAX: ffffffffffffffda RBX: 00007fcc77176080 RCX: 00007fcc76f85d29 [ 1231.201367][T19944] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000007 [ 1231.209338][T19944] RBP: 00007fcc77d2c090 R08: 0000000020000180 R09: 0000000000000000 [ 1231.217313][T19944] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 1231.225301][T19944] R13: 0000000000000000 R14: 00007fcc77176080 R15: 00007fffbd54ffc8 [ 1231.233297][T19944] [ 1231.405366][T14034] usb 9-1: Could not find all expected endpoints [ 1231.426618][T14034] usb 9-1: USB disconnect, device number 2 [ 1231.558245][T19775] veth0_vlan: entered promiscuous mode [ 1231.580688][T19775] veth1_vlan: entered promiscuous mode [ 1231.660453][T19775] veth0_macvtap: entered promiscuous mode [ 1231.690737][T19775] veth1_macvtap: entered promiscuous mode [ 1231.723407][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.748272][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.764130][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.774772][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.801787][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.823612][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.845990][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.870663][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.880716][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.891520][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.902917][T19775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.937031][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.960749][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.971030][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.040330][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.074678][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.131832][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.544926][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.557628][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.576079][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.680150][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.690086][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.700999][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.712871][T19775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.724218][T19775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.839951][T19775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.902313][T19956] dvmrp0: entered allmulticast mode [ 1233.701694][ T8622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.709542][ T8622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.809024][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.817076][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.133244][T19984] vivid-000: disconnect [ 1234.545265][T19980] vivid-000: reconnect [ 1234.785270][T19993] rdma_rxe: rxe_newlink: failed to add lo [ 1234.959326][T19998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3988'. [ 1237.210296][T20003] (syz.6.3991,20003,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1237.220213][T20003] (syz.6.3991,20003,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1237.591675][T20027] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1237.591675][T20027] The task syz.8.3998 (20027) triggered the difference, watch for misbehavior. [ 1237.708433][ T5873] psmouse serio4: Failed to reset mouse on : -5 [ 1238.561649][ T5901] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1238.586716][ T5901] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1238.624281][ T5901] usb 7-1: USB disconnect, device number 30 [ 1238.969785][ T5901] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1239.143427][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.162689][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.195335][ T5901] usb 7-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1239.226826][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.283137][ T5901] usb 7-1: config 0 descriptor?? [ 1240.022876][T20047] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4004'. [ 1240.109219][ T5901] usbhid 7-1:0.0: can't add hid device: -71 [ 1240.128324][ T5901] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1240.146085][ T5901] usb 7-1: USB disconnect, device number 31 [ 1240.326669][T20054] mkiss: ax0: crc mode is auto. [ 1242.465824][ T5873] misc userio: Buffer overflowed, userio client isn't keeping up [ 1243.222484][T20089] netlink: 'syz.5.4018': attribute type 11 has an invalid length. [ 1243.685464][ T5873] input: PS/2 Generic Mouse as /devices/serio4/input/input54 [ 1243.843930][T20110] FAULT_INJECTION: forcing a failure. [ 1243.843930][T20110] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.868429][T20110] CPU: 1 UID: 0 PID: 20110 Comm: syz.6.4025 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1243.879238][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1243.889314][T20110] Call Trace: [ 1243.892615][T20110] [ 1243.895564][T20110] dump_stack_lvl+0x241/0x360 [ 1243.900271][T20110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1243.905490][T20110] ? __pfx__printk+0x10/0x10 [ 1243.910108][T20110] ? __kmalloc_cache_noprof+0x48/0x390 [ 1243.915593][T20110] ? __pfx___might_resched+0x10/0x10 [ 1243.920912][T20110] should_fail_ex+0x3b0/0x4e0 [ 1243.925619][T20110] should_failslab+0xac/0x100 [ 1243.930325][T20110] __kmalloc_cache_noprof+0x70/0x390 [ 1243.938097][T20110] ? sctp_association_new+0x8a/0x2400 [ 1243.938188][T20110] sctp_association_new+0x8a/0x2400 [ 1243.938215][T20110] ? sctp_has_association+0x1d4/0x1f0 [ 1243.938237][T20110] ? sctp_has_association+0x2f/0x1f0 [ 1243.938259][T20110] ? __ipv6_addr_type+0x23c/0x2f0 [ 1243.938284][T20110] sctp_connect_new_asoc+0x2d8/0x6c0 [ 1243.938309][T20110] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1243.938326][T20110] ? sctp_sendmsg+0xbb9/0x3520 [ 1243.938351][T20110] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1243.938369][T20110] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 1243.938387][T20110] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1243.938415][T20110] sctp_sendmsg+0x219a/0x3520 [ 1243.938454][T20110] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1243.938475][T20110] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1243.938513][T20110] ? inet_sendmsg+0x330/0x390 [ 1243.938539][T20110] __sock_sendmsg+0x1a6/0x270 [ 1243.938570][T20110] __sys_sendto+0x363/0x4c0 [ 1243.938596][T20110] ? __pfx___sys_sendto+0x10/0x10 [ 1243.938614][T20110] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1243.938651][T20110] ? __fget_files+0x2a/0x410 [ 1243.938676][T20110] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1243.938695][T20110] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1243.938715][T20110] __x64_sys_sendto+0xde/0x100 [ 1243.938733][T20110] do_syscall_64+0xf3/0x230 [ 1243.938755][T20110] ? clear_bhb_loop+0x35/0x90 [ 1243.938772][T20110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.938792][T20110] RIP: 0033:0x7f25e3585d29 [ 1243.938809][T20110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.938825][T20110] RSP: 002b:00007f25e42f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1243.938845][T20110] RAX: ffffffffffffffda RBX: 00007f25e3775fa0 RCX: 00007f25e3585d29 [ 1243.938859][T20110] RDX: 0000000000000004 RSI: 0000000020000500 RDI: 0000000000000003 [ 1243.938871][T20110] RBP: 00007f25e42f6090 R08: 0000000020000200 R09: 000000000000001c [ 1243.938883][T20110] R10: 0000000004000850 R11: 0000000000000246 R12: 0000000000000001 [ 1243.938896][T20110] R13: 0000000000000000 R14: 00007f25e3775fa0 R15: 00007ffc117f93a8 [ 1243.938921][T20110] [ 1243.941435][ T5873] psmouse serio4: Failed to enable mouse on [ 1244.270942][ T5901] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1244.465640][ T5901] usb 8-1: no configurations [ 1244.470325][ T5901] usb 8-1: can't read configurations, error -22 [ 1245.222119][ T5901] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1245.338397][T20128] netlink: 'syz.6.4030': attribute type 11 has an invalid length. [ 1245.393185][ T5901] usb 8-1: no configurations [ 1245.398005][ T5901] usb 8-1: can't read configurations, error -22 [ 1245.405978][ T5901] usb usb8-port1: attempt power cycle [ 1245.795033][T20144] FAULT_INJECTION: forcing a failure. [ 1245.795033][T20144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.808597][T20144] CPU: 0 UID: 0 PID: 20144 Comm: syz.8.4035 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1245.819375][T20144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1245.829415][T20144] Call Trace: [ 1245.832681][T20144] [ 1245.835599][T20144] dump_stack_lvl+0x241/0x360 [ 1245.840263][T20144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1245.845456][T20144] should_fail_ex+0x3b0/0x4e0 [ 1245.850119][T20144] _copy_from_user+0x2f/0xc0 [ 1245.854697][T20144] copy_msghdr_from_user+0xae/0x680 [ 1245.859900][T20144] ? lockdep_hardirqs_on+0x99/0x150 [ 1245.865107][T20144] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1245.870931][T20144] ? __fget_files+0x2a/0x410 [ 1245.875540][T20144] ? __fget_files+0x2a/0x410 [ 1245.880140][T20144] __sys_sendmsg+0x209/0x350 [ 1245.884729][T20144] ? __pfx___sys_sendmsg+0x10/0x10 [ 1245.889854][T20144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1245.896202][T20144] do_syscall_64+0xf3/0x230 [ 1245.900710][T20144] ? clear_bhb_loop+0x35/0x90 [ 1245.905383][T20144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.911276][T20144] RIP: 0033:0x7f8d5d785d29 [ 1245.915686][T20144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.935288][T20144] RSP: 002b:00007f8d5e531038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1245.943714][T20144] RAX: ffffffffffffffda RBX: 00007f8d5d976080 RCX: 00007f8d5d785d29 [ 1245.951677][T20144] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1245.959642][T20144] RBP: 00007f8d5e531090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.967625][T20144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.975604][T20144] R13: 0000000000000000 R14: 00007f8d5d976080 R15: 00007fff3b6682e8 [ 1245.983598][T20144] [ 1246.285730][ T5901] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1246.316069][ T5901] usb 8-1: no configurations [ 1246.320711][ T5901] usb 8-1: can't read configurations, error -22 [ 1246.352170][T20143] netlink: 'syz.6.4034': attribute type 3 has an invalid length. [ 1246.507068][ T5901] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1246.735855][T20156] Cannot find add_set index 0 as target [ 1246.806488][T14034] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1246.983097][T14034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.331890][ T5901] usb 8-1: no configurations [ 1247.336543][ T5901] usb 8-1: can't read configurations, error -22 [ 1247.343743][ T5901] usb usb8-port1: unable to enumerate USB device [ 1247.358125][T14034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.458066][T14034] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1247.461013][T20159] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4039'. [ 1247.467129][T14034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.485082][T20159] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4039'. [ 1247.504147][T14034] usb 7-1: config 0 descriptor?? [ 1249.526972][T14034] usbhid 7-1:0.0: can't add hid device: -71 [ 1249.533296][T14034] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1249.550986][T14034] usb 7-1: USB disconnect, device number 32 [ 1251.296098][ T5955] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1251.711171][T20212] random: crng reseeded on system resumption [ 1252.130003][ T5955] usb 8-1: Using ep0 maxpacket: 8 [ 1252.137350][ T5955] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1252.145791][ T5955] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1252.156195][ T5955] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1252.205566][ T5955] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1252.296799][ T5955] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.336673][ T5955] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1252.360569][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.466574][ T5955] usb 8-1: usb_control_msg returned -32 [ 1253.472191][ T5955] usbtmc 8-1:16.0: can't read capabilities [ 1254.525579][T20237] overlayfs: failed to resolve './file1': -2 [ 1254.537057][T20237] netlink: 340 bytes leftover after parsing attributes in process `syz.9.4060'. [ 1254.738760][T14034] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1254.920221][T14034] usb 9-1: Using ep0 maxpacket: 32 [ 1254.932392][T14034] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4D, changing to 0xD [ 1254.946546][T14034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 50381, setting to 64 [ 1254.976391][T14034] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1255.004890][T14034] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.035777][T14034] usb 