last executing test programs: 26m24.604521748s ago: executing program 32 (id=471): syz_open_dev$video(0x0, 0x101, 0xab82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200488c0) open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7", 0x1, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) 23m18.832996797s ago: executing program 33 (id=794): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9d, 0xf2a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="17", 0x1}, {&(0x7f0000000100)="61054a3efcff4611ef9f60fdf370778a1f030eefc41a579afa2fe63d915cdea5e159e191c316aad8f3a198d9d138c666216a3e83c8e0cc82259282985f877db5399cce6fce4aaba618b372f2f4b6d94f145aec7ced46e54855d7b4def7b837f32e49e016007732357712c4bf2e081398267ec77fd501ae0d5a4a6bd621ced07a2f51ea6600000000", 0x88}, {&(0x7f0000002100)="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", 0x218}], 0x3}}], 0x2, 0x400c8c4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000005000000000000000000001800000001c8e842000000004e0e00009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xff4c, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) fchdir(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c", 0xc5}, {&(0x7f00000022c0)="ccd14d667a379245ad18210cb3811662cb41bda64c221f5f63940ed5484fbf6549b540935a8c38ecf7df4ab5089365e6108ad6619cd32997b49d57c62c2fd744254689a2a959d26c0478baa9da5d908117af89ee2b42ae2025f6311003dd31feb466", 0x62}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000380)=""/231, 0xe7}], 0x2}, 0x5}], 0x1, 0x2001, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 22m21.30700502s ago: executing program 34 (id=881): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x40005, 0x100a, 0x9}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = io_uring_setup(0x4e4d, &(0x7f0000000080)={0x0, 0x5275, 0x80, 0x9, 0x200000}) pause() close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) write(0xffffffffffffffff, &(0x7f00000001c0)="8874ba18961a0d7ebc87681b1f877daec0cd59cd1129c3577f3c7d4304fe23681bda8da10e57425975e6e810c31e9e1792265a19", 0x34) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3b8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x3f, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r8) io_setup(0x4, &(0x7f00000014c0)=0x0) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r9, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000034000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 16m15.095517732s ago: executing program 35 (id=1824): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ipv6host(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='0x0000'], 0xbd) unshare(0x68040200) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'llr\xf0'}, {0x20, 'xx\xe8\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x111) mmap(&(0x7f0000a57000/0x3000)=nil, 0x3000, 0x3, 0x1010, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) close_range(r6, r6, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) copy_file_range(r2, &(0x7f00000001c0)=0x1ff, r7, &(0x7f00000003c0)=0x4, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffa1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r9 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x105}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r9, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 14m34.917553697s ago: executing program 4 (id=2032): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000740), 0x8, r3}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14m33.643584417s ago: executing program 4 (id=2035): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r1, 0x7, {0x0, r6}, 0x2}) io_uring_enter(r2, 0x47b7, 0x2000, 0x104000, 0x0, 0xffffffffffffff0c) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getdents(0xffffffffffffffff, 0x0, 0x0) 14m32.615454938s ago: executing program 4 (id=2037): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r0, &(0x7f0000001b00)=""/194, 0xc2) 14m32.329033311s ago: executing program 4 (id=2041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) 14m30.480039722s ago: executing program 4 (id=2045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x40000) 14m29.296352027s ago: executing program 4 (id=2048): syz_usb_connect(0x3, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d55f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc219, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x32, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xdce}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2f, 0x5, 0x6, 0x8, 0x5}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc1, 0x3, 0x112e}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x3, 0x956c}, @ss_container_id={0x14, 0x10, 0x4, 0x62, "2c7cb55ee1d0f7456111bb9438ffc7fc"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}, {0xbe, &(0x7f0000000180)=@string={0xbe, 0x3, "ff5164d1cafeb411e9786f63a1fbd135fe49bec62601734351f268ad6c239d821be71f7711fe2d8d9f12d973e99738a3dd8e829d3a7ec339815cc2bc27c64a26f5ce3cfde1c6a8262a6a8bf6bfcdf27bb90929c64c124ebe58fd3e650cee2c39a4673b8adb06c1a43fc0f1ba9424a399b0092c3d9d847ef0d1df94807592b781200554f5da0ce01a2ea4bb0beaabc7cf5d0d8b47b2f2c522d9aa6e67bbc91dc5b41748a840724492b38fbf91b378775533e9fc5f292f6a79ac209d09"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc07}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = io_uring_setup(0x19dd, &(0x7f0000000640)={0x0, 0x81c5, 0x400, 0x1, 0x67}) r1 = syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0xee93, 0x800, 0xfffffffe, 0x309, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000009200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [r7, r7]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x30, 0x80}}], 0x1, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xd, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xd2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x3, 0xc}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x6, 0x5, 0x70, 0x10, 0xd}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x81, 0x9, 0x4, 0x348, 0x28}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2d, 0xe5, 0x7f, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x3, 0xf000, 0x2, [0x0]}]}, 0x1, [{0x9d, &(0x7f0000000400)=@string={0x9d, 0x3, "9cad9a80189b187cc8e80fd87d573d211da80519aea7bdea6a6ada8065ca115589ccbc5a76cd0f1df18f88ef59f60fb2d687f44bddea86a6ca9926ecdeb07c03efe54f3c85a076c176634e8b45204c3dde4a717a70fdd3b5ccbd6484a81b97081971e14d57ede8f0d5229aa6259d48bee79c728d49df82e22a941cbfe94adc6d0ffee24194448243a425a27fa10e24491a673598d3c7826977741a"}}]}) syz_usb_connect(0x3, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d55f"], 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc219, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x32, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xdce}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2f, 0x5, 0x6, 0x8, 0x5}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc1, 0x3, 0x112e}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x3, 0x956c}, @ss_container_id={0x14, 0x10, 0x4, 0x62, "2c7cb55ee1d0f7456111bb9438ffc7fc"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}, {0xbe, &(0x7f0000000180)=@string={0xbe, 0x3, "ff5164d1cafeb411e9786f63a1fbd135fe49bec62601734351f268ad6c239d821be71f7711fe2d8d9f12d973e99738a3dd8e829d3a7ec339815cc2bc27c64a26f5ce3cfde1c6a8262a6a8bf6bfcdf27bb90929c64c124ebe58fd3e650cee2c39a4673b8adb06c1a43fc0f1ba9424a399b0092c3d9d847ef0d1df94807592b781200554f5da0ce01a2ea4bb0beaabc7cf5d0d8b47b2f2c522d9aa6e67bbc91dc5b41748a840724492b38fbf91b378775533e9fc5f292f6a79ac209d09"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc07}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) io_uring_setup(0x19dd, &(0x7f0000000640)={0x0, 0x81c5, 0x400, 0x1, 0x67}) (async) syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0xee93, 0x800, 0xfffffffe, 0x309, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000500)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) (async) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r6, &(0x7f0000009200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [r7, r7]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x30, 0x80}}], 0x1, 0x0) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xd, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xd2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x3, 0xc}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x6, 0x5, 0x70, 0x10, 0xd}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x81, 0x9, 0x4, 0x348, 0x28}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2d, 0xe5, 0x7f, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x3, 0xf000, 0x2, [0x0]}]}, 0x1, [{0x9d, &(0x7f0000000400)=@string={0x9d, 0x3, "9cad9a80189b187cc8e80fd87d573d211da80519aea7bdea6a6ada8065ca115589ccbc5a76cd0f1df18f88ef59f60fb2d687f44bddea86a6ca9926ecdeb07c03efe54f3c85a076c176634e8b45204c3dde4a717a70fdd3b5ccbd6484a81b97081971e14d57ede8f0d5229aa6259d48bee79c728d49df82e22a941cbfe94adc6d0ffee24194448243a425a27fa10e24491a673598d3c7826977741a"}}]}) (async) 13m51.421194503s ago: executing program 36 (id=2044): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80000003b) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000102, 0x0, 0x1}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5f03", 0x2}], 0x1}}], 0x2, 0x24040150) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124d960", 0x14}], 0x1}, 0x0) 13m8.593703957s ago: executing program 37 (id=2042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$smackfs_ptrace(r3, &(0x7f0000000100)=0x2, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000000000003d96e360afa3f19375c257042d3558d83bf5da0422fcbe838ebc53b032fab65deab0095615b16214f6a52aaf775c0898ed3d79134305bfc0e945767be764383721da99d47fb706c150eb0c4799a3725c57be8eb4ba081bfd93c1a63b281e928a4d8264d964d9f4fc408729e37a44631a0dde9ee395c2a151f9ca6fbe5da376b9bfc0427688"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) semget(0x0, 0x0, 0x202) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x101, 0x4, {{0xc, 0x4, 0x0, 0x26, 0x30, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @empty, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x7}]}, @generic={0x44, 0xa, "56f713e90ffa5afd"}]}}}}}) r6 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r6, &(0x7f0000002000)=""/4096, 0x1000) 13m8.271786091s ago: executing program 38 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0x8a}) 13m7.964426871s ago: executing program 39 (id=2049): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1cd5f16a"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0xffffff35) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1/file0\x00', &(0x7f00000003c0), 0x200020, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 13m7.670519308s ago: executing program 40 (id=2048): syz_usb_connect(0x3, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d55f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc219, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x32, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xdce}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2f, 0x5, 0x6, 0x8, 0x5}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc1, 0x3, 0x112e}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x3, 0x956c}, @ss_container_id={0x14, 0x10, 0x4, 0x62, "2c7cb55ee1d0f7456111bb9438ffc7fc"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}, {0xbe, &(0x7f0000000180)=@string={0xbe, 0x3, "ff5164d1cafeb411e9786f63a1fbd135fe49bec62601734351f268ad6c239d821be71f7711fe2d8d9f12d973e99738a3dd8e829d3a7ec339815cc2bc27c64a26f5ce3cfde1c6a8262a6a8bf6bfcdf27bb90929c64c124ebe58fd3e650cee2c39a4673b8adb06c1a43fc0f1ba9424a399b0092c3d9d847ef0d1df94807592b781200554f5da0ce01a2ea4bb0beaabc7cf5d0d8b47b2f2c522d9aa6e67bbc91dc5b41748a840724492b38fbf91b378775533e9fc5f292f6a79ac209d09"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc07}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = io_uring_setup(0x19dd, &(0x7f0000000640)={0x0, 0x81c5, 0x400, 0x1, 0x67}) r1 = syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0xee93, 0x800, 0xfffffffe, 0x309, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000009200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [r7, r7]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x30, 0x80}}], 0x1, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xd, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xd2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x3, 0xc}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x6, 0x5, 0x70, 0x10, 0xd}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x81, 0x9, 0x4, 0x348, 0x28}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2d, 0xe5, 0x7f, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x3, 0xf000, 0x2, [0x0]}]}, 0x1, [{0x9d, &(0x7f0000000400)=@string={0x9d, 0x3, "9cad9a80189b187cc8e80fd87d573d211da80519aea7bdea6a6ada8065ca115589ccbc5a76cd0f1df18f88ef59f60fb2d687f44bddea86a6ca9926ecdeb07c03efe54f3c85a076c176634e8b45204c3dde4a717a70fdd3b5ccbd6484a81b97081971e14d57ede8f0d5229aa6259d48bee79c728d49df82e22a941cbfe94adc6d0ffee24194448243a425a27fa10e24491a673598d3c7826977741a"}}]}) syz_usb_connect(0x3, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d55f"], 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc219, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf3, 0x0, 0x63, [{{0x9, 0x4, 0x0, 0x32, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xdce}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2f, 0x5, 0x6, 0x8, 0x5}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc1, 0x3, 0x112e}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x3, 0x956c}, @ss_container_id={0x14, 0x10, 0x4, 0x62, "2c7cb55ee1d0f7456111bb9438ffc7fc"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}, {0xbe, &(0x7f0000000180)=@string={0xbe, 0x3, "ff5164d1cafeb411e9786f63a1fbd135fe49bec62601734351f268ad6c239d821be71f7711fe2d8d9f12d973e99738a3dd8e829d3a7ec339815cc2bc27c64a26f5ce3cfde1c6a8262a6a8bf6bfcdf27bb90929c64c124ebe58fd3e650cee2c39a4673b8adb06c1a43fc0f1ba9424a399b0092c3d9d847ef0d1df94807592b781200554f5da0ce01a2ea4bb0beaabc7cf5d0d8b47b2f2c522d9aa6e67bbc91dc5b41748a840724492b38fbf91b378775533e9fc5f292f6a79ac209d09"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc07}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) io_uring_setup(0x19dd, &(0x7f0000000640)={0x0, 0x81c5, 0x400, 0x1, 0x67}) (async) syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0xee93, 0x800, 0xfffffffe, 0x309, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000500)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) (async) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r6, &(0x7f0000009200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [r7, r7]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x30, 0x80}}], 0x1, 0x0) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x3, 0xd, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xd2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x3, 0xc}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x6, 0x5, 0x70, 0x10, 0xd}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x81, 0x9, 0x4, 0x348, 0x28}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2d, 0xe5, 0x7f, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x3, 0xf000, 0x2, [0x0]}]}, 0x1, [{0x9d, &(0x7f0000000400)=@string={0x9d, 0x3, "9cad9a80189b187cc8e80fd87d573d211da80519aea7bdea6a6ada8065ca115589ccbc5a76cd0f1df18f88ef59f60fb2d687f44bddea86a6ca9926ecdeb07c03efe54f3c85a076c176634e8b45204c3dde4a717a70fdd3b5ccbd6484a81b97081971e14d57ede8f0d5229aa6259d48bee79c728d49df82e22a941cbfe94adc6d0ffee24194448243a425a27fa10e24491a673598d3c7826977741a"}}]}) (async) 10m15.489761164s ago: executing program 6 (id=2396): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @empty, 0x774b}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x11c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffc00}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040081) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @private, @loopback}, &(0x7f0000000400)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x710, 0x1, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x67, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@end]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x36, &(0x7f0000000540)={@broadcast, @multicast1, 0x0}, &(0x7f0000000580)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x3800, 0x20, 0x2, 0x2, {{0x9, 0x4, 0x2, 0x7, 0x24, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0xc, [{@loopback, 0xfffffff7}]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0x68, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x3, 0x7ff, 0x4, @mcast1, @mcast2, 0x20, 0x8, 0x10, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000a80)={'tunl0\x00', 0x0, 0x40, 0x7, 0x659, 0x9, {{0x29, 0x4, 0x2, 0x4, 0xa4, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @private=0xa010100, {[@generic={0x86, 0xb, "88fa87f4ed91c3c4d3"}, @ssrr={0x89, 0xf, 0x3b, [@local, @remote, @local]}, @timestamp={0x44, 0x18, 0xa1, 0x0, 0x2, [0x8, 0x1, 0x14, 0x8dc, 0xfffffffd]}, @lsrr={0x83, 0x17, 0x4, [@private=0xa010101, @multicast2, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x9, [{@loopback, 0x4}, {@multicast2, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x4a, 0x0, 0x4, [0x1]}, @timestamp_addr={0x44, 0x24, 0xe9, 0x1, 0xf, [{@rand_addr=0x64010101, 0x400}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1, 0x3}]}, @end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], 0x0, 0x5e, &(0x7f0000000c80)=[{}, {}], 0x10, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @multicast1, @empty}, &(0x7f0000000f00)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x184, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1c123fdf7774170}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040010) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r17, 0x8912, &(0x7f00000011c0)=@buf={0x28, &(0x7f0000001180)="ff159b70e758265c9ad314af5565b8832ae22128655505acaa75d2a58554300998c6b139df1ea8a2"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r2) sendmsg$BATADV_CMD_GET_MESH(r18, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r19, 0x27918ce4b120801b, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020080}, 0x880) r20 = syz_genetlink_get_family_id$l2tp(&(0x7f00000013c0), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r18, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r20, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4004) 10m12.200570181s ago: executing program 6 (id=2400): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0x80000001) writev(r0, &(0x7f0000000300), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000700)='virtio_transport_alloc_pkt\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syslog(0x3, 0xfffffffffffffffc, 0x61) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) write$smackfs_load(r5, 0x0, 0x36) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00008000", @ANYRES16=r4, @ANYBLOB="010031bd7000000000001400000018000180140002006e657464657673696d3000000000000008000400040000000800050009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) 10m11.926177285s ago: executing program 6 (id=2402): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0xd0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x20) write$binfmt_script(r3, 0x0, 0x0) 10m7.024277044s ago: executing program 6 (id=2415): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x4040044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000001540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="100000000000000000003900000008000300080fe80db01e582113b4df152108fd156c4e544a36873aa99a884fca024ae78bcd87a65bb3a33348d0b735627d24dd261223fa4b70495b444d448bd714bef21afa5eb5aa1c91c5bab7a0bf359f71bfad8f60736fabfca0e77de30dea278e07b385dd8ad9dd765b0cb5db9680e105c12d4c22331bc5eec8846682a073037032fb12f1edfeca6e5404de16b7dade10664beb4d743503b90b5ff293bdb5f9274c710e4715b7e33904d1808d5ba7c76cda18d4b3cf98dde667753a44de8f019d58e7a924bf54c3f8a8503b00000000000000", @ANYRES32=r8, @ANYBLOB="1c005a8018000180140003000500aa5ef0ff0700b2a6100000000700"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 10m4.851313625s ago: executing program 6 (id=2420): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) eventfd2(0x8, 0x1) epoll_create(0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) 9m59.746241356s ago: executing program 6 (id=2432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) chroot(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2, 0x11, r4, 0x0) 9m59.690213508s ago: executing program 1 (id=2433): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x3, 0x0, 0x0, {0x0, 0x53e, 0x0, 0x5e1, 0x0, 0xb, 0x0, 0x0, 0x2, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_connect(0x6, 0x3b, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="89f3439b54791db0689f53b65b05e757433f4343e802b37d3920bed294ff75fb23945b46a13259662b970d67c84229519a3e03b6"], 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd2b, 0x25dfd9fe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x5, {0x2, 0xf0}, 0xfe}, 0x18) (async) bind(r2, &(0x7f0000000100)=@xdp={0x2c, 0x4, r4, 0x37}, 0x80) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet(0x2, 0xa, 0x7ff) (async, rerun: 64) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x8, 0x2000c2) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r6, 0x40044104, &(0x7f00000001c0)=0x8) getsockopt$inet6_int(r5, 0x29, 0x2, 0x0, &(0x7f00007d0000)) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x10f901, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000100)={r10, 0x14}, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000340)={r10, 0x4, 0x7ff}, 0x8) (async) bind$alg(r7, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109028a00030106b0090904000000010100000a24010500070201020924030402030306d60904010000010200000904010101010200000a240201010102092ab609050109400002400507250180310b000904020000010200000904020101010200000724010800010011240201280508039e8fe9f34818656ee509058209200002026907"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 9m59.426344648s