9-1: config 0 descriptor?? [ 1255.066039][T14034] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1255.371755][T20253] netlink: 'syz.6.4065': attribute type 11 has an invalid length. [ 1255.720591][T10425] usb 8-1: USB disconnect, device number 36 [ 1256.065753][T20262] nfs: Unknown parameter ' ' [ 1256.073048][T20262] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4068'. [ 1256.935222][T10425] usb 9-1: USB disconnect, device number 3 [ 1257.412200][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4077'. [ 1257.814247][T10425] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1257.839108][T11557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1257.851302][T11557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1257.859560][T11557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1257.868807][T11557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1257.876943][T11557] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1257.884428][T11557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1258.180836][T10425] usb 9-1: Using ep0 maxpacket: 16 [ 1258.275179][T10425] usb 9-1: no configurations [ 1258.334909][T10425] usb 9-1: can't read configurations, error -22 [ 1258.482128][T20301] lo speed is unknown, defaulting to 1000 [ 1258.501680][T10425] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1259.118805][T10425] usb 9-1: Using ep0 maxpacket: 16 [ 1259.130708][T10425] usb 9-1: no configurations [ 1259.140109][T10425] usb 9-1: can't read configurations, error -22 [ 1259.154121][T10425] usb usb9-port1: attempt power cycle [ 1259.439298][T20301] chnl_net:caif_netlink_parms(): no params data found [ 1259.486777][T20301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.495235][T20301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.528247][T10425] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1259.614355][T20301] bridge_slave_0: entered allmulticast mode [ 1259.761280][T20301] bridge_slave_0: entered promiscuous mode [ 1260.116122][ T5823] Bluetooth: hci6: command tx timeout [ 1260.556395][T10425] usb 9-1: device descriptor read/8, error -71 [ 1260.567087][T20301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.574203][T20301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.597051][T20301] bridge_slave_1: entered allmulticast mode [ 1260.603634][T20301] bridge_slave_1: entered promiscuous mode [ 1260.751647][T20301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.871436][T20301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.012964][T20301] team0: Port device team_slave_0 added [ 1261.044714][T20301] team0: Port device team_slave_1 added [ 1261.165335][T20301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.172318][T20301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.258381][T20301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.298476][T20301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.311420][T20301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.377274][T20301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.390704][T20330] lo speed is unknown, defaulting to 1000 [ 1261.459266][T20301] hsr_slave_0: entered promiscuous mode [ 1261.496927][T20301] hsr_slave_1: entered promiscuous mode [ 1261.512662][T20301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.528039][T20301] Cannot create hsr debugfs directory [ 1262.015369][T20301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.078668][T20301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.100435][T19910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.107577][T19910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.178877][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.186052][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.318448][ T5823] Bluetooth: hci6: command tx timeout [ 1262.559486][T20301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.021222][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4097'. [ 1263.144796][T20301] veth0_vlan: entered promiscuous mode [ 1263.216327][T20301] veth1_vlan: entered promiscuous mode [ 1263.644716][T20301] veth0_macvtap: entered promiscuous mode [ 1263.677570][T20372] Bluetooth: MGMT ver 1.23 [ 1263.694518][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4099'. [ 1263.722559][T20301] veth1_macvtap: entered promiscuous mode [ 1263.780501][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.851591][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.889590][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.921684][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.933960][T20375] FAULT_INJECTION: forcing a failure. [ 1263.933960][T20375] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.946662][T20375] CPU: 0 UID: 0 PID: 20375 Comm: syz.5.4100 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1263.957444][T20375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1263.967519][T20375] Call Trace: [ 1263.970810][T20375] [ 1263.973753][T20375] dump_stack_lvl+0x241/0x360 [ 1263.978461][T20375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1263.983682][T20375] ? __pfx__printk+0x10/0x10 [ 1263.988305][T20375] should_fail_ex+0x3b0/0x4e0 [ 1263.993006][T20375] should_failslab+0xac/0x100 [ 1263.997801][T20375] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1264.003627][T20375] ? __alloc_skb+0x1c3/0x440 [ 1264.008242][T20375] ? find_match+0xa60/0xc10 [ 1264.012773][T20375] __alloc_skb+0x1c3/0x440 [ 1264.017228][T20375] ? __pfx___alloc_skb+0x10/0x10 [ 1264.022213][T20375] tcp_v6_send_response+0x392/0x2780 [ 1264.027531][T20375] ? mark_lock+0x9a/0x360 [ 1264.031908][T20375] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 1264.037687][T20375] ? ip6_pol_route+0x198/0x15d0 [ 1264.042579][T20375] tcp_v6_send_reset+0xdba/0x16c0 [ 1264.047647][T20375] ? tcp_v6_send_reset+0x2eb/0x16c0 [ 1264.052869][T20375] ? inet6_lhash2_lookup+0x4d0/0x500 [ 1264.058183][T20375] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 1264.063670][T20375] ? inet6_lookup_listener+0x1d1/0x2d0 [ 1264.069169][T20375] ? tcp_v6_fill_cb+0x3b/0x470 [ 1264.073964][T20375] ? __asan_memcpy+0x40/0x70 [ 1264.078589][T20375] ? tcp_v6_fill_cb+0x1e2/0x470 [ 1264.083465][T20375] ? tcp_checksum_complete+0x14f/0x200 [ 1264.088952][T20375] tcp_v6_rcv+0x20bb/0x2fb0 [ 1264.093608][T20375] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1264.098496][T20375] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1264.103374][T20375] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1264.108261][T20375] ip6_protocol_deliver_rcu+0xc79/0x1580 [ 1264.113954][T20375] ? ip6_input_finish+0xdc/0x2d0 [ 1264.118929][T20375] ip6_input_finish+0x187/0x2d0 [ 1264.123807][T20375] ? __pfx_ip6_input_finish+0x10/0x10 [ 1264.129200][T20375] NF_HOOK+0x3a4/0x450 [ 1264.133314][T20375] ? NF_HOOK+0x9a/0x450 [ 1264.137509][T20375] ? __pfx_NF_HOOK+0x10/0x10 [ 1264.142140][T20375] ? __pfx_ip6_input_finish+0x10/0x10 [ 1264.147558][T20375] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1264.152779][T20375] NF_HOOK+0x3a4/0x450 [ 1264.156876][T20375] ? skb_orphan+0x4b/0xd0 [ 1264.161244][T20375] ? NF_HOOK+0x9a/0x450 [ 1264.165416][T20375] ? __pfx_NF_HOOK+0x10/0x10 [ 1264.170029][T20375] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1264.175254][T20375] ? __pfx_ipv6_rcv+0x10/0x10 [ 1264.179941][T20375] __netif_receive_skb+0x1ea/0x650 [ 1264.185066][T20375] ? __pfx_lock_acquire+0x10/0x10 [ 1264.190099][T20375] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 1264.196357][T20375] ? __pfx___netif_receive_skb+0x10/0x10 [ 1264.202002][T20375] ? build_skb+0x52/0x2a0 [ 1264.206347][T20375] ? tun_get_user+0x2177/0x4890 [ 1264.211208][T20375] ? tun_chr_write_iter+0x10d/0x1f0 [ 1264.216406][T20375] ? do_syscall_64+0xf3/0x230 [ 1264.221104][T20375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.227192][T20375] ? tun_rx_batched+0x160/0x8f0 [ 1264.232057][T20375] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 1264.237778][T20375] ? read_tsc+0x9/0x20 [ 1264.241851][T20375] ? netif_receive_skb+0x131/0x890 [ 1264.246976][T20375] ? netif_receive_skb+0x131/0x890 [ 1264.252100][T20375] netif_receive_skb+0x1e8/0x890 [ 1264.257043][T20375] ? tun_rx_batched+0x160/0x8f0 [ 1264.261906][T20375] ? __pfx_netif_receive_skb+0x10/0x10 [ 1264.267377][T20375] ? tun_rx_batched+0x160/0x8f0 [ 1264.272230][T20375] tun_rx_batched+0x1b7/0x8f0 [ 1264.276921][T20375] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1264.283253][T20375] ? __pfx_lock_acquire+0x10/0x10 [ 1264.288283][T20375] ? __pfx_tun_rx_batched+0x10/0x10 [ 1264.293498][T20375] tun_get_user+0x30d6/0x4890 [ 1264.298178][T20375] ? tun_get_user+0x2bbe/0x4890 [ 1264.303035][T20375] ? tun_get_user+0x86e/0x4890 [ 1264.307803][T20375] ? __lock_acquire+0x1397/0x2100 [ 1264.312830][T20375] ? __pfx_tun_get_user+0x10/0x10 [ 1264.317868][T20375] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1264.323332][T20375] ? tun_get+0x1e/0x2f0 [ 1264.327484][T20375] ? __pfx_lock_release+0x10/0x10 [ 1264.332518][T20375] ? tun_get+0x1e/0x2f0 [ 1264.336673][T20375] ? tun_get+0x27d/0x2f0 [ 1264.340919][T20375] tun_chr_write_iter+0x10d/0x1f0 [ 1264.345947][T20375] vfs_write+0xaeb/0xd30 [ 1264.350191][T20375] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1264.355736][T20375] ? __pfx_vfs_write+0x10/0x10 [ 1264.360499][T20375] ? __fget_files+0x2a/0x410 [ 1264.365087][T20375] ? __fget_files+0x2a/0x410 [ 1264.369679][T20375] ksys_write+0x18f/0x2b0 [ 1264.374010][T20375] ? __pfx_ksys_write+0x10/0x10 [ 1264.378860][T20375] ? do_syscall_64+0x100/0x230 [ 1264.383643][T20375] ? do_syscall_64+0xb6/0x230 [ 1264.388411][T20375] do_syscall_64+0xf3/0x230 [ 1264.392915][T20375] ? clear_bhb_loop+0x35/0x90 [ 1264.397591][T20375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.403490][T20375] RIP: 0033:0x7fcc76f847df [ 1264.407904][T20375] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1264.427505][T20375] RSP: 002b:00007fcc77d2c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1264.435920][T20375] RAX: ffffffffffffffda RBX: 00007fcc77176080 RCX: 00007fcc76f847df [ 1264.443893][T20375] RDX: 000000000000004a RSI: 0000000020000080 RDI: 00000000000000c8 [ 1264.451861][T20375] RBP: 00007fcc77d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.459831][T20375] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1264.467830][T20375] R13: 0000000000000001 R14: 00007fcc77176080 R15: 00007fffbd54ffc8 [ 1264.475816][T20375] [ 1264.498918][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.509891][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.519728][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.530600][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.542943][ T5823] Bluetooth: hci6: command tx timeout [ 1264.548572][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.564368][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.574391][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.585453][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.596990][T20301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.623964][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.635055][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.657659][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.731274][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.741976][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.753074][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.764959][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.906460][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.916547][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.927167][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.937314][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.948306][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.958274][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.978204][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.989027][T20301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.000180][T20301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.011479][T20301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.404616][T19910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.520113][T19910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.587682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.625210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.641317][T20383] No such timeout policy "syz1" [ 1266.202571][T20398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4080'. [ 1266.211810][T20398] gre0: entered promiscuous mode [ 1266.216837][T20398] gre0: entered allmulticast mode [ 1266.235787][T20398] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4080'. [ 1266.766387][ T5823] Bluetooth: hci6: command tx timeout [ 1266.881389][ T5823] Bluetooth: hci6: unexpected event for opcode 0x043d [ 1266.889626][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1266.889643][ T29] audit: type=1326 audit(2000004746.414:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20409 comm="syz.5.4111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc76f85d29 code=0x0 [ 1267.182347][T10425] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1267.342628][T10425] usb 9-1: Using ep0 maxpacket: 16 [ 1267.349787][T10425] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1267.359326][T10425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.368603][T10425] usb 9-1: config 0 descriptor?? [ 1267.376168][T10425] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1267.781479][ T5870] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1268.562458][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 1268.573462][ T5870] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1268.583253][ T5870] usb 7-1: config 0 has no interface number 0 [ 1268.608058][T20412] loop7: detected capacity change from 0 to 16384 [ 1268.617941][ T5870] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1268.637345][ T5870] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1268.654479][T20428] syz.5.4118: attempt to access beyond end of device [ 1268.654479][T20428] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1268.658156][ T5870] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1268.674281][T20428] FAT-fs (loop11): unable to read boot sector [ 1268.677775][ T5870] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1268.691285][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.714779][T20412] buffer_io_error: 4 callbacks suppressed [ 1268.714797][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.764824][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.792912][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.807489][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.827717][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.866915][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.875047][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.885561][ T5870] usb 7-1: Product: syz [ 1268.889772][ T5870] usb 7-1: Manufacturer: syz [ 1268.894531][ T5870] usb 7-1: SerialNumber: syz [ 1268.901568][ T5870] usb 7-1: config 0 descriptor?? [ 1268.904109][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1268.907636][T20417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1268.922092][T20417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1268.925577][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1268.940097][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1269.051613][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1269.090900][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1269.369768][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1269.419781][T20417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1269.490265][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1269.498396][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1269.498825][T20417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1269.507732][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1269.522653][T20412] ldm_validate_partition_table(): Disk read failed. [ 1269.529425][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1269.538643][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1269.548102][T20412] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1269.557354][T20412] Buffer I/O error on dev loop7, logical block 0, async page read [ 1269.566058][T20412] Dev loop7: unable to read RDB block 0 [ 1269.572259][T20412] loop7: unable to read partition table [ 1269.578131][T20412] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480Ź• #Đ …$qÝZ”©ţ•I‘ŠçýÎ[†u±@3bĎŕôüĎűj!5MMń]z) failed (rc=-5) [ 1269.724790][T10425] usb 9-1: USB disconnect, device number 8 [ 1270.257830][ T5870] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1271.969355][ T5870] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1271.981002][ T5870] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1272.007001][T11946] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1272.025544][ T5870] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1272.068853][ T5870] usb 7-1: USB disconnect, device number 33 [ 1272.222788][T11946] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.299005][T11946] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1272.331449][T11946] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1272.367826][T11946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.440132][T11946] usb 8-1: config 0 descriptor?? [ 1272.908393][T11946] Bluetooth: Can't get state to change to load configuration err [ 1272.918337][T11946] Bluetooth: Loading sysconfig file failed [ 1272.939923][T11946] ath3k 8-1:0.0: probe with driver ath3k failed with error -16 [ 1273.181710][ T29] audit: type=1326 audit(2000004752.298:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20451 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96785d29 code=0x7ffc0000 [ 1273.241134][ T29] audit: type=1326 audit(2000004752.298:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20451 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96785d29 code=0x7ffc0000 [ 1273.278731][ T29] audit: type=1326 audit(2000004752.298:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20451 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee96785d29 code=0x7ffc0000 [ 1273.350790][ T29] audit: type=1326 audit(2000004752.298:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20451 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96785d29 code=0x7ffc0000 [ 1273.377809][ T29] audit: type=1326 audit(2000004752.298:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20451 comm="syz.7.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee96785d29 code=0x7ffc0000 [ 1274.827581][ T29] audit: type=1326 audit(2000004753.832:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20495 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1274.915218][T10425] usb 8-1: USB disconnect, device number 37 [ 1274.978821][ T29] audit: type=1326 audit(2000004753.832:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20495 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1275.050626][ T29] audit: type=1326 audit(2000004753.832:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20495 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1275.420854][ T29] audit: type=1326 audit(2000004753.832:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20495 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1275.561807][ T29] audit: type=1326 audit(2000004753.832:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20495 comm="syz.8.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1275.709832][T20503] netlink: 'syz.8.4140': attribute type 8 has an invalid length. [ 1275.724265][T20503] netlink: 236 bytes leftover after parsing attributes in process `syz.8.4140'. [ 1276.853749][T20531] netlink: 'syz.8.4146': attribute type 1 has an invalid length. [ 1278.070613][T20551] netlink: 'syz.8.4152': attribute type 11 has an invalid length. [ 1278.299902][T20304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1278.310690][T20304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1278.334102][T20304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1278.628616][T20304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1278.648370][T20304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1278.666398][T20304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1279.055808][T20556] lo speed is unknown, defaulting to 1000 [ 1279.311219][T20571] Invalid logical block size (1437270015) [ 1280.449824][T14034] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1280.503578][T20583] QAT: Invalid ioctl 1075883590 [ 1280.509198][T20583] QAT: Invalid ioctl 1075883590 [ 1280.514580][T20583] QAT: Invalid ioctl 1075883590 [ 1280.519682][T20583] QAT: Invalid ioctl 1075883590 [ 1280.524884][T20583] QAT: Invalid ioctl 1075883590 [ 1280.530016][T20583] QAT: Invalid ioctl 1075883590 [ 1280.535325][T20583] QAT: Invalid ioctl 1075883590 [ 1280.541954][T20583] QAT: Invalid ioctl 1075883590 [ 1280.547286][T20583] QAT: Invalid ioctl 1075883590 [ 1280.553026][T20583] QAT: Invalid ioctl 1075883590 [ 1280.781014][T14034] usb 9-1: Using ep0 maxpacket: 16 [ 1280.844530][T14034] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1280.875805][T14034] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.888267][T14034] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1280.966368][T14034] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1280.972992][T20556] chnl_net:caif_netlink_parms(): no params data found [ 1280.998447][T14034] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.046443][T14034] usb 9-1: Product: syz [ 1281.051269][ T5823] Bluetooth: hci1: command tx timeout [ 1281.061650][T14034] usb 9-1: Manufacturer: syz [ 1281.066450][T14034] usb 9-1: SerialNumber: syz [ 1281.278937][T20556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.279075][T20556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.279349][T20556] bridge_slave_0: entered allmulticast mode [ 1281.280815][T20556] bridge_slave_0: entered promiscuous mode [ 1281.316330][T20556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.316455][T20556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.334137][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.340634][T20556] bridge_slave_1: entered allmulticast mode [ 1281.365950][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.371411][T20556] bridge_slave_1: entered promiscuous mode [ 1281.517940][T14034] usb 9-1: 0:2 : does not exist [ 1281.529664][T14034] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1281.535143][T20556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.624706][T20556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.626090][T14034] usb 9-1: USB disconnect, device number 9 [ 1281.808461][T20607] netlink: 'syz.5.4165': attribute type 11 has an invalid length. [ 1281.851575][T20556] team0: Port device team_slave_0 added [ 1281.876620][T20556] team0: Port device team_slave_1 added [ 1281.957811][T20556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.973526][T20556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.999488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.031799][T20556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.308677][T20556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.353279][T20556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.379255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.389234][T20556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.528009][T20613] FAULT_INJECTION: forcing a failure. [ 1282.528009][T20613] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.570891][T20613] CPU: 1 UID: 0 PID: 20613 Comm: syz.6.4167 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1282.581709][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1282.591754][T20613] Call Trace: [ 1282.595029][T20613] [ 1282.597951][T20613] dump_stack_lvl+0x241/0x360 [ 1282.602628][T20613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1282.607822][T20613] ? __pfx__printk+0x10/0x10 [ 1282.612412][T20613] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1282.618396][T20613] ? __pfx___might_resched+0x10/0x10 [ 1282.623699][T20613] should_fail_ex+0x3b0/0x4e0 [ 1282.628370][T20613] should_failslab+0xac/0x100 [ 1282.633042][T20613] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1282.638836][T20613] ? __alloc_skb+0x1c3/0x440 [ 1282.643417][T20613] __alloc_skb+0x1c3/0x440 [ 1282.647826][T20613] ? __pfx___alloc_skb+0x10/0x10 [ 1282.652765][T20613] ? netlink_ack_tlv_len+0x6e/0x200 [ 1282.657969][T20613] netlink_ack+0x145/0xa50 [ 1282.662383][T20613] netlink_rcv_skb+0x262/0x430 [ 1282.667136][T20613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1282.672583][T20613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1282.677896][T20613] ? netlink_deliver_tap+0x2e/0x1b0 [ 1282.683104][T20613] netlink_unicast+0x7f6/0x990 [ 1282.687870][T20613] ? __pfx_netlink_unicast+0x10/0x10 [ 1282.693148][T20613] ? __virt_addr_valid+0x45f/0x530 [ 1282.698251][T20613] ? __phys_addr_symbol+0x2f/0x70 [ 1282.703281][T20613] ? __check_object_size+0x47a/0x730 [ 1282.708569][T20613] netlink_sendmsg+0x8e4/0xcb0 [ 1282.713336][T20613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.718635][T20613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.723906][T20613] __sock_sendmsg+0x221/0x270 [ 1282.728590][T20613] ____sys_sendmsg+0x52a/0x7e0 [ 1282.733394][T20613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.738678][T20613] ? __fget_files+0x2a/0x410 [ 1282.743280][T20613] ? __fget_files+0x2a/0x410 [ 1282.747890][T20613] __sys_sendmsg+0x269/0x350 [ 1282.752484][T20613] ? __pfx_lock_release+0x10/0x10 [ 1282.757504][T20613] ? __pfx___sys_sendmsg+0x10/0x10 [ 1282.762613][T20613] ? __pfx_vfs_write+0x10/0x10 [ 1282.767411][T20613] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1282.773743][T20613] ? do_syscall_64+0x100/0x230 [ 1282.778500][T20613] ? do_syscall_64+0xb6/0x230 [ 1282.783170][T20613] do_syscall_64+0xf3/0x230 [ 1282.787673][T20613] ? clear_bhb_loop+0x35/0x90 [ 1282.792340][T20613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.798227][T20613] RIP: 0033:0x7fdb7d185d29 [ 1282.802634][T20613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1282.822231][T20613] RSP: 002b:00007fdb7e01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.830633][T20613] RAX: ffffffffffffffda RBX: 00007fdb7d375fa0 RCX: 00007fdb7d185d29 [ 1282.838597][T20613] RDX: 0000000000008000 RSI: 00000000200007c0 RDI: 0000000000000008 [ 1282.846560][T20613] RBP: 00007fdb7e01f090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.854527][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.862495][T20613] R13: 0000000000000000 R14: 00007fdb7d375fa0 R15: 00007fff65fa5538 [ 1282.870494][T20613] [ 1282.873580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.295108][ T5823] Bluetooth: hci1: command tx timeout [ 1283.306341][T20624] misc userio: The device must be registered before sending interrupts [ 1283.399439][T20556] hsr_slave_0: entered promiscuous mode [ 1283.528657][T20556] hsr_slave_1: entered promiscuous mode [ 1283.929337][T20556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1283.997675][T20556] Cannot create hsr debugfs directory [ 1284.044213][T20628] bond0: option all_slaves_active: invalid value (9) [ 1284.640122][T20639] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1285.205770][T11946] IPVS: starting estimator thread 0... [ 1285.228783][T20639] overlayfs: failed to resolve './bus': -2 [ 1285.315988][T20646] IPVS: using max 21 ests per chain, 50400 per kthread [ 1285.431501][T14034] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 1285.500028][ T5823] Bluetooth: hci1: command tx timeout [ 1285.622801][T20642] dvmrp5: entered allmulticast mode [ 1285.707368][T14034] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1285.734936][T20645] netlink: 'syz.5.4176': attribute type 11 has an invalid length. [ 1285.736170][T14034] usb 8-1: config 0 has no interface number 0 [ 1285.790762][T14034] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1285.824153][T14034] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.846105][T14034] usb 8-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 1285.868766][T14034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.890707][T14034] usb 8-1: config 0 descriptor?? [ 1286.566259][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.584223][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.599705][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.626094][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.637271][T20556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.644272][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.659525][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.673977][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.687945][T20556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.692610][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.711506][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.723400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.729003][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.730543][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.746464][T14034] wacom 0003:056A:005D.0015: unknown main item tag 0x0 [ 1286.748924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.760561][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.786846][T14034] wacom 0003:056A:005D.0015: hidraw0: USB HID v40.40 Device [HID 056a:005d] on usb-dummy_hcd.7-1/input2 [ 1286.871070][T20556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1286.895555][T20556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1286.920417][T20665] tipc: Started in network mode [ 1286.925470][T20665] tipc: Node identity 7f000001, cluster identity 4711 [ 1286.934633][T20665] tipc: Enabled bearer , priority 10 [ 1287.967574][ T5823] Bluetooth: hci1: command tx timeout [ 1288.023995][T14034] tipc: Node number set to 2130706433 [ 1288.077066][T11946] usb 8-1: USB disconnect, device number 38 [ 1288.113363][T14034] IPVS: starting estimator thread 0... [ 1288.221951][T20677] IPVS: using max 22 ests per chain, 52800 per kthread [ 1288.286340][ T29] audit: type=1326 audit(2000004766.423:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1288.499643][T11946] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1288.505296][ T29] audit: type=1326 audit(2000004766.423:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1288.557248][ T29] audit: type=1326 audit(2000004766.423:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1288.662763][ T29] audit: type=1326 audit(2000004766.423:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1288.671552][T11946] usb 8-1: Using ep0 maxpacket: 8 [ 1288.699794][ T29] audit: type=1326 audit(2000004766.423:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1288.733224][T11946] usb 8-1: too many configurations: 249, using maximum allowed: 8 [ 1288.754644][ T29] audit: type=1326 audit(2000004766.423:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1288.794969][T11946] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 1288.806649][T11946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 1288.889023][T20556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.897599][ T29] audit: type=1326 audit(2000004766.423:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1289.002235][ T29] audit: type=1326 audit(2000004766.423:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1289.016886][T11946] usb 8-1: Product: syz [ 1289.158008][ T29] audit: type=1326 audit(2000004766.423:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1289.280340][ T29] audit: type=1326 audit(2000004766.423:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20668 comm="syz.8.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d5d785d29 code=0x7ffc0000 [ 1289.475202][T11946] usb 8-1: Manufacturer: syz [ 1289.479870][T11946] usb 8-1: SerialNumber: syz [ 1289.488060][T11946] usb 8-1: config 0 descriptor?? [ 1289.715249][T11946] mdc800 8-1:0.0: probe fails -> wrong Number of Configuration [ 1289.726221][T11946] usb 8-1: USB disconnect, device number 39 [ 1289.737713][T20556] veth0_vlan: entered promiscuous mode [ 1289.767651][T20556] veth1_vlan: entered promiscuous mode [ 1289.854499][T20556] veth0_macvtap: entered promiscuous mode [ 1289.865008][T20556] veth1_macvtap: entered promiscuous mode [ 1289.880152][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.891375][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.902060][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.913036][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.922948][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.949444][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.974513][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.001108][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.023538][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.042222][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.064893][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.093840][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.104037][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.114771][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.126881][T20556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1290.142409][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.153053][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.231740][T14034] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1290.242624][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.740017][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.754708][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.765396][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.781541][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.792080][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.802206][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.813381][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.823278][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.834181][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.844311][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.854882][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.864775][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.875291][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.885330][T20556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.896418][T20556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.908381][T20556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1291.001112][T14034] usb 7-1: device descriptor read/64, error -71 [ 1291.050037][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4197'. [ 1291.061502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.075749][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.093955][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4197'. [ 1291.125353][T20170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.133577][T20170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.258221][T14034] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1292.147234][T20727] kAFS: No cell specified [ 1292.294824][T14034] usb 7-1: device descriptor read/64, error -71 [ 1292.356520][T20733] x_tables: duplicate underflow at hook 2 [ 1292.417370][T14034] usb usb7-port1: attempt power cycle [ 1292.450674][T20733] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1292.730739][T20739] netlink: 'syz.2.4203': attribute type 11 has an invalid length. [ 1292.818894][T14034] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1292.855904][T14034] usb 7-1: device descriptor read/8, error -71 [ 1293.138794][T14034] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1293.163144][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4205'. [ 1293.518512][T14034] usb 7-1: device not accepting address 37, error -71 [ 1293.545908][T14034] usb usb7-port1: unable to enumerate USB device [ 1296.116136][T20761] veth0_to_team: entered promiscuous mode [ 1296.152465][T20761] macsec1: entered allmulticast mode [ 1296.165067][T20761] veth0_to_team: entered allmulticast mode [ 1296.336121][T20761] veth0_to_team: left allmulticast mode [ 1296.360680][T20761] veth0_to_team: left promiscuous mode [ 1296.977515][T20787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4214'. [ 1297.988627][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4214'. [ 1298.313660][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4219'. [ 1299.197391][T20802] binder: 20800:20802 ioctl c0306201 200001c0 returned -14 [ 1300.585155][T14034] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1300.750995][T10425] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1300.943384][T10425] usb 7-1: Using ep0 maxpacket: 16 [ 1300.969174][T10425] usb 7-1: config 0 has an invalid interface descriptor of length 5, skipping [ 1301.381876][T10425] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.392339][T10425] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1301.415778][T10425] usb 7-1: New USB device found, idVendor=0f01, idProduct=9800, bcdDevice=d1.9a [ 1301.425067][T10425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.433073][T10425] usb 7-1: Product: syz [ 1301.440427][T10425] usb 7-1: Manufacturer: syz [ 1301.445629][T10425] usb 7-1: SerialNumber: syz [ 1301.457326][T10425] usb 7-1: config 0 descriptor?? [ 1301.618376][T14034] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1301.626801][T14034] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.636909][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1301.636925][ T29] audit: type=1326 audit(2000004778.910:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1301.672240][T14034] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1301.684288][T14034] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1301.692490][T14034] usb 8-1: Manufacturer: syz [ 1301.701686][T14034] usb 8-1: config 0 descriptor?? [ 1301.718518][ T29] audit: type=1326 audit(2000004778.910:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1301.729744][T20814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.769139][ T29] audit: type=1326 audit(2000004778.910:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1301.783174][T20814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.794483][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4233'. [ 1301.807982][T14034] rc_core: IR keymap rc-hauppauge not found [ 1301.814992][T14034] Registered IR keymap rc-empty [ 1301.817685][T10425] usb 7-1: USB disconnect, device number 38 [ 1301.838348][T14034] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1301.848063][ T29] audit: type=1326 audit(2000004778.910:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1301.876631][ T29] audit: type=1326 audit(2000004778.910:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1301.902522][ T29] audit: type=1326 audit(2000004778.910:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1301.902807][T14034] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input58 [ 1301.925325][ T29] audit: type=1326 audit(2000004778.910:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1301.993926][ T29] audit: type=1326 audit(2000004778.910:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1302.018612][ T29] audit: type=1326 audit(2000004778.910:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1302.041167][ T29] audit: type=1326 audit(2000004778.910:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20817 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1302.236903][ T5901] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1302.398784][ T5901] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1302.437081][ T5901] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1302.474660][ T5901] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1302.489766][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.490707][T20807] binder: 20805:20807 ioctl c018620b 200000c0 returned -14 [ 1302.543490][ T5901] usb 9-1: Product: syz [ 1302.557695][ T5901] usb 9-1: Manufacturer: syz [ 1302.562526][ T5901] usb 9-1: SerialNumber: syz [ 1302.605102][T20812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.621877][T20812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.829502][ T5901] usb 9-1: 0:2 : does not exist [ 1302.849498][ T5901] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1302.869736][ T95] usb 8-1: USB disconnect, device number 40 [ 1302.901155][ T5901] usb 9-1: USB disconnect, device number 10 [ 1302.932018][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1303.102824][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1303.121341][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.141560][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.152292][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1303.165813][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1303.175035][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.184869][ T9] usb 7-1: config 0 descriptor?? [ 1303.641423][T20852] fuse: Unknown parameter 'user_i00000000000000000000' [ 1303.720346][ T9] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 1303.729571][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.736942][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.744565][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.752615][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.760016][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.767355][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.774846][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.782291][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.789715][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.797104][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.805664][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.813216][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.820854][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.828182][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.844131][T20856] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1303.866987][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.874621][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1303.895763][ T9] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 1303.922663][ T9] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1303.934500][ T9] microsoft 0003:045E:07DA.0016: no inputs found [ 1303.941076][ T9] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 1303.995265][T20855] netlink: 1264 bytes leftover after parsing attributes in process `syz.7.4240'. [ 1304.659954][T20861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1304.859268][T20873] FAULT_INJECTION: forcing a failure. [ 1304.859268][T20873] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.899388][T20873] CPU: 1 UID: 0 PID: 20873 Comm: syz.2.4244 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1304.910201][T20873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1304.920277][T20873] Call Trace: [ 1304.923573][T20873] [ 1304.926524][T20873] dump_stack_lvl+0x241/0x360 [ 1304.931235][T20873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.936463][T20873] ? __pfx__printk+0x10/0x10 [ 1304.941080][T20873] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1304.946647][T20873] ? __pfx___might_resched+0x10/0x10 [ 1304.951936][T20873] should_fail_ex+0x3b0/0x4e0 [ 1304.956645][T20873] should_failslab+0xac/0x100 [ 1304.961321][T20873] ? security_file_alloc+0x32/0x310 [ 1304.966509][T20873] kmem_cache_alloc_noprof+0x70/0x380 [ 1304.971888][T20873] security_file_alloc+0x32/0x310 [ 1304.976919][T20873] init_file+0x91/0x280 [ 1304.981084][T20873] alloc_empty_file+0xb8/0x1d0 [ 1304.985838][T20873] alloc_file_pseudo+0x1da/0x290 [ 1304.990772][T20873] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1304.996236][T20873] ? security_inode_alloc+0xd2/0x310 [ 1305.001544][T20873] sock_alloc_file+0xb8/0x280 [ 1305.006235][T20873] do_accept+0x36f/0x6d0 [ 1305.010478][T20873] ? __pfx_do_accept+0x10/0x10 [ 1305.015251][T20873] __sys_accept4+0x11f/0x1d0 [ 1305.019868][T20873] ? __pfx___sys_accept4+0x10/0x10 [ 1305.024979][T20873] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1305.031305][T20873] ? do_syscall_64+0x100/0x230 [ 1305.036069][T20873] __x64_sys_accept4+0x9a/0xb0 [ 1305.040830][T20873] do_syscall_64+0xf3/0x230 [ 1305.045332][T20873] ? clear_bhb_loop+0x35/0x90 [ 1305.049998][T20873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.055890][T20873] RIP: 0033:0x7fc43ed85d29 [ 1305.060301][T20873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.079914][T20873] RSP: 002b:00007fc43fb06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1305.088348][T20873] RAX: ffffffffffffffda RBX: 00007fc43ef75fa0 RCX: 00007fc43ed85d29 [ 1305.096318][T20873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1305.104294][T20873] RBP: 00007fc43fb06090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.112276][T20873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.120245][T20873] R13: 0000000000000000 R14: 00007fc43ef75fa0 R15: 00007ffe26708148 [ 1305.128218][T20873] [ 1305.294575][T20879] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4245'. [ 1305.945652][T20889] overlayfs: conflicting lowerdir path [ 1306.531027][T20888] overlayfs: conflicting lowerdir path [ 1306.986633][T10425] usb 7-1: USB disconnect, device number 39 [ 1307.104249][T20903] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1307.114702][T20903] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1307.123066][T20903] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1307.130804][T20903] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1307.151517][T20903] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1307.159561][T20903] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1307.178833][T20903] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1307.280313][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 1307.280331][ T29] audit: type=1326 audit(2000004784.195:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1307.309234][ T29] audit: type=1326 audit(2000004784.195:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1307.365254][ T29] audit: type=1326 audit(2000004784.195:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1307.476584][T20907] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4250'. [ 1307.477023][T20903] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1307.508664][ T29] audit: type=1326 audit(2000004784.195:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1308.258723][ T29] audit: type=1326 audit(2000004784.195:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1308.292766][ T29] audit: type=1326 audit(2000004784.195:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1308.314909][ T29] audit: type=1326 audit(2000004784.195:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1308.337107][ T29] audit: type=1326 audit(2000004784.195:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1308.359047][ T29] audit: type=1326 audit(2000004784.195:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1308.380867][ T29] audit: type=1326 audit(2000004784.195:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20885 comm="syz.2.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43ed85d29 code=0x7fc00000 [ 1308.517944][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4253'. [ 1308.883973][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4257'. [ 1308.908575][ T9] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1308.930691][T20922] syz.8.4257: attempt to access beyond end of device [ 1308.930691][T20922] nbd8: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1308.954107][ T95] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1308.954130][T20922] VFS: could not find a valid V7 on nbd8. [ 1309.106164][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1309.128631][ T9] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1309.142926][ T95] usb 7-1: Using ep0 maxpacket: 8 [ 1309.152133][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1309.154378][ T95] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.179973][ T95] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1309.184413][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1309.192257][ T95] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1309.213360][ T95] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1309.233799][ T95] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1309.246338][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1309.310061][ T9] usb 8-1: SerialNumber: syz [ 1309.318344][T20914] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1309.324459][ T95] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1309.337513][ T95] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1309.345614][ T95] usb 7-1: Product: syz [ 1309.363924][ T95] usb 7-1: Manufacturer: syz [ 1309.368991][ T95] usb 7-1: SerialNumber: syz [ 1309.385204][ T95] usb 7-1: config 0 descriptor?? [ 1309.543888][ T9] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1309.546562][ T9] usb 8-1: USB disconnect, device number 41 [ 1309.956000][ T95] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1309.964687][ T95] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1310.454605][T20948] misc userio: No port type given on /dev/userio [ 1310.466422][T20948] misc userio: The device must be registered before sending interrupts [ 1310.722130][ T9] usb 7-1: USB disconnect, device number 40 [ 1312.424959][ T95] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1312.704698][ T95] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.742726][ T95] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.794072][ T95] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1312.803309][ T95] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.815927][ T95] usb 8-1: config 0 descriptor?? [ 1313.076647][ T95] hid-led 0003:0FC5:B080.0017: unbalanced collection at end of report description [ 1313.086533][ T95] hid-led 0003:0FC5:B080.0017: probe with driver hid-led failed with error -22 [ 1313.404574][T20976] netlink: 'syz.5.4275': attribute type 10 has an invalid length. [ 1313.439828][T20976] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.4275'. [ 1313.461103][T20976] openvswitch: netlink: Flow key attr not present in new flow. [ 1313.709788][ T5870] usb 8-1: USB disconnect, device number 42 [ 1313.745285][T20983] netlink: 'syz.5.4276': attribute type 11 has an invalid length. [ 1313.846611][T20991] misc userio: No port type given on /dev/userio [ 1313.853349][T20991] misc userio: The device must be registered before sending interrupts [ 1313.997211][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4278'. [ 1315.691560][T21016] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4286'. [ 1317.016072][T21016] FAULT_INJECTION: forcing a failure. [ 1317.016072][T21016] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.284702][T21016] CPU: 0 UID: 0 PID: 21016 Comm: syz.5.4286 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1317.295497][T21016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1317.305542][T21016] Call Trace: [ 1317.308807][T21016] [ 1317.311727][T21016] dump_stack_lvl+0x241/0x360 [ 1317.316399][T21016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1317.321586][T21016] ? __pfx__printk+0x10/0x10 [ 1317.326167][T21016] ? ref_tracker_alloc+0x332/0x490 [ 