ago: executing program 1 (id=2435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)) close(0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000001000095"], 0x0, 0x8}, 0x94) r7 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r7, 0x5d62, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x240040c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xa, 0x9, 0x2, 0x9}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9m55.407371762s ago: executing program 1 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x180, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{}, {0x12, 0x1}, {0x4}, {0xb, 0x1}, {0xb}, {0x6c, 0x1}, {0x36}, {0x36}]}, @void, @val={0x4, 0x6, {0x3, 0x1, 0xff, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3, 0x74, 0x1}}, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0xba, 0x80, [@chsw_timing={0x68, 0x4, {0x2, 0x4}}, @fast_bss_trans={0x37, 0x52, {0x5, 0x0, "0da3027590631d7b2646485eaf2e4e85", "07b576a6cd6a6eb2d4150430347979306868a15bd31a7a4d145a6eaf6c91d308", "f564d6aefb83d457ae4a332438ea9733e42849ab5df454558baf0a907a989678"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3b, 0xab, 0x84}}, @link_id={0x65, 0x12, {@random="c8d7f8c2eff2"}}, @rann={0x7e, 0x15, {{0x1, 0xc}, 0x1, 0x3, @broadcast, 0x19, 0x9, 0x56}}, @tim={0x5, 0x19, {0x0, 0x3c, 0xb, "1cd1e436df3e8569224bb715b6751207d1484d988423"}}]}, @NL80211_ATTR_IE={0x4d, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x30, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xd, 0x6}}, @supported_rates, @measure_req={0x26, 0x22, {0x1, 0xb, 0x0, "f999d6dd8574014c98cd15ca800a6553037d24f853828e92d9f345cc34842f"}}, @measure_req={0x26, 0x15, {0x6, 0x57, 0x9, "8143fec02578a10fe6c42e5c05d3d520f92e"}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x180}}, 0x0) 9m52.309717668s ago: executing program 1 (id=2441): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 9m50.989089231s ago: executing program 1 (id=2444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x22, 0xe4}]}, 0x10) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0/file0\x00'}, 0xffffffffffffffd8) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020bfa100000000000007010000f8ffffffb721000008000000b703000000000020850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) brk(0x7) sendto$inet(r0, 0x0, 0x0, 0x40487e9, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000180)="df9156dfa2bc9adc3af2f785c9a20000b25272f55fcc22f19a4988df936e54de3cc1740c2bb8f230d8bd84276541c12fe96c9b6f0239c62ce08d48fd3d686f6c5a139e1047cac1e4d76d59e98ac7847b8c110a4731af82ae9416c1648e394625ba8c83e665cd7047af7fa2784322e0d871481568e026ae25d8ff3afe7043659b92bb33300e747fc61bbfd0469cd80d49118f32a8", 0x94, 0x80, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e1a7511bf746bec66b9e900000040000000000000000000", 0x4d, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32, @ANYBLOB="000096000a000200aaaaaaaaaa0c0000060005"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c000000161001c8", @ANYRES32=0x0, @ANYBLOB="08000a000000000008000a000100000008000a0001000000140001000000000000000000000000000000000014000200000000000000000000000000000000001400060000000010090000000500000008000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4020000}, 0x6000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES32=r5, @ANYRES16=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r6, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, r8, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50) 9m47.930136032s ago: executing program 1 (id=2446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x1800}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m44.031786522s ago: executing program 41 (id=2432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) chroot(&(0x7f0000000040)='./file0\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2, 0x11, r4, 0x0) 9m32.58233732s ago: executing program 42 (id=2446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x1800}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m38.400033451s ago: executing program 9 (id=2720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x118, 0xb}], 0x10}, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000300000009ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fe8000000000000000000000000000aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000002fc0100000000000000000000000000010900"/784], 0x310) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) tee(0xffffffffffffffff, r6, 0xff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebd7627c020f01000000000081030000000000000095a078ac3442dfc47ab257f4e5bfa5d53ab69623a3ff05e2be169a4ebea729cc3b50779e84785d9649c4e2436e0e70c4ea42367668ce1574497b6b14de3312a882c3eb6a49378ab2aa7639fcf3a12f4bc1ae4603f046fcddab0ef38815f20000ab7bb70d796c9ac9c800000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x8000, 0x0, @mcast2}, {0xa, 0x4e21, 0x7, @local, 0xfffffff2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r8}}, 0x48) 7m36.781459119s ago: executing program 9 (id=2724): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 7m34.471706507s ago: executing program 9 (id=2729): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0x80000001) writev(r0, &(0x7f0000000300), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000700)='virtio_transport_alloc_pkt\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00008000", @ANYRES16=r4, @ANYBLOB="010031bd7000000000001400000018000180140002006e657464657673696d3000000000000008000400040000000800050009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) 7m33.404406565s ago: executing program 9 (id=2732): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000001005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0xce, 0x8, 0x0, 0x1, [@nested={0x24, 0x12f, 0x0, 0x1, [@typed={0x1e, 0xbf, 0x0, 0x0, @str='blkio.bfq.io_service_time\x00'}]}, @generic="11193ba8650e2835d3cc5481aedfd33117950dd2ee63a119146f1716bb5cf29bc2a587a49d66c25e60c50a83bbe97c1a03b2f2795de7f806615e4d96ef2cc8dc22956d67f56edfc90f0ceca968685e012a33185e0015ae93c03e1a10b9306cf2d731b0b754f1f34639d8f9b707f86989e80aef0be1ef4b83af9c0b4f791ddad4145d", @nested={0x21, 0xf9, 0x0, 0x1, [@nested={0x4, 0x10e}, @nested={0x4, 0x149}, @typed={0x9, 0x4c, 0x0, 0x0, @str=',]][\x00'}, @generic="cc647319bebff7132f"]}]}]}, 0xe0}], 0x1}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r4}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpriority(0x1, r5) 7m32.815311219s ago: executing program 9 (id=2737): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0xc0085666, &(0x7f0000000080)={0x2, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) 7m30.222869414s ago: executing program 9 (id=2740): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 7m14.442325035s ago: executing program 43 (id=2740): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 4m7.46587428s ago: executing program 3 (id=3246): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket(0x1d, 0x2, 0x6) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000400)={0x1d, r4, 0x2}, 0x18) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r9 = shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/239) syz_open_dev$vim2m(&(0x7f0000000000), 0x7c34, 0x2) 4m4.649735699s ago: executing program 3 (id=3251): r0 = socket$kcm(0x10, 0x2, 0x0) lseek(r0, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a050100000016001200bc00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x401, 0xfffffffffffffffd, 0xf, 0x5, 0x7c, 0xc, 0x24000000000000, 0x7}, &(0x7f0000000080)={0x1000, 0x1, 0x8, 0xff, 0x6, 0x3, 0x6, 0x8}, &(0x7f00000000c0)={0x0, 0x7b6fae8e, 0x3, 0xb2d9, 0x7, 0x5a5, 0x1, 0x2}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000180)={[0x10000]}, 0x8}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000400), 0x2800, 0x0) r1 = socket(0x1e, 0x2, 0x0) shutdown(r1, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x18) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 4m3.470800284s ago: executing program 3 (id=3252): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 4m3.243999198s ago: executing program 3 (id=3254): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0x80000001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000700)='virtio_transport_alloc_pkt\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syslog(0x3, 0xfffffffffffffffc, 0x61) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00008000", @ANYRES16=r4, @ANYBLOB="010031bd7000000000001400000018000180140002006e657464657673696d3000000000000008000400040000000800050009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) 4m2.958867702s ago: executing program 3 (id=3255): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r9}, './file0\x00'}) r11 = socket(0x1, 0x2, 0x0) bind$unix(r11, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x401870cb, &(0x7f0000000240)={0xfffffffffffffffe, 0x80000000, 0x8, 0x2}) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 4m2.455536924s ago: executing program 3 (id=3256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'security.', '/dev/kvm\x00'}, &(0x7f0000000180)=""/168, 0xa8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 3m46.932594775s ago: executing program 44 (id=3256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'security.', '/dev/kvm\x00'}, &(0x7f0000000180)=""/168, 0xa8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 37.933417653s ago: executing program 8 (id=3689): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x19}}, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x4ad, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a040fff790780c02080a0000056600000ffffe063ad348c37e424754d700349c018143bf"], 0x0) pread64(r0, &(0x7f0000000140)=""/54, 0x36, 0x810000000000) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x20000008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x26}, 0x1, 0x0, 0x0, 0x20040091}, 0x24040080) 32.819647897s ago: executing program 8 (id=3698): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) connect$can_bcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r7, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x2}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4004014) sendmsg$key(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070c"], 0x10}}, 0x4400c030) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r9, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x500, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000680)={0x28, 0x4, r7, r7, 0x1c, 0x3, 0x2}) ioprio_set$uid(0x3, 0x0, 0x4004) 22.260045775s ago: executing program 8 (id=3721): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) execve(0x0, &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r9 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x6, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000006c0)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000240)=[0x0], &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0xa, 0x3, 0x1, 0x0, r10}) r11 = getpid() prlimit64(r11, 0xa, &(0x7f0000000040)={0x1, 0x7}, &(0x7f0000000080)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) accept$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000000840)={0x8, 0x4, {r11}, {0xee00}, 0x800, 0x8}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r12, {0xffffffffffffffff}}, './file0\x00'}) mount$9p_tcp(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x70000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e21,afid=0x0000000000000007,access=', @ANYRESDEC=r13, @ANYBLOB=',cache=mmap,seclabel,fowner=', @ANYRESDEC=r14, @ANYBLOB="0100"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 22.139240594s ago: executing program 0 (id=3723): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.755763645s ago: executing program 2 (id=3728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e2b}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="040100001a000100000000000000000020010000000000000000000000000001ac1e00010000000000000000000000c300000000000000000000000000000000632247f3964fb109c73b131449d70b8ea624e01358dc8f4c41a310c1df4d4ccf7d9df4ae5f96a317e8ecbd6a0b18418d02fb084f42b591dffccf36f3b5e12e57d6e8e047e23b665e314fa824d49438e0e0d85c2ff7936d42597f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0100000000000000000000000000000a000200000000000000000014000e00fc0200"/188], 0x104}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x8}, 0x200, 0xa1, &(0x7f0000000280)="e1fe60099dc95f498dd99ba63b0648e641a20154b7807ec58e194eb39a22056c61c3b64463dd897f19a78cb84ac56b928bde37919b0e3ea0c419ec933ffaf06165cfeea553314393d27442620123cee9510625f92abfb3940cc315c0de893a257deb21f37a0f330394e0d480a4770c39a17aa63817cf37703831bd4a7142161a05f29a8612d9dc8b450c12ca7f228bc1addb91b17a42cf513476ad9d28bf0dc6233b223e40b5525898cd76c2a3aded1f6836117679152ba05f2a772a54291357cefae3d30c4a45804b7968320b56b39ea04667eb4bf624ef972693b570bfc496082e7f9ae51b5802", 0xe8, 0x740, 0xe7aa, 0x0, 0x0, 0xfffffff1, &(0x7f0000000600)="003b7d56be7b4c4e58ea7425fb5d37df9d3c2ac40d1055d1135a75683f26f31ab77b2eace3a4d9b4c4cb805bf736f4e25b32a6fa51621783b94632fe0bd933950110c3fb09a7700ae6514a3cba0676d3b77fa386bd0429550a"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ustat(0x11, &(0x7f0000000600)) 18.658361732s ago: executing program 0 (id=3729): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x400) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x5, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000080)="d20fb4eadd9cb47f983514457ed1638f32f7d89c36024f86ead2", 0x1a}, {&(0x7f0000001780)="7ba7217ed90760230678976d6e8a8c65c35cf78b7788ee488c23388977a6a617c6bdde412cc28e6674fdf5db597c08a62de1230948544cc95f71ca0cb418efea2f59692ba08758eca148f5e6d929a3cf03f4b6a4bc3df07739c9e7d21e852d52ed3dd7889d2d37ee9f4e12c134109831fdaa73834a42bbdffe8cb7e5d88f279fa8ef41ef83bab93b62d51a4a88c70015660213db64d29b9df2f5ef145c7bb582e1fbd870b79fe029351347f1e161a45032d7c830b6ecb57c8a95ae1c092784dcb22b0c3c404de2ddc8a43bddf0e253f13e2f5ccb408d5d4f8aa805a05f173e012c6bbb411620", 0xe6}], 0x3}}], 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000001680), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000240)=[r6], &(0x7f0000000040)=[0x2], &(0x7f0000000200)=[r10], &(0x7f0000000340)}) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f00000001c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r13}) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r13], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r14, r14], &(0x7f0000000580)}) 17.469096059s ago: executing program 2 (id=3730): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 17.293032579s ago: executing program 0 (id=3732): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180000000c000000000000000100000018200000", @ANYRES32, @ANYBLOB="00000000020000001867000008000000000000000600000025a901000100000018180000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00'], &(0x7f0000000380)='syzkaller\x00', 0x34c6, 0x56, &(0x7f00000006c0)=""/86, 0x100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000880)=[{0x2, 0x4, 0x5, 0x1}, {0x0, 0x1, 0x9, 0x5}, {0x1, 0x5, 0xd, 0x6}, {0x3, 0x5, 0x3, 0xa}, {0x0, 0x1, 0x9, 0x4}, {0x4, 0x3, 0x1, 0x5}, {0x2, 0x5, 0x0, 0xb}, {0x4, 0x3, 0x2, 0x2}, {0x0, 0x2, 0x7, 0x1}], 0x10, 0x7b556a3f}, 0x94) r1 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) syz_open_dev$dri(0x0, 0x16, 0x300) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0), &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001ac0)={'wlan0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) 17.076807525s ago: executing program 8 (id=3734): syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') syz_usb_connect(0x0, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1cd5f16a"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) 16.098339184s ago: executing program 5 (id=3735): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006"], 0x3c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20040054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r4, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840), 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 15.564663821s ago: executing program 2 (id=3736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b', 0x1}], 0x1, 0x1) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003c08020300ecff3f0200000300000a00000c89f1608558134fcf9f98c1811900009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68", 0xb8) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, 0x0, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001440)=""/126, 0x7e, 0x41) lseek(r6, 0x9, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852100000100000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000500000085100000fcffffff9560200001000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x9, &(0x7f0000000500)=""/9, 0x41000, 0x3, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10000000, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r5, r1, r1, r1, r0], &(0x7f0000000780)=[{0x5, 0x1, 0xb, 0x3}, {0x1, 0x1, 0x6, 0x4}, {0x3, 0x3, 0x10, 0x4}, {0x4, 0x1, 0x7, 0x4}, {0x3, 0x4, 0x7, 0x3}], 0x10, 0x1}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x8, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x24, "74da157150445affea123f5ef01537fc77b067aafc038415821fe07d79cc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498) 11.714525494s ago: executing program 5 (id=3737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x160, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{}, {0x12, 0x1}, {0x4}, {0xb, 0x1}, {0xb}, {0x6c, 0x1}, {0x36}, {0x36}]}, @void, @val={0x4, 0x6, {0x3, 0x1, 0xff, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3, 0x74, 0x1}}, @void, @void, @void, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x9f, 0x80, [@chsw_timing={0x68, 0x4, {0x2, 0x4}}, @fast_bss_trans={0x37, 0x52, {0x5, 0x0, "0da3027590631d7b2646485eaf2e4e85", "07b576a6cd6a6eb2d4150430347979306868a15bd31a7a4d145a6eaf6c91d308", "f564d6aefb83d457ae4a332438ea9733e42849ab5df454558baf0a907a989678"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3b, 0xab, 0x84}}, @link_id={0x65, 0x12, {@random="c8d7f8c2eff2"}}, @rann={0x7e, 0x15, {{0x1, 0xc}, 0x1, 0x3, @broadcast, 0x19, 0x9, 0x56}}]}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x30, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xd, 0x6}}, @supported_rates, @measure_req={0x26, 0x21, {0x1, 0xb, 0x0, "f999d6dd8574014c98cd15ca800a6553037d24f853828e92d9f345cc3484"}}, @measure_req={0x26, 0x15, {0x6, 0x57, 0x9, "8143fec02578a10fe6c42e5c05d3d520f92e"}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x160}}, 0x0) 10.612291469s ago: executing program 2 (id=3739): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.59515723s ago: executing program 5 (id=3740): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x60000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10010, r1, 0x100000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080005"], 0x164}}, 0x0) 7.366063526s ago: executing program 7 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000ff"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900), 0x0, 0x20000000}, 0x20) 7.253449536s ago: executing program 5 (id=3742): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x400) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x5, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000080)="d20fb4eadd9cb47f983514457ed1638f32f7d89c36024f86ead2", 0x1a}, {&(0x7f0000001780)="7ba7217ed90760230678976d6e8a8c65c35cf78b7788ee488c23388977a6a617c6bdde412cc28e6674fdf5db597c08a62de1230948544cc95f71ca0cb418efea2f59692ba08758eca148f5e6d929a3cf03f4b6a4bc3df07739c9e7d21e852d52ed3dd7889d2d37ee9f4e12c134109831fdaa73834a42bbdffe8cb7e5d88f279fa8ef41ef83bab93b62d51a4a88c70015660213db64d29b9df2f5ef145c7bb582e1fbd870b79fe029351347f1e161a45032d7c830b6ecb57c8a95ae1c092784dcb22b0c3c404de2ddc8a43bddf0e253f13e2f5ccb408d5d4f8aa805a05f173e012c6bbb411620", 0xe6}], 0x3}}], 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000001680), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000240)=[r6], &(0x7f0000000040)=[0x2], &(0x7f0000000200)=[r10], &(0x7f0000000340)}) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f00000001c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r13}) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r13], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r14, r14], &(0x7f0000000580)}) 7.155872451s ago: executing program 0 (id=3743): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x10, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r6 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) shutdown(r7, 0x2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000100), 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) 7.08224683s ago: executing program 7 (id=3744): socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x4040010) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) memfd_create(&(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$binfmt_elf64(r9, &(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x219) r10 = openat(r4, &(0x7f00000001c0)='./file0/file0\x00', 0x68000, 0x13) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r11, 0x0, 0x0) fchown(r10, 0x0, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100020000000000040006000000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00'], 0x2c, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000080), &(0x7f00000002c0)=@udp6=r7}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0x1010, 0xffffffffffffffff, 0x3000000) 6.588580712s ago: executing program 5 (id=3745): r0 = eventfd2(0xdbfb, 0x80001) ppoll(&(0x7f0000000000), 0x42, 0x0, 0x0, 0xfffffffffffffdcd) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r2, r6, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) 6.43059313s ago: executing program 2 (id=3746): socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x18, 0x63, 0x60, 0x8, 0xe8d, 0x763f, 0x9b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x4b, 0x0, 0xa7, 0xd8, 0x1, 0x7}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r3], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 6.046335186s ago: executing program 7 (id=3747): socket$kcm(0x2d, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x44004) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x3, 0x0, 0x2, 0xa0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@multicast1, @in=@broadcast, @in=@dev, 0x33, 0x0, 0x0, 0x3000003, 0x11, 0x2}]}]}, 0xa0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x1f00}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.098439385s ago: executing program 7 (id=3748): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@huge_within_size}, {@noswap}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xd, &(0x7f0000000400)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa556}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r2 = syz_open_dev$audion(&(0x7f00000004c0), 0xfffffffffffffff7, 0x200) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f0000000480)='./file0\x00', r1, 0x4000, r2}, 0x18) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x8f, 0x5, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x20, 0x0, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="000028bd7000fbdbdf25180000000500060001000000050005000100000005000600010000000800070004000000050006000100000050000180140002007465616d30000000000000000000000008000300000000001400020076657468305f766972745f776966690008000300010000001400020076657468305f746f5f627269646765009000018008000100", @ANYRES32=r5, @ANYBLOB="140002006c6f00000000000000000000000000001400020076657468315f746f5f626f6e640000000800030001000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="14000200626f6e645f736c6176655f30797a6b616c6c65723000000000000008000300060000001400020070696d726567310000000000000000000c0001800800030000000000b9104149d13db4036f97d048a9e0048e000000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 4.911682488s ago: executing program 7 (id=3749): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x42046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) 4.821990881s ago: executing program 8 (id=3750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b', 0x1}], 0x1, 0x1) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003c08020300ecff3f0200000300000a00000c89f1608558134fcf9f98c1811900009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68", 0xb8) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, 0x0, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001440)=""/126, 0x7e, 0x41) lseek(r6, 0x9, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852100000100000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000500000085100000fcffffff9560200001000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x9, &(0x7f0000000500)=""/9, 0x41000, 0x3, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10000000, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r5, r1, r1, r1, r0], &(0x7f0000000780)=[{0x5, 0x1, 0xb, 0x3}, {0x1, 0x1, 0x6, 0x4}, {0x3, 0x3, 0x10, 0x4}, {0x4, 0x1, 0x7, 0x4}, {0x3, 0x4, 0x7, 0x3}], 0x10, 0x1}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x8, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x24, "74da157150445affea123f5ef01537fc77b067aafc038415821fe07d79cc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498) 3.230097166s ago: executing program 7 (id=3751): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830272440b95c66d0aa091c738b41f76df43c9498d47f3d35a56205f4c1050cabb8cfd44814884bee33f0131915ac98d983f3cf39715100f932bc657d764c61dd2bb28be0b1a88aa08d2d0bc3d7347506ac629d201098307f21becdf4d9010a4cf9e378b4395a6ca9d83f6a4736351addb590ae9d0ef3fd92ee454850d4a696df0d89ac33d168e985397049904e345d3858d002c5aeee3158fe9936f57a3977b528cd8869848842ef4d398e440c7e37d02c183e3721d261476ea0ef14a39e8853f6826e505d18395f39819d216899ecfea721f134e735d02b1c1951aea0e16f633806c068ced90983f356a50fa23f3402c7abd4a776983880ffd711e9973c7b286c208d59ba5d46132d73a68c135ffe894d36f04c80b7ef620f952d80d189e02b2365cb3abeacf4c767b26d2594fd3be7fe78de02163a9d3633f0eeaa47018f3203a256eb8fb1e56f2159c839964bc1", 0x213}], 0x1}}], 0x2, 0x400c0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.915061355s ago: executing program 8 (id=3752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000070000000000000000000000850000007b0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000007a0000007b00000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b00f45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd41503f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e00300000000000000b35faae176f98b745eda2967199cc93685bb537e8e487166737089df20618cd4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df08445e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5aed65201cc2c51944da8d7391d5b6b9741aa3b76600cd1aa0afe5f8f46df4c5124caf673374b371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf81109715b67ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87dc0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e0219ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa400d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82b04cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb9b5fe7f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b3bff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b011d193ba8075da1d1da9311a050000ab89524414cae922141f7baf17756c31559907a53581b6ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf0a74680bc9987d5aade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7dc26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f736c5867831c5d6eaa9ef1806fd95bbe00318000000000000259da51ff7517ace7361420a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfad36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405d86c7760282901750b732ec06b0db735222a731195633164704886a0c50a5db0d694028cdf61b9749d5d7bd79969a92114ca804a6365615ceb09ed22e4fc3a7d0e2ee4a5fc10f3d01346481e934e411d0e9d7a9fa515a2219b526d8f3e2b383ef694ff99257fc52c31a3503ce22e503214fa808301b489bb0cd8000000000000159c447fc6f1bf1137f6863aceb90d62dae497fe08f7e627727ad0919a62fe92a33f1e5d390000000000000000004135cb6dda469cd6622e6c36e9f005789e6b827c07b8f4f8d4f15695fe30d32ee6efe22cf8d299239eaa54e5c699a904a0344febb884d1cc94f552f48d84ee3431d817edc4bdb762d62778f30baee4aa428bba55f6cff1b5ba395d461db8ffe6fb89e1058a73bc8564c86497b92330b23cb3befb569cc67f15e349644a2c47924423e2983517074747680306eddd948e5211377575787cfa291ec8796dd7db6968791aea4f5e627b219e99bb9262493bbf04415b22ee398406ec88f6b758f6b240a87dc169f51d3a79fb512afae14fbc5e7808764b8550622c1e3080cdd6b21ce0f0324712343943f5e061df056b3b809c07e1318daf9ed1ebea0f95e302dab0b6bc52ed2aac8b950b448ca3a03d1bd21078c54f5cf86c5563b9bba2805a30574a4123e27d6f281f70ac769c62b49bf7cc73f0c9a2b84534d234d2eb136f8620d3e1147a7b7361618e0064cad6fe32685d143af0d378d54c0a5953c764ae8721bd23cba4701e9f0d7a6e1ba92c87b0384f8ee595d618f7cf5a80a0a2edc2541072e146c1e5a8f7b65c877af04e742cfdcac0641a11d51fd6dc88965691bce388005fbb071451bc260bcf7df8890d9c5c8ef47bc4ff5080a2a771f85b4f3d2a2259196a8423e7a992e9b320a40921f6f74d5b0e94be6c9c059e62ff53e5c2139806cca4545d88a7f7ff366e5d7f08a56609130931b64e3bb70000d38011b924ed9df6aa170c6d845f43c0bcbe3839cd1422944651a5908c76c3f3b4070aa1d896e4adc117698c452c9926442a000e128bb936a99536290f906c088cb10ee7bee50b7b013e4e1ff3481d77c7697738b46deebd9ac6e58b41341dcbfad161e3d529a504821549629ef63f8297bec881eb5edb07ed6c86640fb4128d7931e56bb89f0ce605"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) getrlimit(0x3, &(0x7f0000000100)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1a}, 0x94) read$FUSE(r4, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r5, &(0x7f0000000040)='net/rt_cache\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x1f}, 0x2}, [{}, {}, {}, {}, {0x5943}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffff8000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2ca2}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47d6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x40000000, 0x1}, {0x2}, {}, {0x80000}, {0x0, 0x0, 0x0, 0xffffffff, 0x6}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x4}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x9d}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x6}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe68}}, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058"], 0xfc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7fffffff}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xffff}]}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a"], 0x188}}, 0x0) 1.781852138s ago: executing program 2 (id=3753): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff1ed000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) dup3(r4, r3, 0x0) open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x1, 0x2}}) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi0\x00', 0x8e00, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000100)={'c6xdigio\x00', [0x8001, 0xf, 0x6, 0x8, 0xfffffffb, 0x3ff, 0x4d7, 0x2, 0x4, 0x4, 0x0, 0x401, 0x3, 0x47, 0x9, 0x7ff, 0xa, 0x0, 0x1f29, 0x5, 0x8000, 0x8c, 0x6, 0x6, 0x54, 0x10001, 0x101, 0x5, 0x10001, 0x8, 0x1]}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80000) 1.780717149s ago: executing program 5 (id=3754): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x800, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x4000) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000340)=0x80000000fff, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r4], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r6, &(0x7f0000000300)="ca", 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 1.510666733s ago: executing program 0 (id=3755): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xa4, 0x602) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001180)={{r0}, "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"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x31, 0x10, 0xffffffffffffc084, {0x8, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x3f}, @private1, 0x4e20, 0x4e20, 0x9}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x8, 0xfff7, [0x6, 0x8]}, @esp_ip6_spec={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x6}, {0x0, @random="0797cc636091", 0x17fd, 0x1, [0x5, 0x1]}, 0x1000, 0x2}}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r1, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x400340, 0x0) 0s ago: executing program 0 (id=3756): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x28b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, r3, 0x105, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xfffffe2b}}, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) process_mrelease(0xffffffffffffffff, 0x0) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): 259] usb 4-1: USB disconnect, device number 37 [ 1534.656786][ T9563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.664670][ T9563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.720554][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.729121][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.436098][T13877] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1535.544936][ T30] audit: type=1326 audit(1754148842.723:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16944 comm="syz.7.2841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1535.571919][T16952] FAULT_INJECTION: forcing a failure. [ 1535.571919][T16952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.740723][T16952] CPU: 0 UID: 0 PID: 16952 Comm: syz.0.2843 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1535.740759][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1535.740774][T16952] Call Trace: [ 1535.740785][T16952] [ 1535.740798][T16952] dump_stack_lvl+0x189/0x250 [ 1535.740830][T16952] ? __pfx____ratelimit+0x10/0x10 [ 1535.740854][T16952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1535.740880][T16952] ? __pfx__printk+0x10/0x10 [ 1535.740910][T16952] ? __might_fault+0xb0/0x130 [ 1535.740947][T16952] should_fail_ex+0x414/0x560 [ 1535.740978][T16952] _copy_from_user+0x2d/0xb0 [ 1535.741011][T16952] xsk_setsockopt+0x32c/0x710 [ 1535.741045][T16952] ? do_sys_openat2+0x154/0x1c0 [ 1535.741079][T16952] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1535.741128][T16952] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1535.741151][T16952] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1535.741189][T16952] do_sock_setsockopt+0x179/0x1b0 [ 1535.741229][T16952] __x64_sys_setsockopt+0x13f/0x1b0 [ 1535.741270][T16952] do_syscall_64+0xfa/0x3b0 [ 1535.741295][T16952] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.741319][T16952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.741342][T16952] ? clear_bhb_loop+0x60/0xb0 [ 1535.741370][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.741393][T16952] RIP: 0033:0x7f1f0578eb69 [ 1535.741413][T16952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1535.741433][T16952] RSP: 002b:00007f1f06680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1535.741457][T16952] RAX: ffffffffffffffda RBX: 00007f1f059b5fa0 RCX: 00007f1f0578eb69 [ 1535.741475][T16952] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 1535.741489][T16952] RBP: 00007f1f06680090 R08: 0000000000000004 R09: 0000000000000000 [ 1535.741504][T16952] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1535.741518][T16952] R13: 0000000000000000 R14: 00007f1f059b5fa0 R15: 00007ffd020ea848 [ 1535.741561][T16952] [ 1536.452462][T13877] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1536.464460][T13877] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1536.543615][T13877] usb 4-1: string descriptor 0 read error: -22 [ 1536.553583][T13877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1536.763835][ T30] audit: type=1326 audit(1754148843.803:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1537.243852][ T30] audit: type=1326 audit(1754148843.803:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1537.491218][ T30] audit: type=1326 audit(1754148843.813:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1537.525586][T13877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.539053][T13877] usb 4-1: can't set config #1, error -71 [ 1537.554543][T13877] usb 4-1: USB disconnect, device number 38 [ 1537.816423][ T30] audit: type=1326 audit(1754148843.813:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1538.285734][ T30] audit: type=1326 audit(1754148843.813:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1538.514979][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2848'. [ 1538.817151][ T30] audit: type=1326 audit(1754148843.813:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1539.415716][ T30] audit: type=1326 audit(1754148843.813:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1539.453339][ T30] audit: type=1326 audit(1754148843.813:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1539.502586][ T30] audit: type=1326 audit(1754148843.813:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16961 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f13d6b8eb69 code=0x7ffc0000 [ 1540.035272][T16984] af_packet: tpacket_rcv: packet too big, clamped from 65350 to 3958. macoff=82 [ 1541.421791][T16994] ip6erspan0: entered promiscuous mode [ 1541.429506][T16995] tipc: Started in network mode [ 1541.434547][T16995] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 1544.616188][T16258] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1545.749787][T17042] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1546.545617][T16258] usb 3-1: Using ep0 maxpacket: 16 [ 1546.553813][T16258] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.595526][T16258] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1546.605066][T16258] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1546.615065][T16258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.632282][T16258] usb 3-1: Product: syz [ 1546.640760][T16258] usb 3-1: Manufacturer: syz [ 1546.679233][T16258] usb 3-1: SerialNumber: syz [ 1546.692047][T16258] usb 3-1: config 0 descriptor?? [ 1546.697382][T16258] hub 3-1:0.0: bad descriptor, ignoring hub [ 1546.697416][T16258] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1546.720381][T16258] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1546.736802][T13878] usb 3-1: Failed to submit usb control message: -71 [ 1546.736899][T13878] usb 3-1: unable to send the bmi data to the device: -71 [ 1546.736921][T13878] usb 3-1: unable to get target info from device [ 1546.736947][T13878] usb 3-1: could not get target info (-71) [ 1546.736972][T13878] usb 3-1: could not probe fw (-71) [ 1546.847997][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1546.848022][ T30] audit: type=1800 audit(1754148854.033:455): pid=17054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2869" name="file1" dev="overlay" ino=959 res=0 errno=0 [ 1547.714735][T16259] usb 3-1: USB disconnect, device number 35 [ 1548.163965][T17065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1548.424850][T17071] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1548.431497][T17071] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1548.581887][T17071] vhci_hcd vhci_hcd.0: Device attached [ 1548.687555][T17077] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(11) [ 1548.694270][T17077] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1548.704353][T17077] vhci_hcd vhci_hcd.0: Device attached [ 1549.438563][T17071] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(10) [ 1549.445261][T17071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1549.496298][T16259] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1549.735777][T17071] vhci_hcd vhci_hcd.0: Device attached [ 1549.784630][T17093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1549.836284][T17077] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(15) [ 1549.842991][T17077] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1549.854640][T17071] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(14) [ 1549.861332][T17071] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1549.931462][T17093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1550.395833][T17071] vhci_hcd vhci_hcd.0: Device attached [ 1550.734416][T17077] vhci_hcd vhci_hcd.0: Device attached [ 1550.985591][T17108] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(17) [ 1550.992289][T17108] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1551.016167][T17108] vhci_hcd vhci_hcd.0: Device attached [ 1551.067798][T17096] vhci_hcd: connection closed [ 1551.070924][T17086] vhci_hcd: connection closed [ 1551.073460][T17095] vhci_hcd: connection closed [ 1551.077481][T17078] vhci_hcd: connection closed [ 1551.086129][T17073] vhci_hcd: connection reset by peer [ 1551.119948][ T6446] vhci_hcd: stop threads [ 1551.124372][ T6446] vhci_hcd: release socket [ 1551.135027][T17109] vhci_hcd: connection closed [ 1551.137324][ T6446] vhci_hcd: disconnect device [ 1551.173266][ T6446] vhci_hcd: stop threads [ 1551.192374][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.204854][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.277070][T17114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1551.288953][ T6446] vhci_hcd: release socket [ 1551.495073][ T6446] vhci_hcd: disconnect device [ 1551.514418][ T6446] vhci_hcd: stop threads [ 1551.518975][ T6446] vhci_hcd: release socket [ 1551.523760][ T6446] vhci_hcd: disconnect device [ 1551.535082][ T6446] vhci_hcd: stop threads [ 1551.542450][ T6446] vhci_hcd: release socket [ 1551.548794][ T6446] vhci_hcd: disconnect device [ 1551.727942][ T6446] vhci_hcd: stop threads [ 1551.732448][ T6446] vhci_hcd: release socket [ 1551.748024][ T6446] vhci_hcd: disconnect device [ 1551.759935][ T6446] vhci_hcd: stop threads [ 1551.776042][ T6446] vhci_hcd: release socket [ 1551.831885][ T6446] vhci_hcd: disconnect device [ 1552.341840][T17123] block nbd4: server does not support multiple connections per device. [ 1552.484416][T17122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1552.517582][T17123] block nbd4: shutting down sockets [ 1552.563289][T17122] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1552.592125][T17122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1552.616052][T17122] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1552.774861][T17122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1552.775000][T17122] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1552.862506][T17122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1552.876300][T17122] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1553.013122][T17122] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1554.215733][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 1554.389643][T17153] 9pnet_fd: Insufficient options for proto=fd [ 1554.473814][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 1554.665673][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 1554.671853][T13709] Bluetooth: hci5: command 0x0406 tx timeout [ 1554.735629][T16259] vhci_hcd: vhci_device speed not set [ 1554.785607][T13709] Bluetooth: hci3: command 0x0406 tx timeout [ 1554.937517][T13709] Bluetooth: hci1: command 0x0c1a tx timeout [ 1555.770979][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2893'. [ 1556.695798][T13709] Bluetooth: hci0: command 0x0406 tx timeout [ 1556.718525][T16261] usb usb48-port3: attempt power cycle [ 1556.865664][T13709] Bluetooth: hci3: command 0x0406 tx timeout [ 1557.015788][T13709] Bluetooth: hci1: command 0x0c1a tx timeout [ 1557.328743][T16261] usb usb48-port3: unable to enumerate USB device [ 1557.746260][T16259] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1557.959748][T16259] usb 4-1: Using ep0 maxpacket: 32 [ 1558.000509][T16259] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1558.036361][T16259] usb 4-1: config 0 has no interface number 0 [ 1558.085761][T16259] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1558.131093][T16259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.161560][T16259] usb 4-1: Product: syz [ 1558.189804][T16259] usb 4-1: Manufacturer: syz [ 1558.234985][T16259] usb 4-1: SerialNumber: syz [ 1558.270029][T16259] usb 4-1: config 0 descriptor?? [ 