1317.331267][T21016] should_fail_ex+0x3b0/0x4e0 [ 1317.335933][T21016] should_failslab+0xac/0x100 [ 1317.340602][T21016] ? skb_clone+0x20c/0x390 [ 1317.345035][T21016] kmem_cache_alloc_noprof+0x70/0x380 [ 1317.350404][T21016] skb_clone+0x20c/0x390 [ 1317.354638][T21016] __netlink_deliver_tap+0x3cc/0x7f0 [ 1317.359915][T21016] ? netlink_deliver_tap+0x2e/0x1b0 [ 1317.365099][T21016] netlink_deliver_tap+0x19d/0x1b0 [ 1317.370196][T21016] netlink_sendskb+0x68/0x140 [ 1317.374860][T21016] netlink_unicast+0x39d/0x990 [ 1317.379641][T21016] ? __pfx_netlink_unicast+0x10/0x10 [ 1317.384953][T21016] netlink_rcv_skb+0x262/0x430 [ 1317.389735][T21016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1317.395201][T21016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1317.400488][T21016] ? netlink_deliver_tap+0x2e/0x1b0 [ 1317.405693][T21016] netlink_unicast+0x7f6/0x990 [ 1317.410498][T21016] ? __pfx_netlink_unicast+0x10/0x10 [ 1317.415780][T21016] ? __virt_addr_valid+0x45f/0x530 [ 1317.420886][T21016] ? __phys_addr_symbol+0x2f/0x70 [ 1317.425900][T21016] ? __check_object_size+0x47a/0x730 [ 1317.431182][T21016] netlink_sendmsg+0x8e4/0xcb0 [ 1317.435940][T21016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.441216][T21016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.446487][T21016] __sock_sendmsg+0x221/0x270 [ 1317.451163][T21016] ____sys_sendmsg+0x52a/0x7e0 [ 1317.455918][T21016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.461186][T21016] ? __fget_files+0x2a/0x410 [ 1317.465762][T21016] ? __fget_files+0x2a/0x410 [ 1317.470350][T21016] __sys_sendmmsg+0x36a/0x720 [ 1317.475019][T21016] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1317.480206][T21016] ? __pfx_lock_release+0x10/0x10 [ 1317.485212][T21016] ? kstrtouint_from_user+0x128/0x190 [ 1317.490590][T21016] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1317.496474][T21016] ? ksys_write+0x22a/0x2b0 [ 1317.500962][T21016] ? __pfx_lock_release+0x10/0x10 [ 1317.505976][T21016] ? vfs_write+0x730/0xd30 [ 1317.510394][T21016] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1317.516026][T21016] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1317.521993][T21016] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1317.528321][T21016] ? do_syscall_64+0x100/0x230 [ 1317.533078][T21016] __x64_sys_sendmmsg+0xa0/0xb0 [ 1317.537919][T21016] do_syscall_64+0xf3/0x230 [ 1317.542407][T21016] ? clear_bhb_loop+0x35/0x90 [ 1317.547070][T21016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.552952][T21016] RIP: 0033:0x7fcc76f85d29 [ 1317.557358][T21016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.576948][T21016] RSP: 002b:00007fcc77d4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1317.585360][T21016] RAX: ffffffffffffffda RBX: 00007fcc77175fa0 RCX: 00007fcc76f85d29 [ 1317.593321][T21016] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 1317.601282][T21016] RBP: 00007fcc77d4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.609241][T21016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.617207][T21016] R13: 0000000000000000 R14: 00007fcc77175fa0 R15: 00007fffbd54ffc8 [ 1317.625176][T21016] [ 1317.632066][T20304] Bluetooth: hci2: command 0x0406 tx timeout [ 1317.664985][T21016] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4286'. [ 1317.681302][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1317.681377][ T29] audit: type=1326 audit(2000004793.923:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.716996][ T29] audit: type=1326 audit(2000004793.951:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.767840][ T29] audit: type=1326 audit(2000004793.951:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.849055][ T29] audit: type=1326 audit(2000004793.951:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.875446][ T29] audit: type=1326 audit(2000004793.951:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.897322][ T29] audit: type=1326 audit(2000004793.951:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.920063][ T29] audit: type=1326 audit(2000004793.951:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.944197][ T29] audit: type=1326 audit(2000004793.951:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.966079][ T29] audit: type=1326 audit(2000004793.951:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1317.988292][ T29] audit: type=1326 audit(2000004793.951:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20993 comm="syz.6.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7d185d29 code=0x7fc00000 [ 1318.607783][T21037] misc userio: No port type given on /dev/userio [ 1318.622787][T21037] misc userio: The device must be registered before sending interrupts [ 1319.195523][T14034] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1319.374216][T14034] usb 9-1: Using ep0 maxpacket: 16 [ 1319.450069][T14034] usb 9-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 1319.480790][T14034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1319.512784][T14034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 149, changing to 11 [ 1319.543097][T14034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 17459, setting to 1024 [ 1319.585910][T14034] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1319.647741][T14034] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1319.691399][T14034] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1319.699651][T14034] usb 9-1: Manufacturer: syz [ 1319.717122][T14034] usb 9-1: config 0 descriptor?? [ 1320.036889][T14034] rc_core: IR keymap rc-hauppauge not found [ 1320.052657][T14034] Registered IR keymap rc-empty [ 1320.062798][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.113334][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.135437][T14034] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1320.155951][T14034] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input60 [ 1320.176543][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.197385][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.219245][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.253426][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.278737][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.304490][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.336821][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.357634][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.380201][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.411376][T14034] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1320.433166][T14034] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1320.464654][T14034] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1320.481945][T21061] gre0: left allmulticast mode [ 1320.486588][T14034] usb 9-1: USB disconnect, device number 11 [ 1320.707859][T21066] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1322.259537][T21077] 9pnet: Could not find request transport: rdma˙˙˙˙18446744073709551615 [ 1322.480213][T21081] vlan2: entered promiscuous mode [ 1322.489866][T21081] batadv0: entered promiscuous mode [ 1322.514754][T21081] team0: Port device vlan2 added [ 1323.346706][T20304] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1323.356879][T20304] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1323.407806][T20304] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1323.418033][T20304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1323.426748][T20304] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1323.435037][T20304] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1323.569218][T21092] lo speed is unknown, defaulting to 1000 [ 1323.757068][ T5870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1324.061719][ T5870] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 1324.153809][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.172085][ T5870] usb 3-1: config 0 descriptor?? [ 1324.363578][ T5870] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1325.506484][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1325.506502][ T29] audit: type=1400 audit(2000004801.238:2067): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=21094 comm="syz.2.4310" saddr=172.30.0.3 daddr=172.20.20.170 [ 1325.534385][T21112] can: request_module (can-proto-5) failed. [ 1325.542048][ T9] usb 3-1: USB disconnect, device number 12 [ 1325.549847][T21092] chnl_net:caif_netlink_parms(): no params data found [ 1325.692942][T20304] Bluetooth: hci7: command tx timeout [ 1325.845008][T21092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.911757][T21092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.019685][T21092] bridge_slave_0: entered allmulticast mode [ 1326.098374][T21092] bridge_slave_0: entered promiscuous mode [ 1326.244237][T21092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.291068][T21092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.298861][T21092] bridge_slave_1: entered allmulticast mode [ 1326.335433][T21092] bridge_slave_1: entered promiscuous mode [ 1326.428947][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4318'. [ 1326.534562][T21135] x_tables: duplicate underflow at hook 2 [ 1326.651428][T21130] ip6gretap0: entered promiscuous mode [ 1326.657316][T21130] macsec1: entered promiscuous mode [ 1326.670555][T21130] macsec1: entered allmulticast mode [ 1326.698366][T21130] ip6gretap0: entered allmulticast mode [ 1326.713662][T21130] ip6gretap0: left allmulticast mode [ 1326.725705][T21130] ip6gretap0: left promiscuous mode [ 1326.790716][T21134] FAULT_INJECTION: forcing a failure. [ 1326.790716][T21134] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.803446][T21134] CPU: 0 UID: 0 PID: 21134 Comm: syz.8.4320 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1326.814222][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1326.824287][T21134] Call Trace: [ 1326.827578][T21134] [ 1326.830524][T21134] dump_stack_lvl+0x241/0x360 [ 1326.835224][T21134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1326.840440][T21134] ? __pfx__printk+0x10/0x10 [ 1326.845058][T21134] should_fail_ex+0x3b0/0x4e0 [ 1326.849755][T21134] should_failslab+0xac/0x100 [ 1326.854451][T21134] ? skb_clone+0x20c/0x390 [ 1326.858896][T21134] kmem_cache_alloc_noprof+0x70/0x380 [ 1326.864298][T21134] skb_clone+0x20c/0x390 [ 1326.868563][T21134] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 1326.873773][T21134] dev_queue_xmit_nit+0x249/0xca0 [ 1326.878815][T21134] ? dev_queue_xmit_nit+0x2b/0xca0 [ 1326.883936][T21134] ? validate_xmit_skb+0x9b8/0xff0 [ 1326.889063][T21134] dev_hard_start_xmit+0x15f/0x7d0 [ 1326.894188][T21134] ? __pfx_validate_xmit_skb+0x10/0x10 [ 1326.899674][T21134] __dev_queue_xmit+0x1b73/0x3f50 [ 1326.904715][T21134] ? kasan_save_track+0x51/0x80 [ 1326.909589][T21134] ? ____sys_sendmsg+0x52a/0x7e0 [ 1326.914553][T21134] ? __dev_queue_xmit+0x2f4/0x3f50 [ 1326.919690][T21134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1326.925093][T21134] ? __copy_skb_header+0x437/0x5b0 [ 1326.930219][T21134] ? __asan_memcpy+0x40/0x70 [ 1326.934850][T21134] ? skb_clone+0x240/0x390 [ 1326.939285][T21134] __netlink_deliver_tap+0x56b/0x7f0 [ 1326.944602][T21134] ? netlink_deliver_tap+0x2e/0x1b0 [ 1326.949811][T21134] netlink_deliver_tap+0x19d/0x1b0 [ 1326.954939][T21134] netlink_unicast+0x7c4/0x990 [ 1326.959734][T21134] ? __pfx_netlink_unicast+0x10/0x10 [ 1326.965036][T21134] ? __virt_addr_valid+0x45f/0x530 [ 1326.970172][T21134] ? __phys_addr_symbol+0x2f/0x70 [ 1326.975209][T21134] ? __check_object_size+0x47a/0x730 [ 1326.980518][T21134] netlink_sendmsg+0x8e4/0xcb0 [ 1326.985328][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1326.990644][T21134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1326.995940][T21134] __sock_sendmsg+0x221/0x270 [ 1327.000640][T21134] ____sys_sendmsg+0x52a/0x7e0 [ 1327.005428][T21134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1327.010722][T21134] ? __fget_files+0x2a/0x410 [ 1327.015336][T21134] ? __fget_files+0x2a/0x410 [ 1327.019957][T21134] __sys_sendmsg+0x269/0x350 [ 1327.024567][T21134] ? __pfx___sys_sendmsg+0x10/0x10 [ 1327.029726][T21134] ? __might_fault+0xaa/0x120 [ 1327.034419][T21134] ? __pfx_lock_release+0x10/0x10 [ 1327.039468][T21134] ? rcu_is_watching+0x15/0xb0 [ 1327.044250][T21134] ? trace_sys_enter+0x25/0x120 [ 1327.049123][T21134] do_syscall_64+0xf3/0x230 [ 1327.053648][T21134] ? clear_bhb_loop+0x35/0x90 [ 1327.058338][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.064248][T21134] RIP: 0033:0x7f8d5d785d29 [ 1327.068677][T21134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.088302][T21134] RSP: 002b:00007f8d5e552038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.096722][T21134] RAX: ffffffffffffffda RBX: 00007f8d5d975fa0 RCX: 00007f8d5d785d29 [ 1327.104689][T21134] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 1327.112656][T21134] RBP: 00007f8d5e552090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.120621][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.128597][T21134] R13: 0000000000000000 R14: 00007f8d5d975fa0 R15: 00007fff3b6682e8 [ 1327.136586][T21134] [ 1327.235011][T21092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.247566][T21092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.367632][T21092] team0: Port device team_slave_0 added [ 1327.393459][T21092] team0: Port device team_slave_1 added [ 1327.423419][T21143] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1327.649510][ T5873] IPVS: starting estimator thread 0... [ 1327.693916][T21144] dvmrp5: entered allmulticast mode [ 1327.841810][T21147] IPVS: using max 21 ests per chain, 50400 per kthread [ 1327.915670][T20304] Bluetooth: hci7: command tx timeout [ 1327.951552][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4324'. [ 1328.032889][T21092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.048694][T21092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.112884][T21092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.126122][T21092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.133531][T21092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.180310][T21092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.478894][T21092] hsr_slave_0: entered promiscuous mode [ 1328.488412][T21092] hsr_slave_1: entered promiscuous mode [ 1328.495016][T21092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1328.504060][T21092] Cannot create hsr debugfs directory [ 1328.674806][ T5873] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1328.858209][T21167] adf_ctl_ioctl: 15 callbacks suppressed [ 1328.858250][T21167] QAT: Invalid ioctl 1075883590 [ 1328.874582][T21167] QAT: Invalid ioctl 1075883590 [ 1328.882718][T21167] QAT: Invalid ioctl 1075883590 [ 1328.892187][T21167] QAT: Invalid ioctl 1075883590 [ 1328.897780][T21167] QAT: Invalid ioctl 1075883590 [ 1328.904406][T21167] QAT: Invalid ioctl 1075883590 [ 1328.909902][T21167] QAT: Invalid ioctl 1075883590 [ 1328.917216][T21167] QAT: Invalid ioctl 1075883590 [ 1328.924818][T21167] QAT: Invalid ioctl 1075883590 [ 1328.935730][T21167] QAT: Invalid ioctl 1075883590 [ 1328.952616][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1329.256984][T21092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.278012][ T5873] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1329.290953][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.312580][ T5873] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1329.325602][ T5873] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1329.342689][ T5873] usb 8-1: Manufacturer: syz [ 1329.362377][ T5873] usb 8-1: config 0 descriptor?? [ 1329.364203][T21092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.415299][T20170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.422479][T20170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.439041][ T9] usb 7-1: config index 0 descriptor too short (expected 147, got 146) [ 1329.447977][ T9] usb 7-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 1329.460164][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1329.470944][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1329.482171][ T5873] rc_core: IR keymap rc-hauppauge not found [ 1329.483661][T20170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.495236][T20170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.509537][ T5873] Registered IR keymap rc-empty [ 1329.514643][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1329.532585][ T5873] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1329.576188][ T9] usb 7-1: SerialNumber: syz [ 1329.617841][ T5873] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input63 [ 1329.951305][T21092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.102748][T21160] binder: 21159:21160 ioctl c018620b 200000c0 returned -14 [ 1330.140928][T20304] Bluetooth: hci7: command tx timeout [ 1330.184265][T21183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.205022][T21183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.332898][T11946] usb 8-1: USB disconnect, device number 43 [ 1330.439975][T21092] veth0_vlan: entered promiscuous mode [ 1330.458792][T21092] veth1_vlan: entered promiscuous mode [ 1330.591490][T21092] veth0_macvtap: entered promiscuous mode [ 1330.614267][T21092] veth1_macvtap: entered promiscuous mode [ 1330.645460][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.656484][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.684322][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.730138][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.794789][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.821757][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.853262][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.867735][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.879383][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.890055][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.905768][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.917385][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.927733][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.985361][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.005320][ T5873] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1331.011473][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.023746][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.049701][T21092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.113136][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.151168][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.187240][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.198131][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 1331.210449][ T5873] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1331.221786][ T5873] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1331.225051][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.255029][ T5873] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1331.284804][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.287254][ T5873] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1331.319196][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.332035][ T5873] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1331.357983][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.359611][ T5873] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1331.375492][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.386608][ T5873] usb 9-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1331.404710][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.409392][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.427901][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.448741][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.486952][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.518771][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.542589][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.560570][ T5873] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 1331.570610][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.599435][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.621697][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.639628][T21202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4335'. [ 1331.644176][ T9] usb 7-1: 0:2 : does not exist [ 1331.648956][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.668239][ T9] usb 7-1: unit 189 not found! [ 1331.677414][T21092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.685083][ T9] usb 7-1: USB disconnect, device number 41 [ 1331.697872][T21092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.723896][T21092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.788976][ T5873] scsi host1: usb-storage 9-1:1.0 [ 1332.046403][T21209] lo speed is unknown, defaulting to 1000 [ 1332.064219][T21209] lo speed is unknown, defaulting to 1000 [ 1332.070086][T20170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.087585][T20170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.131939][T21209] lo speed is unknown, defaulting to 1000 [ 1332.181924][T21209] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1332.193267][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.203286][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.257041][T21209] lo speed is unknown, defaulting to 1000 [ 1332.279148][T21209] lo speed is unknown, defaulting to 1000 [ 1332.304381][T21209] lo speed is unknown, defaulting to 1000 [ 1332.362924][T20304] Bluetooth: hci7: command tx timeout [ 1332.375597][T21209] lo speed is unknown, defaulting to 1000 [ 1332.470791][T21209] lo speed is unknown, defaulting to 1000 [ 1332.481728][T21209] lo speed is unknown, defaulting to 1000 [ 1332.502273][T21209] lo speed is unknown, defaulting to 1000 [ 1332.608019][T21209] lo speed is unknown, defaulting to 1000 [ 1332.796810][T21209] lo speed is unknown, defaulting to 1000 [ 1333.120355][T21209] lo speed is unknown, defaulting to 1000 [ 1333.184166][T19910] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1333.229715][ T29] audit: type=1804 audit(2000004808.441:2068): pid=21218 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.4308" name="/newroot/0/bus/file1" dev="overlay" ino=25 res=1 errno=0 [ 1333.252743][T21209] lo speed is unknown, defaulting to 1000 [ 1333.260254][T21209] lo speed is unknown, defaulting to 1000 [ 1333.439305][T19910] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1333.568651][T21229] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1333.741405][T21232] dvmrp5: entered allmulticast mode [ 1334.682356][ T9] usb 9-1: USB disconnect, device number 12 [ 1334.716879][ T53] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 1334.742278][ T53] sd 1:0:0:0: [sdb] Sense not available. [ 1334.762015][ T53] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1334.789083][ T53] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1334.815922][ T53] sd 1:0:0:0: [sdb] Write Protect is off [ 1334.832040][ T53] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1334.862488][ T53] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1334.923568][ T53] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1335.010197][ T9] [ 1335.012554][ T9] ====================================================== [ 1335.019552][ T9] WARNING: possible circular locking dependency detected [ 1335.026663][ T9] 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 Not tainted [ 1335.033762][ T9] ------------------------------------------------------ [ 1335.040764][ T9] kworker/0:1/9 is trying to acquire lock: [ 1335.046563][ T9] ffff888027b8b6c0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_unregister_queue+0xbe/0x200 [ 1335.056030][ T9] [ 1335.056030][ T9] but task is already holding lock: [ 1335.063378][ T9] ffff888027b8b1c8 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: sd_remove+0x8d/0x110 [ 1335.073196][ T9] [ 1335.073196][ T9] which lock already depends on the new lock. [ 1335.073196][ T9] [ 1335.083588][ T9] [ 1335.083588][ T9] the existing dependency chain (in reverse order) is: [ 1335.092590][ T9] [ 1335.092590][ T9] -> #2 (&q->q_usage_counter(queue)#53){++++}-{0:0}: [ 1335.101452][ T9] lock_acquire+0x1ed/0x550 [ 1335.106488][ T9] blk_queue_enter+0xe1/0x600 [ 1335.111696][ T9] blk_mq_alloc_request+0x4fa/0xaa0 [ 1335.117433][ T9] scsi_execute_cmd+0x177/0x1090 [ 1335.123005][ T9] read_capacity_10+0x256/0x9c0 [ 1335.128382][ T9] sd_revalidate_disk+0x1066/0xbce0 [ 1335.134095][ T9] sd_probe+0x9fa/0x1100 [ 1335.138858][ T9] really_probe+0x2b8/0xad0 [ 1335.143876][ T9] __driver_probe_device+0x1a2/0x390 [ 1335.149673][ T9] driver_probe_device+0x50/0x430 [ 1335.155213][ T9] __device_attach_driver+0x2d6/0x530 [ 1335.161096][ T9] bus_for_each_drv+0x24e/0x2e0 [ 1335.166469][ T9] __device_attach_async_helper+0x22d/0x300 [ 1335.172880][ T9] async_run_entry_fn+0xa8/0x420 [ 1335.178347][ T9] process_scheduled_works+0xa66/0x1840 [ 1335.184420][ T9] worker_thread+0x870/0xd30 [ 1335.189535][ T9] kthread+0x2f0/0x390 [ 1335.194130][ T9] ret_from_fork+0x4b/0x80 [ 1335.199066][ T9] ret_from_fork_asm+0x1a/0x30 [ 1335.204365][ T9] [ 1335.204365][ T9] -> #1 (&q->limits_lock){+.+.