1558.305232][T16259] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1558.348066][T16259] usb 4-1: selecting invalid altsetting 1 [ 1558.383845][T16259] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1558.434439][T16259] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1558.476369][T16259] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1558.501391][T16259] usb 4-1: media controller created [ 1558.586099][T17192] netlink: 'syz.5.2898': attribute type 1 has an invalid length. [ 1558.643701][T16259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1559.095839][T13709] Bluetooth: hci1: command 0x0c1a tx timeout [ 1559.597257][T17189] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1559.652761][T16259] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1559.681975][T16259] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1559.724363][T17200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1559.988459][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2902'. [ 1561.621980][T16276] usb 4-1: USB disconnect, device number 39 [ 1567.533701][T17260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2914'. [ 1567.698700][T16267] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1568.045754][T16267] usb 4-1: Using ep0 maxpacket: 8 [ 1568.075117][T16267] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1568.095645][T16267] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1568.160054][T16267] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1568.210266][T16267] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1568.241404][T16267] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1568.257039][T17266] blk_print_req_error: 22 callbacks suppressed [ 1568.257056][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.274772][T17266] buffer_io_error: 22 callbacks suppressed [ 1568.274785][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.288688][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.297781][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.305790][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.314898][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.322864][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.332042][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.340169][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.349311][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.357439][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.366748][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.375865][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.385946][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.393850][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.403105][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.410948][T17266] ldm_validate_partition_table(): Disk read failed. [ 1568.417859][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.426990][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.435069][T17266] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.444149][T17266] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1568.452253][T17266] Dev nbd2: unable to read RDB block 0 [ 1568.458429][T17266] nbd2: unable to read partition table [ 1568.469792][ T30] audit: type=1326 audit(1754148875.503:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17265 comm="syz.2.2918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36a118eb69 code=0x0 [ 1568.536488][T17268] ldm_validate_partition_table(): Disk read failed. [ 1568.549671][T16267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.626131][T17268] Dev nbd2: unable to read RDB block 0 [ 1568.655219][T17268] nbd2: unable to read partition table [ 1568.814992][T16267] usb 4-1: GET_CAPABILITIES returned 0 [ 1568.820734][T16267] usbtmc 4-1:16.0: can't read capabilities [ 1570.330460][T17286] netlink: zone id is out of range [ 1570.551197][T17288] netlink: del zone limit has 4 unknown bytes [ 1570.599061][T17286] netlink: zone id is out of range [ 1570.626659][T17286] netlink: zone id is out of range [ 1570.680465][T17286] netlink: zone id is out of range [ 1570.728207][T17286] netlink: zone id is out of range [ 1570.761519][T17286] netlink: zone id is out of range [ 1570.780231][T17286] netlink: zone id is out of range [ 1570.793004][T17286] netlink: zone id is out of range [ 1570.839143][T17286] netlink: zone id is out of range [ 1571.060817][T17299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1571.228923][T16276] usb 4-1: USB disconnect, device number 40 [ 1571.994824][T17303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2928'. [ 1573.572236][T17314] ip6erspan0: entered promiscuous mode [ 1573.592854][T17313] tipc: Started in network mode [ 1573.599521][T17313] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 1573.947186][T17304] tipc: Enabled bearer , priority 0 [ 1574.059294][T17302] tipc: Disabling bearer [ 1576.004650][T17332] o2cb: This node has not been configured. [ 1576.036043][T17332] o2cb: Cluster check failed. Fix errors before retrying. [ 1576.081952][T17332] (syz.7.2932,17332,1):user_dlm_register:674 ERROR: status = -22 [ 1576.158335][T17332] (syz.7.2932,17332,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1576.847966][T17349] netlink: 'syz.0.2941': attribute type 11 has an invalid length. [ 1577.678567][T17355] fuse: Unknown parameter '' [ 1578.571488][T17367] ieee802154 phy0 wpan0: encryption failed: -90 [ 1578.651388][T17369] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1578.690295][ T30] audit: type=1800 audit(1754148885.863:457): pid=17368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2947" name="file1" dev="overlay" ino=478 res=0 errno=0 [ 1581.933702][T17395] veth1_virt_wifi: entered promiscuous mode [ 1581.967278][T17395] veth1_virt_wifi: entered allmulticast mode [ 1582.076050][T17403] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.084852][T17403] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.094004][T17403] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.104240][T17403] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.159679][T17403] use of bytesused == 0 is deprecated and will be removed in the future, [ 1582.168442][T17403] use the actual size instead. [ 1582.173762][T17403] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2957'. [ 1584.220678][T17430] tipc: New replicast peer: 172.30.0.8 [ 1584.251418][T17430] tipc: Enabled bearer , priority 0 [ 1584.269245][T17430] FAULT_INJECTION: forcing a failure. [ 1584.269245][T17430] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.283745][T17430] CPU: 0 UID: 0 PID: 17430 Comm: syz.7.2966 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1584.283778][T17430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1584.283793][T17430] Call Trace: [ 1584.283803][T17430] [ 1584.283813][T17430] dump_stack_lvl+0x189/0x250 [ 1584.283846][T17430] ? __pfx____ratelimit+0x10/0x10 [ 1584.283871][T17430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1584.283897][T17430] ? __pfx__printk+0x10/0x10 [ 1584.283934][T17430] ? ref_tracker_alloc+0x318/0x460 [ 1584.283963][T17430] should_fail_ex+0x414/0x560 [ 1584.283992][T17430] should_failslab+0xa8/0x100 [ 1584.284019][T17430] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1584.284042][T17430] ? skb_clone+0x212/0x3a0 [ 1584.284070][T17430] skb_clone+0x212/0x3a0 [ 1584.284097][T17430] __netlink_deliver_tap+0x404/0x850 [ 1584.284144][T17430] ? netlink_deliver_tap+0x2e/0x1b0 [ 1584.284177][T17430] netlink_deliver_tap+0x19c/0x1b0 [ 1584.284216][T17430] netlink_unicast+0x730/0x8e0 [ 1584.284260][T17430] netlink_sendmsg+0x805/0xb30 [ 1584.284302][T17430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1584.284351][T17430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1584.284375][T17430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1584.284408][T17430] __sock_sendmsg+0x21c/0x270 [ 1584.284440][T17430] ____sys_sendmsg+0x505/0x830 [ 1584.284481][T17430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1584.284527][T17430] ? import_iovec+0x74/0xa0 [ 1584.284563][T17430] ___sys_sendmsg+0x21f/0x2a0 [ 1584.284601][T17430] ? __pfx____sys_sendmsg+0x10/0x10 [ 1584.284677][T17430] ? __fget_files+0x2a/0x420 [ 1584.284702][T17430] ? __fget_files+0x3a0/0x420 [ 1584.284740][T17430] __x64_sys_sendmsg+0x19b/0x260 [ 1584.284778][T17430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1584.284824][T17430] ? __pfx_ksys_write+0x10/0x10 [ 1584.284843][T17430] ? rcu_is_watching+0x15/0xb0 [ 1584.284874][T17430] ? do_syscall_64+0xbe/0x3b0 [ 1584.284904][T17430] do_syscall_64+0xfa/0x3b0 [ 1584.284927][T17430] ? lockdep_hardirqs_on+0x9c/0x150 [ 1584.284950][T17430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.284973][T17430] ? clear_bhb_loop+0x60/0xb0 [ 1584.285001][T17430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.285022][T17430] RIP: 0033:0x7efc1e18eb69 [ 1584.285043][T17430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.285063][T17430] RSP: 002b:00007efc1f056038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.285088][T17430] RAX: ffffffffffffffda RBX: 00007efc1e3b5fa0 RCX: 00007efc1e18eb69 [ 1584.285105][T17430] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1584.285120][T17430] RBP: 00007efc1f056090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.285135][T17430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.285149][T17430] R13: 0000000000000000 R14: 00007efc1e3b5fa0 R15: 00007ffed8c1e0d8 [ 1584.285184][T17430] [ 1585.287292][T16267] tipc: Node number set to 3028680704 [ 1588.006850][T17461] nbd4: detected capacity change from 0 to 549764202496 [ 1588.017205][T13709] block nbd4: Receive control failed (result -32) [ 1588.860172][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2975'. [ 1589.003031][T17478] gtp0: entered promiscuous mode [ 1589.009332][T17478] gtp0: entered allmulticast mode [ 1590.411707][T17493] gtp7: entered promiscuous mode [ 1590.417652][T17493] gtp7: entered allmulticast mode [ 1590.615921][T16276] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1590.723526][T17498] syzkaller1: entered promiscuous mode [ 1590.734443][T17498] syzkaller1: entered allmulticast mode [ 1590.779631][T16276] usb 6-1: Using ep0 maxpacket: 16 [ 1590.794161][T16276] usb 6-1: too many configurations: 218, using maximum allowed: 8 [ 1590.818339][T16276] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1590.832901][T16276] usb 6-1: can't read configurations, error -61 [ 1590.985876][T16276] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1591.355691][T16276] usb 6-1: Using ep0 maxpacket: 16 [ 1591.392787][T16276] usb 6-1: too many configurations: 218, using maximum allowed: 8 [ 1591.428053][T16276] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1591.448236][T16276] usb 6-1: can't read configurations, error -61 [ 1591.455361][T16276] usb usb6-port1: attempt power cycle [ 1591.689358][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'. [ 1592.145544][T16276] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1592.258756][T16276] usb 6-1: Using ep0 maxpacket: 16 [ 1592.288601][T16276] usb 6-1: too many configurations: 218, using maximum allowed: 8 [ 1592.354474][T16276] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1592.405516][T16276] usb 6-1: can't read configurations, error -61 [ 1592.586048][T16276] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1592.656273][T16276] usb 6-1: Using ep0 maxpacket: 16 [ 1592.696054][T16276] usb 6-1: too many configurations: 218, using maximum allowed: 8 [ 1592.723485][T16276] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1592.723531][T16276] usb 6-1: can't read configurations, error -61 [ 1592.724086][T16276] usb usb6-port1: unable to enumerate USB device [ 1593.045792][T16276] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1593.256059][T16276] usb 4-1: Using ep0 maxpacket: 32 [ 1593.330906][T16276] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 1593.398849][T16276] usb 4-1: config 0 has no interface number 0 [ 1593.405074][T16276] usb 4-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1593.702732][T17534] o2cb: This node has not been configured. [ 1593.758402][T17534] o2cb: Cluster check failed. Fix errors before retrying. [ 1593.815072][T17534] (syz.0.2994,17534,0):user_dlm_register:674 ERROR: status = -22 [ 1593.869625][T17534] (syz.0.2994,17534,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1594.410892][T16276] usb 4-1: config 0 interface 244 has no altsetting 0 [ 1594.420273][T16276] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1594.429513][T16276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.438076][T16276] usb 4-1: Product: syz [ 1594.442331][T16276] usb 4-1: Manufacturer: syz [ 1594.447022][T16276] usb 4-1: SerialNumber: syz [ 1594.463491][T16276] usb 4-1: config 0 descriptor?? [ 1594.489760][T16276] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort found [ 1594.511959][T17536] gtp0: entered promiscuous mode [ 1594.534958][T17536] gtp0: entered allmulticast mode [ 1594.547723][T16259] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1594.687958][T17542] loop2: detected capacity change from 0 to 7 [ 1594.733723][T17542] Dev loop2: unable to read RDB block 7 [ 1594.742136][T17542] loop2: unable to read partition table [ 1595.286434][T16259] usb 3-1: config 0 has no interfaces? [ 1595.302446][T16259] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1595.312012][T17542] loop2: partition table beyond EOD, truncated [ 1595.312045][T17542] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1595.341010][T17545] xt_hashlimit: max too large, truncated to 1048576 [ 1595.343814][T16259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.375881][T16276] snd_usb_toneport 4-1:0.244: cannot get proper max packet size [ 1595.422032][T16259] usb 3-1: config 0 descriptor?? [ 1595.423175][T16276] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort now disconnected [ 1595.479970][T16276] snd_usb_toneport 4-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1595.720074][T17520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.741277][T16276] usb 3-1: USB disconnect, device number 36 [ 1596.506509][T17520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.643472][T16261] usb 4-1: USB disconnect, device number 41 [ 1596.778767][T17562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3003'. [ 1596.946951][T16276] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1597.115805][T16276] usb 6-1: device descriptor read/64, error -71 [ 1597.365701][T16276] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1597.483419][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1597.736021][T16276] usb 6-1: device descriptor read/64, error -71 [ 1598.026073][T16276] usb usb6-port1: attempt power cycle [ 1598.375719][T16276] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1598.676037][T16276] usb 6-1: device descriptor read/8, error -71 [ 1598.810103][T17580] o2cb: This node has not been configured. [ 1598.816956][T17580] o2cb: Cluster check failed. Fix errors before retrying. [ 1598.826554][T17580] (syz.2.3009,17580,0):user_dlm_register:674 ERROR: status = -22 [ 1598.834481][T17580] (syz.2.3009,17580,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1599.115969][T16276] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1599.146744][T16276] usb 6-1: device descriptor read/8, error -71 [ 1599.195207][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1599.260045][T16276] usb usb6-port1: unable to enumerate USB device [ 1599.470444][T17587] fuse: Unknown parameter '' [ 1599.545292][T17591] FAULT_INJECTION: forcing a failure. [ 1599.545292][T17591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.560293][T17591] CPU: 0 UID: 0 PID: 17591 Comm: syz.0.3015 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1599.560326][T17591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1599.560341][T17591] Call Trace: [ 1599.560349][T17591] [ 1599.560359][T17591] dump_stack_lvl+0x189/0x250 [ 1599.560390][T17591] ? __pfx____ratelimit+0x10/0x10 [ 1599.560414][T17591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1599.560439][T17591] ? __pfx__printk+0x10/0x10 [ 1599.560482][T17591] should_fail_ex+0x414/0x560 [ 1599.560512][T17591] _copy_to_user+0x31/0xb0 [ 1599.560546][T17591] simple_read_from_buffer+0xe1/0x170 [ 1599.560576][T17591] proc_fail_nth_read+0x1df/0x250 [ 1599.560607][T17591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.560638][T17591] ? rw_verify_area+0x258/0x650 [ 1599.560671][T17591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1599.560700][T17591] vfs_read+0x200/0x980 [ 1599.560745][T17591] ? __pfx_vfs_read+0x10/0x10 [ 1599.560782][T17591] ? xsk_setsockopt+0x24f/0x710 [ 1599.560814][T17591] ? do_sys_openat2+0x154/0x1c0 [ 1599.560846][T17591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1599.560891][T17591] ksys_read+0x145/0x250 [ 1599.560913][T17591] ? __pfx_ksys_read+0x10/0x10 [ 1599.560941][T17591] ? do_syscall_64+0xbe/0x3b0 [ 1599.560971][T17591] do_syscall_64+0xfa/0x3b0 [ 1599.561006][T17591] ? lockdep_hardirqs_on+0x9c/0x150 [ 1599.561029][T17591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.561053][T17591] ? clear_bhb_loop+0x60/0xb0 [ 1599.561081][T17591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.561103][T17591] RIP: 0033:0x7f1f0578d57c [ 1599.561124][T17591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1599.561143][T17591] RSP: 002b:00007f1f06680030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1599.561166][T17591] RAX: ffffffffffffffda RBX: 00007f1f059b5fa0 RCX: 00007f1f0578d57c [ 1599.561183][T17591] RDX: 000000000000000f RSI: 00007f1f066800a0 RDI: 0000000000000004 [ 1599.561197][T17591] RBP: 00007f1f06680090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.561210][T17591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.561223][T17591] R13: 0000000000000000 R14: 00007f1f059b5fa0 R15: 00007ffd020ea848 [ 1599.561256][T17591] [ 1600.497228][T17611] netlink: 452 bytes leftover after parsing attributes in process `syz.7.3020'. [ 1601.424891][T17613] o2cb: This node has not been configured. [ 1601.430902][T17613] o2cb: Cluster check failed. Fix errors before retrying. [ 1601.438100][T17613] (syz.5.3023,17613,1):user_dlm_register:674 ERROR: status = -22 [ 1601.445880][T17613] (syz.5.3023,17613,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1602.530076][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3026'. [ 1604.308619][T17644] syzkaller1: entered promiscuous mode [ 1604.324516][T17644] syzkaller1: entered allmulticast mode [ 1604.473293][T17647] gtp0: entered promiscuous mode [ 1604.479821][T17647] gtp0: entered allmulticast mode [ 1605.540008][T17669] o2cb: This node has not been configured. [ 1605.550137][T17669] o2cb: Cluster check failed. Fix errors before retrying. [ 1605.558202][T17669] (syz.0.3037,17669,0):user_dlm_register:674 ERROR: status = -22 [ 1605.566760][T17669] (syz.0.3037,17669,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1607.285768][ T5954] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1609.137100][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.199528][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.355603][ T5954] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1609.372141][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3043'. [ 1609.401573][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.462663][ T5954] usb 6-1: config 0 descriptor?? [ 1609.476765][T17697] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1609.483379][T17697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1609.491242][ T5954] usb 6-1: can't set config #0, error -71 [ 1609.514036][ T5954] usb 6-1: USB disconnect, device number 29 [ 1609.520816][T17697] vhci_hcd vhci_hcd.0: Device attached [ 1609.569501][T17701] gtp2: entered promiscuous mode [ 1609.581891][T17701] gtp2: entered allmulticast mode [ 1609.683331][T17705] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3047'. [ 1609.718951][T17698] vhci_hcd: connection closed [ 1609.720497][ T3498] vhci_hcd: stop threads [ 1609.750751][ T3498] vhci_hcd: release socket [ 1609.767100][ T3498] vhci_hcd: disconnect device [ 1609.795596][ T5929] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1609.803252][ T5929] usb 33-1: enqueue for inactive port 0 [ 1609.895576][ T5929] vhci_hcd: vhci_device speed not set [ 1611.190377][T17716] x_tables: duplicate underflow at hook 2 [ 1611.863990][T17724] o2cb: This node has not been configured. [ 1611.885157][T17724] o2cb: Cluster check failed. Fix errors before retrying. [ 1611.892826][T17724] (syz.0.3052,17724,1):user_dlm_register:674 ERROR: status = -22 [ 1611.907180][T17724] (syz.0.3052,17724,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1611.921097][T16258] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1612.133189][T16258] usb 4-1: Using ep0 maxpacket: 8 [ 1612.145360][T16258] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 1612.163284][T16258] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 1612.183192][T16258] usb 4-1: config 162 has no interface number 0 [ 1612.208291][T16258] usb 4-1: config 162 has no interface number 1 [ 1612.233388][T16258] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1612.255940][T13877] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1612.319145][T16258] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1612.359092][T16258] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1612.378884][T16258] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1612.400110][T16258] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1612.414450][T16258] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1612.435662][T16258] usb 4-1: config 162 interface 84 has no altsetting 0 [ 1612.442747][T16258] usb 4-1: config 162 interface 2 has no altsetting 0 [ 1612.455711][T13877] usb 3-1: Using ep0 maxpacket: 8 [ 1612.494521][T16258] usb 4-1: config 162 interface 3 has no altsetting 0 [ 