}-{4:4}: [ 1335.212014][ T9] lock_acquire+0x1ed/0x550 [ 1335.217038][ T9] __mutex_lock+0x1ac/0xee0 [ 1335.222063][ T9] blk_mq_update_nr_hw_queues+0xbac/0x1b20 [ 1335.228389][ T9] nbd_start_device+0x16c/0xaa0 [ 1335.233761][ T9] nbd_ioctl+0x5dc/0xf40 [ 1335.238532][ T9] blkdev_ioctl+0x57d/0x6a0 [ 1335.243567][ T9] __se_sys_ioctl+0xf5/0x170 [ 1335.248680][ T9] do_syscall_64+0xf3/0x230 [ 1335.253719][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.260137][ T9] [ 1335.260137][ T9] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 1335.267697][ T9] validate_chain+0x18ef/0x5920 [ 1335.273095][ T9] __lock_acquire+0x1397/0x2100 [ 1335.278458][ T9] lock_acquire+0x1ed/0x550 [ 1335.283477][ T9] __mutex_lock+0x1ac/0xee0 [ 1335.288502][ T9] blk_unregister_queue+0xbe/0x200 [ 1335.294127][ T9] del_gendisk+0x419/0x920 [ 1335.299054][ T9] sd_remove+0x8d/0x110 [ 1335.303727][ T9] device_release_driver_internal+0x503/0x7c0 [ 1335.310308][ T9] bus_remove_device+0x34f/0x420 [ 1335.315764][ T9] device_del+0x57a/0x9b0 [ 1335.320605][ T9] __scsi_remove_device+0x1ad/0x3c0 [ 1335.326316][ T9] scsi_forget_host+0xcf/0x110 [ 1335.331590][ T9] scsi_remove_host+0x1dd/0x770 [ 1335.336960][ T9] usb_stor_disconnect+0x14e/0x1f0 [ 1335.342597][ T9] usb_unbind_interface+0x25b/0x940 [ 1335.348312][ T9] device_release_driver_internal+0x503/0x7c0 [ 1335.354893][ T9] bus_remove_device+0x34f/0x420 [ 1335.360346][ T9] device_del+0x57a/0x9b0 [ 1335.365185][ T9] usb_disable_device+0x3bf/0x850 [ 1335.370722][ T9] usb_disconnect+0x340/0x950 [ 1335.375912][ T9] hub_event+0x1ebc/0x5150 [ 1335.380840][ T9] process_scheduled_works+0xa66/0x1840 [ 1335.386903][ T9] worker_thread+0x870/0xd30 [ 1335.392003][ T9] kthread+0x2f0/0x390 [ 1335.396586][ T9] ret_from_fork+0x4b/0x80 [ 1335.401516][ T9] ret_from_fork_asm+0x1a/0x30 [ 1335.406796][ T9] [ 1335.406796][ T9] other info that might help us debug this: [ 1335.406796][ T9] [ 1335.417011][ T9] Chain exists of: [ 1335.417011][ T9] &q->sysfs_lock --> &q->limits_lock --> &q->q_usage_counter(queue)#53 [ 1335.417011][ T9] [ 1335.431183][ T9] Possible unsafe locking scenario: [ 1335.431183][ T9] [ 1335.438620][ T9] CPU0 CPU1 [ 1335.443976][ T9] ---- ---- [ 1335.449331][ T9] lock(&q->q_usage_counter(queue)#53); [ 1335.454967][ T9] lock(&q->limits_lock); [ 1335.461899][ T9] lock(&q->q_usage_counter(queue)#53); [ 1335.470048][ T9] lock(&q->sysfs_lock); [ 1335.474379][ T9] [ 1335.474379][ T9] *** DEADLOCK *** [ 1335.474379][ T9] [ 1335.482509][ T9] 8 locks held by kworker/0:1/9: [ 1335.487430][ T9] #0: ffff888144ab9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1335.498752][ T9] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1335.510611][ T9] #2: ffff888028bae190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 1335.519546][ T9] #3: ffff888031196190 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x103/0x950 [ 1335.528836][ T9] #4: ffff88807af0b160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 1335.539430][ T9] #5: ffff8880420140e0 (&shost->scan_mutex){+.+.}-{4:4}, at: scsi_remove_host+0x34/0x770 [ 1335.549442][ T9] #6: ffff88802a746378 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 1335.560049][ T9] #7: ffff888027b8b1c8 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: sd_remove+0x8d/0x110 [ 1335.570415][ T9] [ 1335.570415][ T9] stack backtrace: [ 1335.576305][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1335.586799][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1335.596856][ T9] Workqueue: usb_hub_wq hub_event [ 1335.601886][ T9] Call Trace: [ 1335.605160][ T9] [ 1335.608087][ T9] dump_stack_lvl+0x241/0x360 [ 1335.612768][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1335.617967][ T9] ? __pfx__printk+0x10/0x10 [ 1335.622555][ T9] print_circular_bug+0x13a/0x1b0 [ 1335.627583][ T9] check_noncircular+0x36a/0x4a0 [ 1335.632516][ T9] ? __pfx_check_noncircular+0x10/0x10 [ 1335.637971][ T9] ? lockdep_lock+0x123/0x2b0 [ 1335.642642][ T9] validate_chain+0x18ef/0x5920 [ 1335.647498][ T9] ? __pfx_validate_chain+0x10/0x10 [ 1335.652693][ T9] ? mark_lock+0x9a/0x360 [ 1335.657017][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1335.662998][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1335.669323][ T9] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1335.675299][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 1335.680492][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1335.686392][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1335.692714][ T9] ? stack_trace_save+0x118/0x1d0 [ 1335.697738][ T9] ? mark_lock+0x9a/0x360 [ 1335.702064][ T9] __lock_acquire+0x1397/0x2100 [ 1335.706910][ T9] lock_acquire+0x1ed/0x550 [ 1335.711412][ T9] ? blk_unregister_queue+0xbe/0x200 [ 1335.716731][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 1335.721748][ T9] ? __pfx___might_resched+0x10/0x10 [ 1335.727031][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1335.733002][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1335.739324][ T9] __mutex_lock+0x1ac/0xee0 [ 1335.743826][ T9] ? blk_unregister_queue+0xbe/0x200 [ 1335.749122][ T9] ? kobject_put+0x272/0x480 [ 1335.753713][ T9] ? kfree+0x196/0x430 [ 1335.757779][ T9] ? kobject_put+0x272/0x480 [ 1335.762365][ T9] ? blk_unregister_queue+0xbe/0x200 [ 1335.767652][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 1335.772679][ T9] ? __pfx_bdi_unregister+0x10/0x10 [ 1335.777883][ T9] blk_unregister_queue+0xbe/0x200 [ 1335.782996][ T9] del_gendisk+0x419/0x920 [ 1335.787409][ T9] ? __pfx_del_gendisk+0x10/0x10 [ 1335.792338][ T9] ? __pm_runtime_resume+0x12d/0x180 [ 1335.797625][ T9] ? __pfx_sd_remove+0x10/0x10 [ 1335.802386][ T9] sd_remove+0x8d/0x110 [ 1335.806538][ T9] device_release_driver_internal+0x503/0x7c0 [ 1335.812604][ T9] bus_remove_device+0x34f/0x420 [ 1335.817556][ T9] device_del+0x57a/0x9b0 [ 1335.822064][ T9] ? attribute_container_device_trigger+0x246/0x290 [ 1335.828662][ T9] ? kfree+0x196/0x430 [ 1335.832739][ T9] ? __pfx_device_del+0x10/0x10 [ 1335.837594][ T9] ? kobject_put+0x44d/0x480 [ 1335.842205][ T9] __scsi_remove_device+0x1ad/0x3c0 [ 1335.847401][ T9] scsi_forget_host+0xcf/0x110 [ 1335.852171][ T9] scsi_remove_host+0x1dd/0x770 [ 1335.857031][ T9] usb_stor_disconnect+0x14e/0x1f0 [ 1335.862143][ T9] usb_unbind_interface+0x25b/0x940 [ 1335.867354][ T9] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1335.873096][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1335.878818][ T9] device_release_driver_internal+0x503/0x7c0 [ 1335.884886][ T9] bus_remove_device+0x34f/0x420 [ 1335.889828][ T9] device_del+0x57a/0x9b0 [ 1335.894167][ T9] ? kobject_put+0x272/0x480 [ 1335.898768][ T9] ? __pfx_device_del+0x10/0x10 [ 1335.903615][ T9] ? kobject_put+0x44d/0x480 [ 1335.908209][ T9] usb_disable_device+0x3bf/0x850 [ 1335.913229][ T9] usb_disconnect+0x340/0x950 [ 1335.917992][ T9] hub_event+0x1ebc/0x5150 [ 1335.922408][ T9] ? debug_object_deactivate+0x2d5/0x390 [ 1335.928056][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1335.933270][ T9] ? __pfx_hub_event+0x10/0x10 [ 1335.938037][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 1335.943055][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1335.949027][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1335.955352][ T9] ? process_scheduled_works+0x976/0x1840 [ 1335.961078][ T9] process_scheduled_works+0xa66/0x1840 [ 1335.966637][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1335.972628][ T9] ? assign_work+0x364/0x3d0 [ 1335.977232][ T9] worker_thread+0x870/0xd30 [ 1335.981842][ T9] ? __kthread_parkme+0x169/0x1d0 [ 1335.986869][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1335.991980][ T9] kthread+0x2f0/0x390 [ 1335.996047][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1336.001161][ T9] ? __pfx_kthread+0x10/0x10 [ 1336.005852][ T9] ret_from_fork+0x4b/0x80 [ 1336.010275][ T9] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1336.014861][ T9] ret_from_fork_asm+0x1a/0x30 [ 1336.019629][ T9] [ 1336.563436][ T1092] bridge_slave_1: left allmulticast mode [ 1336.571939][ T1092] bridge_slave_1: left promiscuous mode [ 1336.579219][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.608300][ T1092] bridge_slave_0: left allmulticast mode [ 1336.613943][ T1092] bridge_slave_0: left promiscuous mode [ 1336.641846][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.801580][ T1092] dvmrp5 (unregistering): left allmulticast mode [ 1336.912168][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.923173][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.934070][ T1092] bond0 (unregistering): Released all slaves [ 1337.365330][ T1092] hsr_slave_0: left promiscuous mode [ 1337.375034][ T1092] hsr_slave_1: left promiscuous mode [ 1337.382950][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.391383][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.401002][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.408396][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.418751][ T1092] veth1_macvtap: left promiscuous mode [ 1337.424567][ T1092] veth0_macvtap: left promiscuous mode [ 1337.430120][ T1092] veth1_vlan: left promiscuous mode [ 1337.435426][ T1092] veth0_vlan: left promiscuous mode [ 1337.576335][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 1337.608534][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 1337.921605][ T1092] IPVS: stop unused estimator thread 0... [ 1337.980082][ T1092] bridge_slave_1: left allmulticast mode [ 1337.985736][ T1092] bridge_slave_1: left promiscuous mode [ 1337.991509][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.999868][ T1092] bridge_slave_0: left allmulticast mode [ 1338.005524][ T1092] bridge_slave_0: left promiscuous mode [ 1338.011360][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.021739][ T1092] bridge_slave_1: left allmulticast mode [ 1338.027387][ T1092] bridge_slave_1: left promiscuous mode [ 1338.033067][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.041745][ T1092] bridge_slave_0: left allmulticast mode [ 1338.047391][ T1092] bridge_slave_0: left promiscuous mode [ 1338.053249][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.063714][ T1092] bridge_slave_1: left allmulticast mode [ 1338.069349][ T1092] bridge_slave_1: left promiscuous mode [ 1338.075496][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.085449][ T1092] bridge_slave_0: left allmulticast mode [ 1338.091096][ T1092] bridge_slave_0: left promiscuous mode [ 1338.096812][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.220173][ T1092] dvmrp5 (unregistering): left allmulticast mode [ 1338.446501][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.456340][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.467962][ T1092] bond0 (unregistering): Released all slaves [ 1338.481501][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.493497][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.503328][ T1092] bond0 (unregistering): Released all slaves [ 1338.515541][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.525497][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.535007][ T1092] bond0 (unregistering): Released all slaves [ 1338.608907][ T1092] tipc: Disabling bearer [ 1338.614397][ T1092] tipc: Left network mode [ 1339.199229][ T1092] hsr_slave_0: left promiscuous mode [ 1339.226353][ T1092] hsr_slave_1: left promiscuous mode [ 1339.233032][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.242474][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.250367][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.257759][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.267840][ T1092] hsr_slave_0: left promiscuous mode [ 1339.273980][ T1092] hsr_slave_1: left promiscuous mode [ 1339.281802][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.289181][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.296751][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.304189][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.316376][ T1092] hsr_slave_0: left promiscuous mode [ 1339.322059][ T1092] hsr_slave_1: left promiscuous mode [ 1339.330139][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.337582][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.346612][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.353999][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.368015][ T1092] batadv0: left promiscuous mode [ 1339.373193][ T1092] veth1_macvtap: left promiscuous mode [ 1339.383829][ T1092] veth0_macvtap: left promiscuous mode [ 1339.389630][ T1092] veth1_vlan: left promiscuous mode [ 1339.394865][ T1092] veth0_vlan: left promiscuous mode [ 1339.400666][ T1092] veth1_macvtap: left promiscuous mode [ 1339.406137][ T1092] veth0_macvtap: left promiscuous mode [ 1339.411838][ T1092] veth1_vlan: left promiscuous mode [ 1339.417049][ T1092] veth0_vlan: left promiscuous mode [ 1339.422858][ T1092] veth1_macvtap: left promiscuous mode [ 1339.428324][ T1092] veth0_macvtap: left promiscuous mode [ 1339.433934][ T1092] veth1_vlan: left promiscuous mode [ 1339.439155][ T1092] veth0_vlan: left promiscuous mode [ 1339.550957][ T1092] team0 (unregistering): Port device vlan2 removed [ 1339.639136][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 1339.667050][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 1339.871466][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 1339.898254][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 1340.066597][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 1340.102302][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 1340.868367][ T1092] IPVS: stop unused estimator thread 0...