1612.517415][T16258] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1612.525767][T13877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1612.537111][T13877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1612.636165][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.642572][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.699211][T13877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1612.709880][T13877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.724977][T13877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1612.735187][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.144459][T16258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.539472][T16258] usb 4-1: Product: syz [ 1613.543722][T16258] usb 4-1: Manufacturer: syz [ 1613.548476][T16258] usb 4-1: SerialNumber: syz [ 1613.570702][T17738] fuse: Unknown parameter '' [ 1613.954365][T13877] usb 3-1: GET_CAPABILITIES returned 0 [ 1613.960710][T13877] usbtmc 3-1:16.0: can't read capabilities [ 1614.377763][T13877] usb 3-1: USB disconnect, device number 37 [ 1614.388636][T13709] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1614.587477][T16258] usb 4-1: USB disconnect, device number 42 [ 1616.266211][T17770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3067'. [ 1616.575715][ T9715] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1617.434291][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3070'. [ 1617.575956][ T9715] usb 4-1: Using ep0 maxpacket: 16 [ 1617.739397][ T9715] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 1617.817193][ T9715] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1617.894475][ T9715] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1617.933093][ T9715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.950206][ T9715] usb 4-1: Product: syz [ 1617.955180][ T9715] usb 4-1: Manufacturer: syz [ 1617.975789][ T9715] usb 4-1: SerialNumber: syz [ 1618.331789][ T9715] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1618.353145][ T9715] usb 4-1: USB disconnect, device number 43 [ 1619.879514][T17796] net_ratelimit: 5 callbacks suppressed [ 1619.879560][T17796] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1622.156154][T16258] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1622.425682][T16258] usb 6-1: Using ep0 maxpacket: 8 [ 1622.440135][T16258] usb 6-1: config 162 has an invalid interface number: 84 but max is 2 [ 1622.461229][T16258] usb 6-1: config 162 has an invalid interface number: 3 but max is 2 [ 1622.567329][T16258] usb 6-1: config 162 has no interface number 0 [ 1622.597926][T16258] usb 6-1: config 162 has no interface number 1 [ 1622.670642][T16258] usb 6-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1622.787003][T16258] usb 6-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1622.869874][T16258] usb 6-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1623.025682][T16258] usb 6-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1623.045538][T16258] usb 6-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1623.064351][T16258] usb 6-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1623.083931][T16258] usb 6-1: config 162 interface 84 has no altsetting 0 [ 1623.091129][T16258] usb 6-1: config 162 interface 2 has no altsetting 0 [ 1623.101283][T16258] usb 6-1: config 162 interface 3 has no altsetting 0 [ 1623.122285][T16258] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1623.133692][T16258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.148778][T16258] usb 6-1: Product: syz [ 1623.153017][T16258] usb 6-1: Manufacturer: syz [ 1623.163174][T16258] usb 6-1: SerialNumber: syz [ 1623.520729][T13709] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1623.591379][T16258] usb 6-1: USB disconnect, device number 30 [ 1624.957154][T17818] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3082'. [ 1625.404996][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3084'. [ 1626.484425][T17838] x_tables: duplicate underflow at hook 2 [ 1626.848787][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3093'. [ 1626.906998][T17852] rdma_op ffff888023f0f9f0 conn xmit_rdma 0000000000000000 [ 1627.006961][ T30] audit: type=1326 audit(1754148934.183:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17853 comm="syz.7.3093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1627.007323][ T9715] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1627.685552][ T9715] usb 6-1: Using ep0 maxpacket: 16 [ 1627.729356][T17867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3095'. [ 1628.181317][ T9715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.421278][ T9715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.431421][ T9715] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1628.441032][ T9715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.452072][ T9715] usb 6-1: config 0 descriptor?? [ 1629.080116][ T9715] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1629.182696][T17869] 9pnet_fd: Insufficient options for proto=fd [ 1630.295912][T17886] o2cb: This node has not been configured. [ 1630.301953][T17886] o2cb: Cluster check failed. Fix errors before retrying. [ 1630.312166][T17886] (syz.3.3098,17886,0):user_dlm_register:674 ERROR: status = -22 [ 1630.320825][T17886] (syz.3.3098,17886,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1630.998441][T16258] usb 6-1: USB disconnect, device number 31 [ 1631.203454][ T30] audit: type=1326 audit(1754148938.383:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17894 comm="syz.7.3105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1631.780368][ T30] audit: type=1800 audit(1754148938.963:460): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3107" name="file1" dev="overlay" ino=1324 res=0 errno=0 [ 1632.813041][T17915] rdma_op ffff88807c3899f0 conn xmit_rdma 0000000000000000 [ 1633.208837][T17918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3108'. [ 1634.781301][T17931] kthread_run failed with err -4 [ 1637.719559][T17939] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3114'. [ 1638.787813][ T30] audit: type=1800 audit(1754148945.973:461): pid=17974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.3123" name="file1" dev="overlay" ino=632 res=0 errno=0 [ 1639.636015][ T5954] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1639.809051][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1639.885794][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1639.905872][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1639.939780][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1639.974698][ T5954] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1640.013193][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.160783][ T5954] usb 3-1: config 0 descriptor?? [ 1640.180059][T17983] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1641.209620][T18001] input: syz1 as /devices/virtual/input/input67 [ 1641.926152][ T5954] usbhid 3-1:0.0: can't add hid device: -71 [ 1641.976102][ T5954] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1642.008124][ T5954] usb 3-1: USB disconnect, device number 38 [ 1642.076875][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3138'. [ 1642.664274][ T30] audit: type=1800 audit(1754148949.843:462): pid=18023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3139" name="file1" dev="overlay" ino=681 res=0 errno=0 [ 1643.209699][ T30] audit: type=1326 audit(1754148950.293:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18029 comm="syz.7.3142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1645.487347][T18047] blk_print_req_error: 22 callbacks suppressed [ 1645.487388][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.503577][T18047] buffer_io_error: 22 callbacks suppressed [ 1645.503729][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.546905][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.557110][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.565649][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.575310][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.601216][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.611211][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.625491][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.635013][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.645732][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.655365][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.666728][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.671964][ T30] audit: type=1326 audit(1754148952.853:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18045 comm="syz.2.3145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36a118eb69 code=0x0 [ 1645.699104][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.709578][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.721671][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.733538][T18047] ldm_validate_partition_table(): Disk read failed. [ 1645.753485][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.763872][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.773830][T18047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1645.783219][T18047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1645.798024][T18047] Dev nbd2: unable to read RDB block 0 [ 1645.871537][T18047] nbd2: unable to read partition table [ 1645.941645][T18049] ldm_validate_partition_table(): Disk read failed. [ 1645.992328][T18049] Dev nbd2: unable to read RDB block 0 [ 1646.034220][T18049] nbd2: unable to read partition table [ 1648.406472][T18071] x_tables: duplicate underflow at hook 2 [ 1648.561889][T18075] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1648.568598][T18075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1648.579276][T18075] vhci_hcd vhci_hcd.0: Device attached [ 1648.587276][T18075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.598703][T18075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.608197][T18075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.618113][T18075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.627614][T18075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.644990][T18075] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(21) [ 1648.651761][T18075] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1648.668034][T18075] vhci_hcd vhci_hcd.0: Device attached [ 1648.676992][T18075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.691246][T18075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.704763][T18082] vhci_hcd: connection closed [ 1648.707844][T18076] vhci_hcd: connection closed [ 1648.733005][ T9563] vhci_hcd: stop threads [ 1648.745619][T13877] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1648.753437][ T9563] vhci_hcd: release socket [ 1648.755670][T16259] vhci_hcd: vhci_device speed not set [ 1648.770902][ T9563] vhci_hcd: disconnect device [ 1648.794498][ T9563] vhci_hcd: stop threads [ 1648.814473][ T9563] vhci_hcd: release socket [ 1648.831966][ T9563] vhci_hcd: disconnect device [ 1648.855700][T16259] usb 47-1: new full-speed USB device number 4 using vhci_hcd [ 1648.932420][T13877] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.935874][T16259] usb 47-1: enqueue for inactive port 0 [ 1649.015893][T16259] vhci_hcd: vhci_device speed not set [ 1649.027192][T13877] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1649.036752][T13877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.052080][T13877] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1649.058718][ T5929] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1649.225575][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 1649.240906][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1649.257378][ T5929] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1649.471966][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.484899][ T5929] usb 3-1: config 0 descriptor?? [ 1649.709112][ T30] audit: type=1326 audit(1754148956.893:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18090 comm="syz.7.3158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1649.800387][ T5929] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1650.142241][T13877] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1650.186382][T13877] stv0680 6-1:4.0: last error: 179, command = 0xd8 [ 1650.492804][T16259] usb 6-1: USB disconnect, device number 32 [ 1652.110697][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3163'. [ 1652.354300][T18107] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3162'. [ 1652.925817][ T9715] usb 3-1: USB disconnect, device number 39 [ 1652.969309][T18118] x_tables: duplicate underflow at hook 2 [ 1654.173136][ T30] audit: type=1326 audit(1754148961.353:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18138 comm="syz.7.3173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1654.228923][ T5929] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1654.456159][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 1655.389616][ T5929] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 1655.398221][ T5929] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 1655.407471][ T5929] usb 4-1: config 162 has no interface number 0 [ 1655.413783][ T5929] usb 4-1: config 162 has no interface number 1 [ 1655.424035][ T5929] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1655.437385][ T5929] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1655.448326][ T5929] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1655.460374][ T5929] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1655.470976][T18150] binder: BINDER_SET_CONTEXT_MGR already set [ 1655.477605][ T5929] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1655.478051][T18150] binder: 18149:18150 ioctl 4018620d 2000000001c0 returned -16 [ 1655.488085][ T5929] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1655.506723][ T9715] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1655.509179][ T5929] usb 4-1: config 162 interface 84 has no altsetting 0 [ 1655.525758][ T5929] usb 4-1: config 162 interface 2 has no altsetting 0 [ 1655.532601][ T5929] usb 4-1: config 162 interface 3 has no altsetting 0 [ 1655.542598][ T5929] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1655.551925][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.560644][ T5929] usb 4-1: Product: syz [ 1655.564878][ T5929] usb 4-1: Manufacturer: syz [ 1655.570993][ T5929] usb 4-1: SerialNumber: syz [ 1655.685707][ T9715] usb 6-1: device descriptor read/64, error -71 [ 1655.925580][ T9715] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1656.061735][T13709] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1656.079620][ T5929] usb 4-1: USB disconnect, device number 44 [ 1656.085915][ T9715] usb 6-1: device descriptor read/64, error -71 [ 1656.196311][ T9715] usb usb6-port1: attempt power cycle [ 1656.556755][ T9715] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1656.567645][T18165] x_tables: duplicate underflow at hook 2 [ 1656.653907][T18166] binder: 18161:18166 unknown command 0 [ 1656.659802][T18166] binder: 18161:18166 ioctl c0306201 200000000080 returned -22 [ 1656.679593][T18166] binder: BINDER_SET_CONTEXT_MGR already set [ 1656.685761][T18166] binder: 18161:18166 ioctl 4018620d 200000000040 returned -16 [ 1657.266430][ T9715] usb 6-1: device descriptor read/8, error -71 [ 1657.635574][ T9715] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1657.764051][T18173] tipc: Cannot configure node identity twice [ 1658.424929][ T9715] usb 6-1: device descriptor read/8, error -71 [ 1658.606059][ T9715] usb usb6-port1: unable to enumerate USB device [ 1658.934670][ T30] audit: type=1326 audit(1754148965.933:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.3186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x0 [ 1660.358825][ T5929] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1660.845565][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3190'. [ 1661.323569][ T5929] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 1661.324974][ T30] audit: type=1800 audit(1754148968.503:468): pid=18205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3191" name="file1" dev="overlay" ino=1312 res=0 errno=0 [ 1661.332910][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.363083][ T5929] usb 3-1: Product: syz [ 1661.367450][ T5929] usb 3-1: Manufacturer: syz [ 1661.375893][ T5929] usb 3-1: SerialNumber: syz [ 1661.387295][ T5929] usb 3-1: config 0 descriptor?? [ 1661.414469][ T5929] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1661.423534][ T5929] usb 3-1: Detected FT4232HP [ 1661.531016][ T5929] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1661.552819][ T5929] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1661.584075][ T5929] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1661.786193][ T5929] usb 3-1: USB disconnect, device number 40 [ 1661.843783][ T5929] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1661.907949][ T5929] ftdi_sio 3-1:0.0: device disconnected [ 1664.417203][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3198'. [ 1664.646621][T18240] blk_print_req_error: 22 callbacks suppressed [ 1664.646667][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.662377][T18240] buffer_io_error: 22 callbacks suppressed [ 1664.662423][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.678659][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.688272][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.702657][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.712140][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.722270][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.731794][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.756590][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.766701][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.783504][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.792922][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.803224][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.813219][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.823288][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.832780][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.847530][T18240] ldm_validate_partition_table(): Disk read failed. [ 1664.856249][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.865515][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.875257][T18240] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1664.884774][T18240] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1664.894919][T18240] Dev nbd3: unable to read RDB block 0 [ 1664.903268][T18240] nbd3: unable to read partition table [ 1664.946183][ T30] audit: type=1326 audit(1754148972.123:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18234 comm="syz.3.3199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984d78eb69 code=0x0 [ 1665.250522][T18235] ldm_validate_partition_table(): Disk read failed. [ 1665.257690][T18235] Dev nbd3: unable to read RDB block 0 [ 1665.265246][T18235] nbd3: unable to read partition table [ 1665.271741][T18235] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 1666.097102][T18260] x_tables: duplicate underflow at hook 2 [ 1666.511947][T18267] o2cb: This node has not been configured. [ 1666.511999][T18267] o2cb: Cluster check failed. Fix errors before retrying. [ 1666.512028][T18267] (syz.5.3205,18267,0):user_dlm_register:674 ERROR: status = -22 [ 1666.512058][T18267] (syz.5.3205,18267,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1667.384610][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3206'. [ 1668.338175][ T30] audit: type=1800 audit(1754148975.513:470): pid=18285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.3212" name="file1" dev="overlay" ino=755 res=0 errno=0 [ 1669.801451][T18296] o2cb: This node has not been configured. [ 1669.807687][T18296] o2cb: Cluster check failed. Fix errors before retrying. [ 1669.814992][T18296] (syz.0.3214,18296,0):user_dlm_register:674 ERROR: status = -22 [ 1669.824734][T18296] (syz.0.3214,18296,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1672.429610][T18306] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1674.059854][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.919962][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.085178][T18335] binder: BINDER_SET_CONTEXT_MGR already set [ 1676.091356][T18335] binder: 18331:18335 ioctl 4018620d 2000000001c0 returned -16 [ 1676.133908][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'. [ 1677.890073][T18354] blk_print_req_error: 22 callbacks suppressed [ 1677.890097][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.298839][T18352] tipc: Cannot configure node identity twice [ 1678.308615][T18354] buffer_io_error: 22 callbacks suppressed [ 1678.308637][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.365888][ T5929] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1678.374590][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.505930][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.524887][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.524952][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.525129][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.525158][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.525326][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.525608][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.525823][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.525853][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.526142][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.526172][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.526336][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.526367][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.526732][T18354] ldm_validate_partition_table(): Disk read failed. [ 1678.526847][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.526877][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.527331][T18354] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1678.527363][T18354] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1678.529772][T18354] Dev nbd0: unable to read RDB block 0 [ 1678.529828][T18359] tls_set_device_offload: netdev not found [ 1678.531329][T18354] nbd0: unable to read partition table [ 1678.589213][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1678.589252][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.589295][ T5929] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1678.589322][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.593633][ T5929] usb 3-1: config 0 descriptor?? [ 1679.139748][T18347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.140116][T18347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.151758][ T5929] hid_mf 0003:0079:1846.0008: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 1679.151798][ T5929] hid_mf 0003:0079:1846.0008: Invalid report, this should never happen! [ 1679.151819][ T5929] hid_mf 0003:0079:1846.0008: Force feedback init failed. [ 1681.758182][T16259] usb 3-1: USB disconnect, device number 41 [ 1683.888971][T18392] netlink: 'syz.7.3237': attribute type 2 has an invalid length. [ 1685.068598][T18412] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 1685.075294][T18412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1685.083312][T18412] vhci_hcd vhci_hcd.0: Device attached [ 1685.249088][T18413] vhci_hcd: connection closed [ 1685.389976][ T6297] vhci_hcd: stop threads [ 1685.481340][ T6297] vhci_hcd: release socket [ 1686.439853][T16258] usb 47-1: new high-speed USB device number 5 using vhci_hcd [ 1686.506170][ T6297] vhci_hcd: disconnect device [ 1687.862662][T18438] netlink: 'syz.3.3251': attribute type 6 has an invalid length. [ 1688.657951][T18441] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1691.645556][T16258] vhci_hcd: vhci_device speed not set [ 1692.324084][T18480] binder: BINDER_SET_CONTEXT_MGR already set [ 1692.330355][T18480] binder: 18478:18480 ioctl 4018620d 200000000040 returned -16 [ 1692.777502][T18487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3267'. [ 1692.971426][ T30] audit: type=1326 audit(1754149000.153:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.042208][ T30] audit: type=1326 audit(1754149000.153:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.055678][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3271'. [ 1693.096351][ T30] audit: type=1326 audit(1754149000.153:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.128849][ T30] audit: type=1326 audit(1754149000.153:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.161220][ T30] audit: type=1326 audit(1754149000.153:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.193071][ T30] audit: type=1326 audit(1754149000.153:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.237849][ T30] audit: type=1326 audit(1754149000.153:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.296018][ T9715] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1693.297276][ T30] audit: type=1326 audit(1754149000.153:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.327361][ T30] audit: type=1326 audit(1754149000.153:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.351883][ T30] audit: type=1326 audit(1754149000.153:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18491 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x7ffc0000 [ 1693.499066][ T9715] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1693.542555][ T9715] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1693.570262][ T9715] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1693.600116][ T9715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.647611][T18493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1693.684095][ T9715] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1693.919917][ T9715] usb 3-1: USB disconnect, device number 42 [ 1694.793092][T18514] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 1694.793092][T18514] program syz.7.3274 not setting count and/or reply_len properly [ 1694.908477][T18521] binder: BINDER_SET_CONTEXT_MGR already set [ 1694.914757][T18521] binder: 18520:18521 ioctl 4018620d 200000000040 returned -16 [ 1695.083722][T18525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1698.149562][T18558] random: crng reseeded on system resumption [ 1705.145418][ C1] sched: DL replenish lagged too much [ 1705.615670][T18561] binder: BINDER_SET_CONTEXT_MGR bad uid 16832 != 0 [ 1705.655609][T18561] binder: 18560:18561 ioctl 4018620d 200000000040 returned -1 [ 1705.947003][T18567] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1705.953909][T18567] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1705.963255][T18567] vhci_hcd vhci_hcd.0: Device attached [ 1706.058619][T18568] vhci_hcd: connection closed [ 1706.144160][T13886] vhci_hcd: stop threads [ 1706.314479][T13886] vhci_hcd: release socket [ 1706.394146][T13886] vhci_hcd: disconnect device [ 1706.464156][T16258] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 1706.592754][T16258] usb 37-1: enqueue for inactive port 0 [ 1706.839029][T16258] vhci_hcd: vhci_device speed not set [ 1707.691203][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1707.704275][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1707.870564][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1707.888563][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1707.897159][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1708.165476][T18582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1709.975803][ T5835] Bluetooth: hci4: command tx timeout [ 1710.624223][T18612] binder: BINDER_SET_CONTEXT_MGR already set [ 1710.630808][T18612] binder: 18611:18612 ioctl 4018620d 200000000040 returned -16 [ 1710.666000][T18610] gtp1: entered promiscuous mode [ 1710.683446][T18610] gtp1: entered allmulticast mode [ 1710.951917][T18576] chnl_net:caif_netlink_parms(): no params data found [ 1711.004826][T18623] sctp: [Deprecated]: syz.7.3304 (pid 18623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1711.004826][T18623] Use struct sctp_sack_info instead [ 1711.992884][ T3498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.055671][ T5835] Bluetooth: hci4: command tx timeout [ 1714.347454][ T5835] Bluetooth: hci4: command tx timeout [ 1714.721747][ T3498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.282213][ T3498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.704782][ T3498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.847082][T18576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.863151][T18576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.875213][T18576] bridge_slave_0: entered allmulticast mode [ 1715.884468][T18576] bridge_slave_0: entered promiscuous mode [ 1715.899563][T18651] netlink: 888 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1715.946179][T18654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1716.010308][T18576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.080047][T18576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.236110][T18576] bridge_slave_1: entered allmulticast mode [ 1716.376549][ T5835] Bluetooth: hci4: command tx timeout [ 1716.413304][T18576] bridge_slave_1: entered promiscuous mode [ 1716.900324][T18576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1716.964626][T18576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1717.001359][T18661] binder: BINDER_SET_CONTEXT_MGR already set [ 1717.019866][T18661] binder: 18660:18661 ioctl 4018620d 200000000040 returned -16 [ 1717.140087][T18576] team0: Port device team_slave_0 added [ 1717.169810][T18576] team0: Port device team_slave_1 added [ 1717.537084][T18576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.569434][T18576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.595509][ C0] vkms_vblank_simulate: vblank timer overrun [ 1717.700459][T18576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.749952][ T3498] bridge_slave_1: left allmulticast mode [ 1717.755767][ T3498] bridge_slave_1: left promiscuous mode [ 1717.761585][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.774557][ T3498] bridge_slave_0: left allmulticast mode [ 1717.782973][ T3498] bridge_slave_0: left promiscuous mode [ 1717.789054][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.909797][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1718.923421][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1718.935918][ T3498] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1718.952020][ T3498] bond0 (unregistering): Released all slaves [ 1719.173090][T18680] slcan: can't register candev [ 1719.184969][T18680] Falling back ldisc for ttyS3. [ 1719.214799][ T3498] bond1 (unregistering): (slave wlan0): Releasing active interface [ 1719.242511][ T3498] bond1 (unregistering): Released all slaves [ 1719.279912][T18576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.292017][T18576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.383337][T18576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.421051][T18685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1719.561812][ T3498] : left promiscuous mode [ 1720.906381][ T3498] tipc: Left network mode [ 1720.918565][T18576] hsr_slave_0: entered promiscuous mode [ 1720.925124][T18576] hsr_slave_1: entered promiscuous mode [ 1720.951867][T18576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1720.970532][T18576] Cannot create hsr debugfs directory [ 1721.136250][ T5929] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1721.630751][ T5929] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 1721.648852][ T5929] usb 6-1: config 0 has no interface number 0 [ 1721.720495][ T5929] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1721.741087][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.775425][ T5929] usb 6-1: Product: syz [ 1721.779658][ T5929] usb 6-1: Manufacturer: syz [ 1721.784261][ T5929] usb 6-1: SerialNumber: syz [ 1721.827576][ T5929] usb 6-1: config 0 descriptor?? [ 1722.052111][ T5929] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1722.076186][ T5929] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1722.578442][ T5929] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1722.687943][ T5929] usb 6-1: media controller created [ 1722.758046][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1722.880528][ T5929] DVB: Unable to find symbol dib7000p_attach() [ 1722.891990][ T5929] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1722.942357][ T5929] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1722.953710][ T5929] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1722.990320][ T5929] usb 6-1: media controller created [ 1723.029684][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1723.076483][ T5929] dib0700: the master dib7090 has to be initialized first [ 1723.113837][ T5929] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1723.740168][ T5929] rc_core: IR keymap rc-dib0700-rc5 not found [ 1723.765196][ T5929] Registered IR keymap rc-empty [ 1723.792265][ T5929] dvb-usb: could not initialize remote control. [ 1723.810669][ T3498] hsr_slave_0: left promiscuous mode [ 1723.830105][ T5929] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1723.845653][ T3498] hsr_slave_1: left promiscuous mode [ 1723.855232][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1723.871727][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.880644][ T5929] usb 6-1: USB disconnect, device number 37 [ 1723.899590][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1724.033558][ T5929] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 1724.063017][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.178385][ T3498] veth1_macvtap: left promiscuous mode [ 1724.194370][ T3498] veth0_macvtap: left promiscuous mode [ 1724.201675][ T3498] veth1_vlan: left promiscuous mode [ 1724.212710][ T3498] veth0_vlan: left promiscuous mode [ 1724.419305][T18724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.376727][T18750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.805229][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 1726.982446][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 1727.666143][T16258] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1727.927550][T16258] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.937880][T16258] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1727.952369][T16258] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1727.962982][T16258] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1727.972388][T16258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1727.980846][T16258] usb 6-1: SerialNumber: syz [ 1727.992531][T16258] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1728.443855][T18758] FAULT_INJECTION: forcing a failure. [ 1728.443855][T18758] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.515522][T18758] CPU: 1 UID: 0 PID: 18758 Comm: syz.0.3338 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1728.515556][T18758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1728.515571][T18758] Call Trace: [ 1728.515582][T18758] [ 1728.515592][T18758] dump_stack_lvl+0x189/0x250 [ 1728.515626][T18758] ? __pfx____ratelimit+0x10/0x10 [ 1728.515651][T18758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1728.515678][T18758] ? __pfx__printk+0x10/0x10 [ 1728.515719][T18758] ? __pfx___might_resched+0x10/0x10 [ 1728.515751][T18758] should_fail_ex+0x414/0x560 [ 1728.515780][T18758] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 1728.515805][T18758] should_failslab+0xa8/0x100 [ 1728.515842][T18758] __kvmalloc_node_noprof+0x161/0x5f0 [ 1728.515868][T18758] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 1728.515899][T18758] alloc_netdev_mqs+0xa8b/0x11e0 [ 1728.515933][T18758] register_vlan_device+0x24f/0x4c0 [ 1728.515964][T18758] ? cap_capable+0x11f/0x460 [ 1728.515990][T18758] ? __pfx_register_vlan_device+0x10/0x10 [ 1728.516024][T18758] ? security_capable+0x7e/0x2e0 [ 1728.516062][T18758] vlan_ioctl_handler+0x281/0x650 [ 1728.516094][T18758] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1728.516123][T18758] ? __lock_acquire+0xab9/0xd20 [ 1728.516150][T18758] ? __asan_memset+0x22/0x50 [ 1728.516182][T18758] ? smack_file_ioctl+0x24a/0x340 [ 1728.516208][T18758] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1728.516240][T18758] sock_ioctl+0x610/0x790 [ 1728.516269][T18758] ? __pfx_sock_ioctl+0x10/0x10 [ 1728.516294][T18758] ? __fget_files+0x2a/0x420 [ 1728.516319][T18758] ? __fget_files+0x3a0/0x420 [ 1728.516343][T18758] ? __fget_files+0x2a/0x420 [ 1728.516373][T18758] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1728.516400][T18758] ? __pfx_sock_ioctl+0x10/0x10 [ 1728.516424][T18758] __se_sys_ioctl+0xfc/0x170 [ 1728.516462][T18758] do_syscall_64+0xfa/0x3b0 [ 1728.516486][T18758] ? lockdep_hardirqs_on+0x9c/0x150 [ 1728.516510][T18758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.516533][T18758] ? clear_bhb_loop+0x60/0xb0 [ 1728.516561][T18758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.516584][T18758] RIP: 0033:0x7f1f0578eb69 [ 1728.516604][T18758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.516624][T18758] RSP: 002b:00007f1f06680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.516649][T18758] RAX: ffffffffffffffda RBX: 00007f1f059b5fa0 RCX: 00007f1f0578eb69 [ 1728.516666][T18758] RDX: 0000200000000100 RSI: 0000000000008983 RDI: 0000000000000003 [ 1728.516681][T18758] RBP: 00007f1f06680090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.516696][T18758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.516709][T18758] R13: 0000000000000000 R14: 00007f1f059b5fa0 R15: 00007ffd020ea848 [ 1728.516745][T18758] [ 1729.336602][T13877] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1729.508081][T13877] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1730.535650][T13877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1730.693031][T16258] usb 6-1: USB disconnect, device number 38 [ 1731.606887][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1731.617926][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1731.629215][T13877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1731.642292][T13877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1731.651466][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.671751][T18576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1731.700245][T18576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1731.729197][T13877] usb 3-1: config 0 descriptor?? [ 1731.735914][T18763] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1731.753421][T18576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1731.814500][T18576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1732.440334][T13877] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1732.512628][T13877] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1732.617846][T13877] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1732.645839][T13877] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1732.672253][T13877] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1732.713303][T13877] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1732.742926][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 1732.766021][T13877] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1732.969109][T18576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.997277][T16267] usb 3-1: USB disconnect, device number 43 [ 1733.040163][T18576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.073079][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.080355][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.109594][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.116827][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1734.797697][T18576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.501610][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.508379][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.615721][T16259] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1735.837965][T16259] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.875517][T16259] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1735.905924][T16259] usb 3-1: config 1 interface 0 has no altsetting 1 [ 1735.914501][T16259] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1735.958737][T16259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1735.984262][T16259] usb 3-1: SerialNumber: syz [ 1736.001351][T16259] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1736.182627][T18576] veth0_vlan: entered promiscuous mode [ 1736.226819][T18576] veth1_vlan: entered promiscuous mode [ 1736.290454][T18576] veth0_macvtap: entered promiscuous mode [ 1736.309842][T18576] veth1_macvtap: entered promiscuous mode [ 1736.344374][T18576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1736.368989][T18576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1736.389542][T18576] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.403118][T18576] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.417583][T18576] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.431665][T18576] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.647430][T12575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.665206][T12575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.762033][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.796190][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.926991][ T5929] usb 3-1: USB disconnect, device number 44 [ 1742.637251][ T9710] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1742.818034][ T9710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.850828][ T9710] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1742.885427][ T9710] usb 3-1: config 1 interface 0 has no altsetting 1 [ 1742.901477][ T9710] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1742.933846][ T9710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1742.960093][ T9710] usb 3-1: SerialNumber: syz [ 1743.178868][ T9710] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1743.883917][T18903] overlay: Unknown parameter '/' [ 1743.914173][T18904] block device autoloading is deprecated and will be removed. [ 1744.434027][T16259] usb 3-1: USB disconnect, device number 45 [ 1746.874138][T18925] gtp2: entered promiscuous mode [ 1746.892167][T18925] gtp2: entered allmulticast mode [ 1747.012876][T18931] binder: BINDER_SET_CONTEXT_MGR bad uid 16832 != 0 [ 1747.028875][T18931] binder: 18930:18931 ioctl 4018620d 200000000040 returned -1 [ 1747.119234][T18933] trusted_key: encrypted_key: insufficient parameters specified [ 1747.529144][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1747.529165][ T30] audit: type=1326 audit(1754149054.713:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.0.3383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x0 [ 1750.130833][T18964] blk_print_req_error: 7 callbacks suppressed [ 1750.130878][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.152638][T18964] buffer_io_error: 7 callbacks suppressed [ 1750.152678][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.168661][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.178083][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.188255][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.198311][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.208442][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.219535][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.229782][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.244695][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.254868][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.264313][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.274738][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.284128][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.296927][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.313634][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.325553][T18964] ldm_validate_partition_table(): Disk read failed. [ 1750.339246][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.353607][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.366272][T18964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.375863][T18964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1750.387866][T18964] Dev nbd0: unable to read RDB block 0 [ 1750.399827][T18964] nbd0: unable to read partition table [ 1754.709945][T18988] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1755.203597][T18997] tipc: Cannot configure node identity twice [ 1756.384021][T19006] ip6erspan0: entered promiscuous mode [ 1756.450306][T19006] tipc: Started in network mode [ 1756.455436][T19006] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 1757.322294][T19009] tipc: Cannot configure node identity twice [ 1759.633250][T19023] fuse: Unknown parameter '' [ 1759.746522][T19029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1764.894698][T19079] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3421'. [ 1766.115563][T16267] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1766.339129][T16267] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.354619][T16267] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1766.388600][T16267] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1766.408233][T16267] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1767.029703][T16267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1767.039367][T16267] usb 6-1: SerialNumber: syz [ 1767.742041][T16267] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1768.117184][T19115] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3432'. [ 1769.028643][ T9715] usb 6-1: USB disconnect, device number 39 [ 1772.695678][ T30] audit: type=1800 audit(1754149079.783:502): pid=19159 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3446" name="file1" dev="overlay" ino=1645 res=0 errno=0 [ 1773.289241][T19166] No such timeout policy "syz1" [ 1773.668672][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3449'. [ 1776.052180][T19195] tipc: Enabled bearer , priority 0 [ 1776.107126][T19197] 9pnet_fd: Insufficient options for proto=fd [ 1776.222001][T19195] syzkaller0: entered promiscuous mode [ 1776.227768][T19195] syzkaller0: entered allmulticast mode [ 1776.234143][T19195] tipc: Resetting bearer [ 1776.271024][T19194] tipc: Resetting bearer [ 1776.372265][ T30] audit: type=1800 audit(1754149083.463:503): pid=19200 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3457" name="file1" dev="overlay" ino=146 res=0 errno=0 [ 1777.075625][ T9715] tipc: Node number set to 3028680704 [ 1785.243745][T19194] tipc: Disabling bearer [ 1786.180854][ T30] audit: type=1326 audit(1754149093.103:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19239 comm="syz.5.3471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x0 [ 1786.569768][ T30] audit: type=1326 audit(1754149093.753:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19249 comm="syz.0.3470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x0 [ 1786.678173][T19252] blk_print_req_error: 6 callbacks suppressed [ 1786.678211][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1786.708694][T19252] buffer_io_error: 6 callbacks suppressed [ 1786.708782][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1786.778925][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1786.816542][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1786.833225][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1786.841996][T19255] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3473'. [ 1786.852329][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1786.868751][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1786.885380][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1786.897895][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1786.910987][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1786.930531][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1786.944537][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1786.970230][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1787.144717][T19257] comedi comedi0: Minor -2147450880 is invalid! [ 1787.206851][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1787.314572][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1787.329708][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1787.358527][T19252] ldm_validate_partition_table(): Disk read failed. [ 1787.373143][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1787.383414][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1787.406966][T19252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1787.423653][T19252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1787.435933][T19252] Dev nbd0: unable to read RDB block 0 [ 1787.487597][T19252] nbd0: unable to read partition table [ 1788.058467][T19272] FAULT_INJECTION: forcing a failure. [ 1788.058467][T19272] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.085545][T19272] CPU: 0 UID: 0 PID: 19272 Comm: syz.0.3476 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1788.085578][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1788.085594][T19272] Call Trace: [ 1788.085603][T19272] [ 1788.085614][T19272] dump_stack_lvl+0x189/0x250 [ 1788.085646][T19272] ? __pfx____ratelimit+0x10/0x10 [ 1788.085669][T19272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1788.085692][T19272] ? __pfx__printk+0x10/0x10 [ 1788.085727][T19272] ? __pfx___might_resched+0x10/0x10 [ 1788.085751][T19272] ? fs_reclaim_acquire+0x7d/0x100 [ 1788.085783][T19272] should_fail_ex+0x414/0x560 [ 1788.085812][T19272] should_failslab+0xa8/0x100 [ 1788.085839][T19272] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1788.085861][T19272] ? flock_lock_inode+0x21f/0x1420 [ 1788.085901][T19272] flock_lock_inode+0x21f/0x1420 [ 1788.085961][T19272] ? __pfx_flock_lock_inode+0x10/0x10 [ 1788.085993][T19272] ? schedule+0x91/0x360 [ 1788.086019][T19272] ? schedule+0x16f/0x360 [ 1788.086043][T19272] locks_lock_inode_wait+0x107/0x410 [ 1788.086083][T19272] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 1788.086115][T19272] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1788.086170][T19272] __se_sys_flock+0x467/0x5b0 [ 1788.086206][T19272] ? __pfx___se_sys_flock+0x10/0x10 [ 1788.086268][T19272] ? __pfx_ksys_write+0x10/0x10 [ 1788.086286][T19272] ? rcu_is_watching+0x15/0xb0 [ 1788.086317][T19272] ? do_syscall_64+0xbe/0x3b0 [ 1788.086347][T19272] do_syscall_64+0xfa/0x3b0 [ 1788.086371][T19272] ? lockdep_hardirqs_on+0x9c/0x150 [ 1788.086395][T19272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.086417][T19272] ? clear_bhb_loop+0x60/0xb0 [ 1788.086445][T19272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.086467][T19272] RIP: 0033:0x7f1f0578eb69 [ 1788.086487][T19272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.086508][T19272] RSP: 002b:00007f1f0665f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 1788.086532][T19272] RAX: ffffffffffffffda RBX: 00007f1f059b6080 RCX: 00007f1f0578eb69 [ 1788.086549][T19272] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 1788.086562][T19272] RBP: 00007f1f0665f090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.086577][T19272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.086591][T19272] R13: 0000000000000000 R14: 00007f1f059b6080 R15: 00007ffd020ea848 [ 1788.086626][T19272] [ 1789.146656][T19279] FAULT_INJECTION: forcing a failure. [ 1789.146656][T19279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.160685][T19279] CPU: 0 UID: 0 PID: 19279 Comm: syz.2.3479 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1789.160708][T19279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1789.160718][T19279] Call Trace: [ 1789.160725][T19279] [ 1789.160732][T19279] dump_stack_lvl+0x189/0x250 [ 1789.160755][T19279] ? __pfx____ratelimit+0x10/0x10 [ 1789.160772][T19279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1789.160790][T19279] ? __pfx__printk+0x10/0x10 [ 1789.160819][T19279] ? __might_fault+0xb0/0x130 [ 1789.160843][T19279] should_fail_ex+0x414/0x560 [ 1789.160864][T19279] _copy_from_user+0x2d/0xb0 [ 1789.160887][T19279] memdup_user+0x5e/0xd0 [ 1789.160907][T19279] strndup_user+0x68/0xd0 [ 1789.160928][T19279] __se_sys_mount+0x9c/0x410 [ 1789.160947][T19279] ? ksys_write+0x22a/0x250 [ 1789.160964][T19279] ? __pfx___se_sys_mount+0x10/0x10 [ 1789.160981][T19279] ? __se_sys_modify_ldt+0x2c0/0x320 [ 1789.161006][T19279] ? do_syscall_64+0xbe/0x3b0 [ 1789.161022][T19279] ? __x64_sys_mount+0x20/0xc0 [ 1789.161041][T19279] do_syscall_64+0xfa/0x3b0 [ 1789.161058][T19279] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.161074][T19279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.161090][T19279] ? clear_bhb_loop+0x60/0xb0 [ 1789.161110][T19279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.161124][T19279] RIP: 0033:0x7f36a118eb69 [ 1789.161141][T19279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1789.161155][T19279] RSP: 002b:00007f36a1f30038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1789.161172][T19279] RAX: ffffffffffffffda RBX: 00007f36a13b5fa0 RCX: 00007f36a118eb69 [ 1789.161184][T19279] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000000 [ 1789.161195][T19279] RBP: 00007f36a1f30090 R08: 0000200000000100 R09: 0000000000000000 [ 1789.161206][T19279] R10: 0000000000000418 R11: 0000000000000246 R12: 0000000000000001 [ 1789.161216][T19279] R13: 0000000000000000 R14: 00007f36a13b5fa0 R15: 00007ffe1e144a28 [ 1789.161240][T19279] [ 1790.384301][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1790.830481][T19293] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1790.856211][T19293] macvtap1: entered allmulticast mode [ 1790.878583][T19293] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1790.927340][T19293] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 1790.957974][T19293] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 1791.316767][T19304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3487'. [ 1792.506863][T19317] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1796.941590][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.993086][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1800.486172][T19364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1800.785686][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3502'. [ 1804.008599][T16267] libceph: connect (1)[c::]:6789 error -101 [ 1804.014777][T16267] libceph: mon0 (1)[c::]:6789 connect error [ 1804.287002][T16259] libceph: connect (1)[c::]:6789 error -101 [ 1804.293354][T16259] libceph: mon0 (1)[c::]:6789 connect error [ 1804.828305][T16267] libceph: connect (1)[c::]:6789 error -101 [ 1804.837546][T16267] libceph: mon0 (1)[c::]:6789 connect error [ 1805.050053][T19390] ceph: No mds server is up or the cluster is laggy [ 1809.256571][T19427] tipc: Cannot configure node identity twice [ 1809.726313][T19431] kvm: kvm [19430]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 1816.102893][T19481] o2cb: This node has not been configured. [ 1816.109175][T19481] o2cb: Cluster check failed. Fix errors before retrying. [ 1816.116918][T19481] (syz.7.3527,19481,0):user_dlm_register:674 ERROR: status = -22 [ 1816.124789][T19481] (syz.7.3527,19481,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1816.744932][T19483] tipc: Cannot configure node identity twice [ 1818.031162][T19487] o2cb: This node has not been configured. [ 1818.038240][T19487] o2cb: Cluster check failed. Fix errors before retrying. [ 1818.045507][T19487] (syz.8.3530,19487,1):user_dlm_register:674 ERROR: status = -22 [ 1818.053268][T19487] (syz.8.3530,19487,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1820.789950][T19509] gtp3: entered promiscuous mode [ 1820.796726][T19509] gtp3: entered allmulticast mode [ 1821.211499][T19520] o2cb: This node has not been configured. [ 1821.218181][T19520] o2cb: Cluster check failed. Fix errors before retrying. [ 1821.226279][T19520] (syz.2.3539,19520,0):user_dlm_register:674 ERROR: status = -22 [ 1821.234188][T19520] (syz.2.3539,19520,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1823.814529][ T9710] libceph: connect (1)[c::]:6789 error -101 [ 1823.868966][ T9710] libceph: mon0 (1)[c::]:6789 connect error [ 1823.894692][T19528] ceph: No mds server is up or the cluster is laggy [ 1823.987272][T19539] can0: slcan on ttyS3. [ 1824.187390][T19539] can0 (unregistered): slcan off ttyS3. [ 1824.393009][T19539] Falling back ldisc for ttyS3. [ 1826.459047][ T5954] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1827.253688][ T5954] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1827.269287][ T5954] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1827.293475][ T5954] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1827.305024][ T5954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1827.334876][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1829.160286][ T5954] usb 6-1: SerialNumber: syz [ 1830.457500][ T5954] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1830.582381][T19562] o2cb: This node has not been configured. [ 1830.588596][T19562] o2cb: Cluster check failed. Fix errors before retrying. [ 1830.595881][T19562] (syz.0.3551,19562,1):user_dlm_register:674 ERROR: status = -22 [ 1830.603659][T19562] (syz.0.3551,19562,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1830.856316][T13877] usb 6-1: USB disconnect, device number 40 [ 1831.743528][T19573] can0: slcan on ttyS3. [ 1832.276792][T19578] can0 (unregistered): slcan off ttyS3. [ 1832.282044][T19588] fuse: Unknown parameter '' [ 1832.288030][T19578] Falling back ldisc for ttyS3. [ 1832.530409][T19593] can0: slcan on ttyS3. [ 1833.270728][T19596] can0 (unregistered): slcan off ttyS3. [ 1833.506347][T19596] Falling back ldisc for ttyS3. [ 1833.975174][T19610] tipc: Cannot configure node identity twice [ 1834.691530][T19612] tmpfs: Bad value for 'mpol' [ 1835.535531][T16267] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1835.769702][T16267] usb 6-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 1835.785602][ T5954] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1836.353003][T16267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.362635][T16267] usb 6-1: Product: syz [ 1836.367063][T16267] usb 6-1: Manufacturer: syz [ 1836.371796][T16267] usb 6-1: SerialNumber: syz [ 1836.613929][T16267] pwc: Visionite VCS-UC300 USB webcam detected. [ 1836.627044][T16267] pwc: Failed to set LED on/off time (-71) [ 1836.635778][T16267] pwc: send_video_command error -71 [ 1836.637855][ T5954] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1836.641147][T16267] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1836.690479][T16267] Philips webcam 6-1:5.0: probe with driver Philips webcam failed with error -71 [ 1836.697673][ T5954] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1837.367435][ T5954] usb 9-1: config 1 interface 0 has no altsetting 1 [ 1837.573056][T16267] usb 6-1: USB disconnect, device number 41 [ 1837.714936][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3569'. [ 1838.113999][ T5954] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1838.145512][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1838.162483][ T5954] usb 9-1: SerialNumber: syz [ 1838.195188][ T5954] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1839.068580][T19641] syz.7.3572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1839.535632][T19647] tipc: Cannot configure node identity twice [ 1839.984537][T16261] usb 9-1: USB disconnect, device number 2 [ 1840.437164][T19653] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 16832 [ 1840.514186][T19653] binder: 19651:19653 ioctl 4018620d 2000000000c0 returned -1 [ 1840.550165][T19658] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 16832 [ 1840.600112][T19658] binder: 19651:19658 ioctl 4018620d 200000000040 returned -1 [ 1840.657281][T16261] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1841.565500][T16261] usb 6-1: Using ep0 maxpacket: 8 [ 1841.589277][T16261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.616828][T16261] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1841.631999][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3583'. [ 1841.638816][T16261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.649296][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3583'. [ 1841.678800][T16261] usb 6-1: config 0 descriptor?? [ 1841.685942][T19675] netlink: 'syz.8.3581': attribute type 4 has an invalid length. [ 1842.473248][T16261] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1842.582441][T19682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3584'. [ 1843.308504][T19685] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1843.448556][T19656] netlink: 'syz.5.3578': attribute type 29 has an invalid length. [ 1843.456688][T19656] netlink: 'syz.5.3578': attribute type 3 has an invalid length. [ 1843.475879][T19656] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3578'. [ 1843.494437][T19695] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3589'. [ 1843.756907][T16261] gspca_vc032x: reg_r err -110 [ 1843.763139][T16261] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 1844.214084][T19697] vlan3: entered promiscuous mode [ 1844.238194][T19697] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1844.254100][T19697] vlan3: entered allmulticast mode [ 1844.264001][T19697] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1845.028503][T19713] block nbd8: shutting down sockets [ 1845.049270][T16267] usb 6-1: USB disconnect, device number 42 [ 1845.333285][T19729] netlink: 'syz.2.3599': attribute type 29 has an invalid length. [ 1846.682392][T19741] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1849.390613][T19756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1851.502517][T19748] block nbd8: shutting down sockets [ 1851.601972][T19770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1857.432903][T19797] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1857.498419][T19797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1857.550082][T19800] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3618'. [ 1857.598978][T19797] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1858.037163][T19797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1858.103296][T19801] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1858.122170][T19801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1858.143708][T19801] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1858.183568][T19801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1858.667462][T19809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1858.682656][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.689930][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.467318][T19826] block nbd5: shutting down sockets [ 1861.513138][T19837] delete_channel: no stack [ 1862.635507][T19837] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 1862.636633][T19843] comedi comedi0: c6xdigio: I/O port conflict (0x8001,3) [ 1865.265480][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1865.438748][T19858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3631'. [ 1866.864168][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1867.369602][T19868] smb3: Unexpected value for 'rdma' [ 1867.830206][T19877] tipc: Enabled bearer , priority 0 [ 1867.839289][T19877] syzkaller0: entered promiscuous mode [ 1867.853700][T19877] syzkaller0: entered allmulticast mode [ 1868.558073][T19885] tipc: Cannot configure node identity twice [ 1868.652041][T19877] tipc: Resetting bearer [ 1868.856347][T16267] tipc: Node number set to 3028680704 [ 1868.856747][T19874] tipc: Resetting bearer [ 1869.035474][T19874] tipc: Disabling bearer [ 1869.143179][T19900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3644'. [ 1873.371049][T19920] block nbd7: shutting down sockets [ 1873.862974][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3652'. [ 1874.828967][T19939] tipc: Cannot configure node identity twice [ 1876.195895][T19954] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3656'. [ 1877.023125][T19959] FAULT_INJECTION: forcing a failure. [ 1877.023125][T19959] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.040841][T19959] CPU: 1 UID: 0 PID: 19959 Comm: syz.5.3659 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1877.040876][T19959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1877.040892][T19959] Call Trace: [ 1877.040902][T19959] [ 1877.040913][T19959] dump_stack_lvl+0x189/0x250 [ 1877.040945][T19959] ? __pfx____ratelimit+0x10/0x10 [ 1877.040971][T19959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1877.040997][T19959] ? __pfx__printk+0x10/0x10 [ 1877.041032][T19959] ? __pfx___might_resched+0x10/0x10 [ 1877.041057][T19959] ? fs_reclaim_acquire+0x7d/0x100 [ 1877.041090][T19959] should_fail_ex+0x414/0x560 [ 1877.041121][T19959] should_failslab+0xa8/0x100 [ 1877.041149][T19959] __kmalloc_noprof+0xcb/0x4f0 [ 1877.041170][T19959] ? kfree+0x4d/0x440 [ 1877.041200][T19959] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1877.041236][T19959] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1877.041275][T19959] ? tomoyo_domain+0xda/0x130 [ 1877.041312][T19959] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1877.041338][T19959] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1877.041366][T19959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1877.041412][T19959] ? __lock_acquire+0xab9/0xd20 [ 1877.041457][T19959] ? __fget_files+0x2a/0x420 [ 1877.041487][T19959] ? __fget_files+0x2a/0x420 [ 1877.041510][T19959] ? __fget_files+0x3a0/0x420 [ 1877.041534][T19959] ? __fget_files+0x2a/0x420 [ 1877.041564][T19959] security_file_ioctl+0xcb/0x2d0 [ 1877.041593][T19959] __se_sys_ioctl+0x47/0x170 [ 1877.041630][T19959] do_syscall_64+0xfa/0x3b0 [ 1877.041662][T19959] ? lockdep_hardirqs_on+0x9c/0x150 [ 1877.041687][T19959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.041711][T19959] ? clear_bhb_loop+0x60/0xb0 [ 1877.041739][T19959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.041761][T19959] RIP: 0033:0x7f13d6b8eb69 [ 1877.041798][T19959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1877.041819][T19959] RSP: 002b:00007f13d7a4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1877.041842][T19959] RAX: ffffffffffffffda RBX: 00007f13d6db5fa0 RCX: 00007f13d6b8eb69 [ 1877.041859][T19959] RDX: 0000200000000300 RSI: 0000000040485404 RDI: 0000000000000003 [ 1877.041874][T19959] RBP: 00007f13d7a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.041888][T19959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.041902][T19959] R13: 0000000000000000 R14: 00007f13d6db5fa0 R15: 00007fff80e9c748 [ 1877.041943][T19959] [ 1877.041953][T19959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1878.722379][ T30] audit: type=1326 audit(1754149185.623:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19964 comm="syz.7.3662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1880.347840][T19980] netlink: 'syz.7.3664': attribute type 2 has an invalid length. [ 1880.537810][T19978] tipc: Cannot configure node identity twice [ 1880.665381][ T9710] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1881.834670][ T9710] usb 9-1: Using ep0 maxpacket: 8 [ 1881.902845][ T9710] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1881.913149][ T9710] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1881.925712][ T9710] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1881.936287][ T9710] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1881.949682][ T9710] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1881.959891][ T9710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.185628][ T9710] usb 9-1: GET_CAPABILITIES returned 0 [ 1882.209536][ T9710] usbtmc 9-1:16.0: can't read capabilities [ 1882.595476][ T9715] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1883.985638][T20006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1884.442833][ T9715] usb 3-1: device descriptor read/64, error -71 [ 1884.514501][ T30] audit: type=1326 audit(1754149191.693:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20007 comm="syz.5.3674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x0 [ 1884.847574][ T9715] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1885.265462][ T9715] usb 3-1: device descriptor read/64, error -71 [ 1888.095687][ T9715] usb usb3-port1: attempt power cycle [ 1889.006183][ T9710] usb 9-1: USB disconnect, device number 3 [ 1890.449790][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1891.808838][T20043] o2cb: This node has not been configured. [ 1891.815152][T20043] o2cb: Cluster check failed. Fix errors before retrying. [ 1891.823837][T20043] (syz.8.3678,20043,0):user_dlm_register:674 ERROR: status = -22 [ 1891.832165][T20043] (syz.8.3678,20043,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1892.303605][T20049] program syz.7.3682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1893.277500][T20063] fuse: Bad value for 'group_id' [ 1893.282594][T20063] fuse: Bad value for 'group_id' [ 1894.440363][ T30] audit: type=1326 audit(1754149201.343:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20060 comm="syz.7.3687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1e18eb69 code=0x0 [ 1894.909363][T13886] Bluetooth: hci5: Frame reassembly failed (-84) [ 1895.010835][T17223] Bluetooth: hci5: Frame reassembly failed (-84) [ 1895.344869][T20072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1896.388423][T20078] fuse: Unknown parameter '' [ 1897.349485][T19844] Bluetooth: hci5: command 0x1003 tx timeout [ 1897.375042][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1897.548081][T20077] syz.8.3689 (20077): drop_caches: 2 [ 1898.255742][T20094] o2cb: This node has not been configured. [ 1898.323337][T20094] o2cb: Cluster check failed. Fix errors before retrying. [ 1898.362659][T20094] (syz.2.3694,20094,0):user_dlm_register:674 ERROR: status = -22 [ 1898.415429][T20094] (syz.2.3694,20094,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1899.601603][T20103] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1899.648044][T20103] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1899.672648][T20103] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1899.778692][T20103] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1899.815715][T20110] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3697'. [ 1900.006187][T20108] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1900.014343][T20108] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1900.023500][T20108] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1900.040193][T20108] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1902.508149][ T30] audit: type=1326 audit(1754149209.693:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20116 comm="syz.5.3700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13d6b8eb69 code=0x0 [ 1903.567687][T20134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1906.511006][T20158] netlink: 'syz.7.3712': attribute type 20 has an invalid length. [ 1906.530622][T20158] dvmrp17: entered allmulticast mode [ 1907.571576][T20177] overlayfs: overlapping lowerdir path [ 1908.161663][T20178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1908.548377][T20184] blk_print_req_error: 6 callbacks suppressed [ 1908.549730][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.566356][T20184] buffer_io_error: 6 callbacks suppressed [ 1908.566492][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.582569][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.592398][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.602745][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.612390][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.624586][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.635182][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.649791][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.680097][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.690516][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.700606][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.710576][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.720261][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.730383][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.742175][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.751311][T20184] ldm_validate_partition_table(): Disk read failed. [ 1908.760098][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.770335][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.806119][T20184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1908.815925][T20184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1908.835542][T20184] Dev nbd0: unable to read RDB block 0 [ 1908.901119][T20184] nbd0: unable to read partition table [ 1909.133141][ T30] audit: type=1326 audit(1754149216.313:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20181 comm="syz.0.3715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f0578eb69 code=0x0 [ 1909.720219][T20184] ldm_validate_partition_table(): Disk read failed. [ 1909.727973][T20184] Dev nbd0: unable to read RDB block 0 [ 1909.734470][T20184] nbd0: unable to read partition table [ 1909.750640][T20184] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1911.519955][T20216] delete_channel: no stack [ 1912.266665][T20211] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1912.273301][T20211] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1912.287475][T20216] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1912.380809][T20211] vhci_hcd vhci_hcd.0: Device attached [ 1912.508665][T20212] vhci_hcd: connection closed [ 1912.594005][ T6446] vhci_hcd: stop threads [ 1912.635704][T16275] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 1912.795535][ T6446] vhci_hcd: release socket [ 1912.807232][ T6446] vhci_hcd: disconnect device [ 1913.217361][T20223] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3725'. [ 1913.227527][T20221] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3725'. [ 1914.189324][T20237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3728'. [ 1915.125800][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3731'. [ 1916.195062][T20239] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1916.619757][ T5835] Bluetooth: hci4: link tx timeout [ 1916.628132][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1916.930942][T20248] o2cb: This node has not been configured. [ 1916.937801][T20248] o2cb: Cluster check failed. Fix errors before retrying. [ 1916.949880][T20248] (syz.7.3733,20248,0):user_dlm_register:674 ERROR: status = -22 [ 1916.962354][T20248] (syz.7.3733,20248,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1919.292087][T16275] vhci_hcd: vhci_device speed not set [ 1919.309149][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 1919.820054][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.826817][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1923.077073][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3740'. [ 1925.053723][T20279] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1925.060333][T20279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1925.155080][T20279] vhci_hcd vhci_hcd.0: Device attached [ 1925.257508][T20282] vhci_hcd: connection closed [ 1925.258030][ T3498] vhci_hcd: stop threads [ 1925.282918][ T3498] vhci_hcd: release socket [ 1925.308613][ T3498] vhci_hcd: disconnect device [ 1925.365417][T20024] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 1925.373487][T20024] usb 37-1: enqueue for inactive port 0 [ 1925.445763][T20024] vhci_hcd: vhci_device speed not set [ 1926.348622][T16275] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1927.267475][T16275] usb 3-1: Using ep0 maxpacket: 8 [ 1927.291094][T16275] usb 3-1: config 162 has an invalid interface number: 3 but max is 0 [ 1927.314730][T16275] usb 3-1: config 162 has no interface number 0 [ 1927.333678][T16275] usb 3-1: config 162 interface 3 has no altsetting 0 [ 1927.373664][T16275] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1927.388431][T16275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.401459][T16275] usb 3-1: Product: syz [ 1927.406232][T16275] usb 3-1: Manufacturer: syz [ 1927.411692][T16275] usb 3-1: SerialNumber: syz [ 1927.657050][T20300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3746'. [ 1927.798071][T16275] usb 3-1: USB disconnect, device number 49 [ 1931.609978][T20333] delete_channel: no stack [ 1931.741462][T20334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1932.403400][T20333] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 1932.450235][T20333] comedi comedi0: c6xdigio: I/O port conflict (0x8001,3) [ 1932.457441][T20333] ================================================================== [ 1932.465598][T20333] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 1932.473713][T20333] Read of size 8 at addr ffff888067512a30 by task syz.2.3753/20333 [ 1932.481735][T20333] [ 1932.484107][T20333] CPU: 1 UID: 0 PID: 20333 Comm: syz.2.3753 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1932.484140][T20333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1932.484157][T20333] Call Trace: [ 1932.484170][T20333] [ 1932.484184][T20333] dump_stack_lvl+0x189/0x250 [ 1932.484217][T20333] ? __virt_addr_valid+0x1c8/0x5c0 [ 1932.484247][T20333] ? rcu_is_watching+0x15/0xb0 [ 1932.484272][T20333] ? __kasan_check_byte+0x12/0x40 [ 1932.484298][T20333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1932.484325][T20333] ? rcu_is_watching+0x15/0xb0 [ 1932.484351][T20333] ? lock_release+0x4b/0x3e0 [ 1932.484377][T20333] ? __virt_addr_valid+0x1c8/0x5c0 [ 1932.484407][T20333] ? __virt_addr_valid+0x4a5/0x5c0 [ 1932.484438][T20333] print_report+0xca/0x240 [ 1932.484474][T20333] ? sysfs_remove_file_ns+0x3d/0x70 [ 1932.484497][T20333] kasan_report+0x118/0x150 [ 1932.484523][T20333] ? sysfs_remove_file_ns+0x3d/0x70 [ 1932.484553][T20333] sysfs_remove_file_ns+0x3d/0x70 [ 1932.484578][T20333] bus_remove_driver+0x198/0x2f0 [ 1932.484610][T20333] comedi_device_detach+0x134/0x720 [ 1932.484639][T20333] ? comedi_request_region+0x16c/0x180 [ 1932.484672][T20333] comedi_device_attach+0x568/0x670 [ 1932.484706][T20333] comedi_unlocked_ioctl+0x686/0xfc0 [ 1932.484734][T20333] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1932.484775][T20333] ? __pfx_smack_log+0x10/0x10 [ 1932.484807][T20333] ? smk_access+0x14c/0x4e0 [ 1932.484853][T20333] ? smk_tskacc+0x2fc/0x370 [ 1932.484889][T20333] ? smack_file_ioctl+0x24a/0x340 [ 1932.484912][T20333] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1932.484941][T20333] ? __fget_files+0x2a/0x420 [ 1932.484968][T20333] ? __fget_files+0x3a0/0x420 [ 1932.484993][T20333] ? __fget_files+0x2a/0x420 [ 1932.485021][T20333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1932.485048][T20333] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1932.485071][T20333] __se_sys_ioctl+0xfc/0x170 [ 1932.485107][T20333] do_syscall_64+0xfa/0x3b0 [ 1932.485134][T20333] ? lockdep_hardirqs_on+0x9c/0x150 [ 1932.485159][T20333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.485183][T20333] ? clear_bhb_loop+0x60/0xb0 [ 1932.485209][T20333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.485234][T20333] RIP: 0033:0x7f36a118eb69 [ 1932.485256][T20333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1932.485296][T20333] RSP: 002b:00007f369eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1932.485319][T20333] RAX: ffffffffffffffda RBX: 00007f36a13b6160 RCX: 00007f36a118eb69 [ 1932.485337][T20333] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 000000000000000d [ 1932.485354][T20333] RBP: 00007f36a1211df1 R08: 0000000000000000 R09: 0000000000000000 [ 1932.485381][T20333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1932.485397][T20333] R13: 0000000000000000 R14: 00007f36a13b6160 R15: 00007ffe1e144a28 [ 1932.485431][T20333] [ 1932.485441][T20333] [ 1932.771731][T20333] Allocated by task 20205: [ 1932.776177][T20333] kasan_save_track+0x3e/0x80 [ 1932.780914][T20333] __kasan_kmalloc+0x93/0xb0 [ 1932.785547][T20333] __kmalloc_cache_noprof+0x230/0x3d0 [ 1932.790962][T20333] tunnel_key_init_net+0x65/0x190 [ 1932.796026][T20333] ops_init+0x35c/0x5c0 [ 1932.800225][T20333] setup_net+0x219/0x4b0 [ 1932.804506][T20333] copy_net_ns+0x31b/0x4d0 [ 1932.808967][T20333] create_new_namespaces+0x3f3/0x720 [ 1932.814297][T20333] copy_namespaces+0x438/0x4b0 [ 1932.819289][T20333] copy_process+0x1700/0x3b80 [ 1932.824051][T20333] kernel_clone+0x224/0x7f0 [ 1932.828604][T20333] __x64_sys_clone+0x18b/0x1e0 [ 1932.833421][T20333] do_syscall_64+0xfa/0x3b0 [ 1932.837980][T20333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.843919][T20333] [ 1932.846282][T20333] Freed by task 20205: [ 1932.850387][T20333] kasan_save_track+0x3e/0x80 [ 1932.855123][T20333] kasan_save_free_info+0x46/0x50 [ 1932.860203][T20333] __kasan_slab_free+0x62/0x70 [ 1932.865058][T20333] kfree+0x18e/0x440 [ 1932.869015][T20333] tunnel_key_exit_net+0xba/0x110 [ 1932.874084][T20333] ops_undo_list+0x522/0x990 [ 1932.878725][T20333] setup_net+0x3e2/0x4b0 [ 1932.883015][T20333] copy_net_ns+0x31b/0x4d0 [ 1932.887561][T20333] create_new_namespaces+0x3f3/0x720 [ 1932.893254][T20333] copy_namespaces+0x438/0x4b0 [ 1932.898149][T20333] copy_process+0x1700/0x3b80 [ 1932.902869][T20333] kernel_clone+0x224/0x7f0 [ 1932.907418][T20333] __x64_sys_clone+0x18b/0x1e0 [ 1932.912233][T20333] do_syscall_64+0xfa/0x3b0 [ 1932.916785][T20333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.922727][T20333] [ 1932.925091][T20333] The buggy address belongs to the object at ffff888067512a00 [ 1932.925091][T20333] which belongs to the cache kmalloc-256 of size 256 [ 1932.939273][T20333] The buggy address is located 48 bytes inside of [ 1932.939273][T20333] freed 256-byte region [ffff888067512a00, ffff888067512b00) [ 1932.953123][T20333] [ 1932.955506][T20333] The buggy address belongs to the physical page: [ 1932.961992][T20333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67512 [ 1932.970792][T20333] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1932.979328][T20333] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1932.987257][T20333] page_type: f5(slab) [ 1932.991276][T20333] raw: 00fff00000000040 ffff88801a441b40 ffffea0000ac4300 dead000000000003 [ 1932.999897][T20333] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1933.008556][T20333] head: 00fff00000000040 ffff88801a441b40 ffffea0000ac4300 dead000000000003 [ 1933.017271][T20333] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1933.026074][T20333] head: 00fff00000000001 ffffea00019d4481 00000000ffffffff 00000000ffffffff [ 1933.034787][T20333] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1933.043497][T20333] page dumped because: kasan: bad access detected [ 1933.049949][T20333] page_owner tracks the page as allocated [ 1933.055710][T20333] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12278, tgid 12276 (syz.5.1628), ts 859447717985, free_ts 858601520282 [ 1933.077911][T20333] post_alloc_hook+0x240/0x2a0 [ 1933.082721][T20333] get_page_from_freelist+0x21d5/0x22b0 [ 1933.088313][T20333] __alloc_frozen_pages_noprof+0x181/0x370 [ 1933.094172][T20333] alloc_pages_mpol+0x232/0x4a0 [ 1933.099057][T20333] allocate_slab+0x8a/0x3b0 [ 1933.103599][T20333] ___slab_alloc+0xbfc/0x1480 [ 1933.108313][T20333] __kmalloc_cache_noprof+0x296/0x3d0 [ 1933.113723][T20333] nbd_alloc_and_init_config+0x88/0x260 [ 1933.119313][T20333] nbd_open+0x430/0x5d0 [ 1933.123507][T20333] blkdev_get_whole+0x98/0x510 [ 1933.128316][T20333] bdev_open+0x31e/0xd30 [ 1933.132598][T20333] blkdev_open+0x3a8/0x510 [ 1933.137063][T20333] do_dentry_open+0xdf0/0x1970 [ 1933.141869][T20333] vfs_open+0x3b/0x340 [ 1933.145992][T20333] path_openat+0x2ee5/0x3830 [ 1933.150640][T20333] do_filp_open+0x1fa/0x410 [ 1933.155190][T20333] page last free pid 12271 tgid 12271 stack trace: [ 1933.161723][T20333] __free_frozen_pages+0xc65/0xe60 [ 1933.166875][T20333] pagetable_dtor_free+0x2d2/0x3b0 [ 1933.172114][T20333] __mmdrop+0xb5/0x460 [ 1933.176218][T20333] exit_mm+0x1da/0x2c0 [ 1933.180331][T20333] do_exit+0x648/0x22e0 [ 1933.184525][T20333] do_group_exit+0x21c/0x2d0 [ 1933.189159][T20333] __x64_sys_exit_group+0x3f/0x40 [ 1933.194233][T20333] x64_sys_call+0x21ba/0x21c0 [ 1933.198982][T20333] do_syscall_64+0xfa/0x3b0 [ 1933.203538][T20333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.209565][T20333] [ 1933.212001][T20333] Memory state around the buggy address: [ 1933.218219][T20333] ffff888067512900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1933.226330][T20333] ffff888067512980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1933.234429][T20333] >ffff888067512a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1933.242530][T20333] ^ [ 1933.248197][T20333] ffff888067512a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1933.256298][T20333] ffff888067512b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1933.264441][T20333] ================================================================== [ 1933.366382][T20333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1933.373768][T20333] CPU: 1 UID: 0 PID: 20333 Comm: syz.2.3753 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1933.383818][T20333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1933.393916][T20333] Call Trace: [ 1933.397280][T20333] [ 1933.400247][T20333] dump_stack_lvl+0x99/0x250 [ 1933.404886][T20333] ? __asan_memcpy+0x40/0x70 [ 1933.409535][T20333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1933.414778][T20333] ? __pfx__printk+0x10/0x10 [ 1933.419430][T20333] panic+0x2db/0x790 [ 1933.423370][T20333] ? __pfx_preempt_schedule+0x10/0x10 [ 1933.428912][T20333] ? __pfx_panic+0x10/0x10 [ 1933.433386][T20333] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1933.439346][T20333] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1933.445735][T20333] ? sysfs_remove_file_ns+0x3d/0x70 [ 1933.450976][T20333] check_panic_on_warn+0x89/0xb0 [ 1933.455968][T20333] ? sysfs_remove_file_ns+0x3d/0x70 [ 1933.461218][T20333] end_report+0x78/0x160 [ 1933.465516][T20333] kasan_report+0x129/0x150 [ 1933.470064][T20333] ? sysfs_remove_file_ns+0x3d/0x70 [ 1933.475342][T20333] sysfs_remove_file_ns+0x3d/0x70 [ 1933.480417][T20333] bus_remove_driver+0x198/0x2f0 [ 1933.485439][T20333] comedi_device_detach+0x134/0x720 [ 1933.490805][T20333] ? comedi_request_region+0x16c/0x180 [ 1933.496318][T20333] comedi_device_attach+0x568/0x670 [ 1933.501572][T20333] comedi_unlocked_ioctl+0x686/0xfc0 [ 1933.506910][T20333] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1933.512857][T20333] ? __pfx_smack_log+0x10/0x10 [ 1933.517680][T20333] ? smk_access+0x14c/0x4e0 [ 1933.522410][T20333] ? smk_tskacc+0x2fc/0x370 [ 1933.527002][T20333] ? smack_file_ioctl+0x24a/0x340 [ 1933.532109][T20333] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1933.537552][T20333] ? __fget_files+0x2a/0x420 [ 1933.542194][T20333] ? __fget_files+0x3a0/0x420 [ 1933.546915][T20333] ? __fget_files+0x2a/0x420 [ 1933.551588][T20333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1933.556580][T20333] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1933.562436][T20333] __se_sys_ioctl+0xfc/0x170 [ 1933.567085][T20333] do_syscall_64+0xfa/0x3b0 [ 1933.571679][T20333] ? lockdep_hardirqs_on+0x9c/0x150 [ 1933.576939][T20333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.583064][T20333] ? clear_bhb_loop+0x60/0xb0 [ 1933.587827][T20333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.593770][T20333] RIP: 0033:0x7f36a118eb69 [ 1933.598258][T20333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1933.618018][T20333] RSP: 002b:00007f369eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1933.626488][T20333] RAX: ffffffffffffffda RBX: 00007f36a13b6160 RCX: 00007f36a118eb69 [ 1933.634502][T20333] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 000000000000000d [ 1933.642521][T20333] RBP: 00007f36a1211df1 R08: 0000000000000000 R09: 0000000000000000 [ 1933.650558][T20333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1933.658571][T20333] R13: 0000000000000000 R14: 00007f36a13b6160 R15: 00007ffe1e144a28 [ 1933.666683][T20333] [ 1933.669899][T20333] Kernel Offset: disabled [ 1933.674236][T20333] Rebooting in 86400 seconds..