last executing test programs: 14m50.355019522s ago: executing program 32 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0xfffffffffffffffe) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x1000ffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x800, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x58, 0x0, 0x0, 0x8000, 0x3, 0xc8, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x9b1, 0x0, 0x1e], [0x88000001, 0x0, 0x4, 0x29e59dd5, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfc2a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {0x5, 0x1, 0xd06}, 0x34, [0xa, 0x2, 0x7, 0x20, 0x2000, 0x9, 0x3, 0x5, 0x5, 0x7fffffff, 0x4, 0x7, 0x1, 0x5, 0x0, 0xfffffffd, 0x2, 0x932, 0x84, 0xe, 0xb9e5, 0x6, 0x0, 0xfffffc8a, 0xc, 0x400, 0x8, 0x10, 0x2, 0x8001, 0xfffffff8, 0x7e, 0xe, 0xb, 0x3, 0x4, 0x400, 0x8, 0xe0, 0x1fb, 0x4, 0x1000, 0x10001, 0x5, 0x6, 0x4, 0x2bcc, 0x5, 0x6, 0x7, 0x0, 0x9, 0xd16, 0x8f802, 0xa84, 0x7f, 0x7, 0xfff, 0x5, 0xf09, 0x3, 0x4, 0x7, 0x7], [0x3, 0x6, 0x5, 0x6de8, 0x9, 0x9, 0x3, 0x1, 0x0, 0x1, 0x8, 0x81, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x205, 0x2434b750, 0x1, 0x100, 0xeada, 0x4, 0xfffff0a6, 0x2ea0, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x7, 0x7, 0x7, 0x2088, 0x3, 0x6, 0x7fffffff, 0x8, 0x7, 0x9, 0x0, 0x9, 0x9, 0x4, 0x0, 0x6, 0x5, 0x100, 0xf796, 0x0, 0x8, 0x60, 0xffffffff, 0xbd, 0x0, 0x5, 0x5, 0xe0000000, 0x8a55, 0xffff8001, 0x3, 0x4000, 0x800], [0xd7f7, 0x9, 0x8, 0x4, 0xc3b5, 0x9, 0xffffff00, 0x6, 0x58, 0xc85, 0x7, 0x0, 0xe, 0x2, 0xfffffff0, 0x5, 0x3800000, 0x9, 0x3, 0x6, 0x5, 0x9c, 0x3d, 0xd7, 0x7, 0xfff, 0x9, 0x1000, 0x7, 0x7, 0x3b0, 0x3, 0x10, 0x0, 0x200, 0x6, 0x6, 0xd, 0x401, 0x4, 0x0, 0x81, 0xd, 0x7fffffff, 0xa, 0x1, 0x3, 0x2, 0x4, 0xffff, 0x7d, 0xb, 0x7, 0x4810759c, 0x3, 0xb, 0xb, 0x2a, 0xf1, 0xfffffff8, 0x2, 0x9, 0x1, 0x101], [0x3, 0x6, 0x7, 0x4, 0x1, 0x7, 0xff, 0x6, 0x7, 0x2, 0x28, 0x5, 0x2, 0x10000000, 0x8001, 0x7, 0x5, 0xc, 0x17fa1a84, 0x7, 0x6, 0x7, 0x7fffffff, 0x7fff, 0x5, 0xffffffff, 0x5, 0x3, 0x9, 0x35, 0x200, 0x3, 0x80000000, 0x4, 0x80000001, 0x1, 0x8, 0x0, 0x0, 0x400, 0x7ff, 0x2, 0x2, 0x2, 0x3, 0x81, 0x4, 0x5, 0xffffffff, 0x1, 0x8, 0xb, 0x1, 0x0, 0x9, 0x4, 0x8001, 0x2, 0x8000, 0x1002, 0x6, 0x10, 0x2, 0x3]}, 0x45c) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 9m5.557639675s ago: executing program 5 (id=1047): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020030410600000000000010902240001000000000904"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001140)={0x7, 0x5, 0xfffd}) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001701000003000000010000800000000018000000000000001701"], 0x30}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x44702, 0xcf}, 0x18) r6 = syz_open_dev$video(&(0x7f0000000cc0), 0x2, 0x501100) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000d00)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80)={0x0}, &(0x7f0000000dc0)=0xc) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r11) r12 = getgid() r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r13, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001100)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001000)={0xd0, r14, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd39}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)="f86ab4fced62fc2862622ac5598adb308b298ab8a121e8140ee9b2fd4a9338c14aa559e64845bc6ca8af5c382969d9593d8eb4d9fc02d61bfb316f0b1e5251345a6c35abb985b7024628ade123f8eeae324966b6ee269fb148532cc0e73a99e95ddd5017c6774df2c3cdc221467f7ce94bb1db31004969788ca1d0eded0efcea38863733de3a851b3f028fa823a090567a14b5c7f786a53df0a9c38262d262dd4c733fc9f951efea9227a9653db75812ac7b1933746eb12fef6dde582588ae98f2a0e8f74ff1a9ebbd10c5076b42", 0xce}, {&(0x7f0000000280)="1754aff73ea5422558a0d70c570e97764701bb2a90afb095a09d0e46a4c4e3bcb594737cc487ccb36f60ef56cdbe3ce22a696a533c37700b8a189b6f6671906fd48f62637f2690f897ed55e3d95bedff6b597b869c799302b7954a5d511b5d9ba057aff1b3660eb2f201b7271ef3ed02d7c047fd6b5338b34ebffe060194", 0x7e}, {&(0x7f0000000340)="49679280b771e5c1c51971e9680a101a48475b4f5759ebc54d6c71d88d9253768f3c9c6995b6ed0643b115de7ddc229ec4fb5e5176bfc92f2244f21b8b334a4d3ab9511ffcddc8351946539e798afd53f03b95711d7372ebbdfeb7137a810c938d4d197139677078b23038ed38e075d46382a459af41968e66edbcb1a00c20894c3b7d823ad44055b40fbe7bf2b58d5211913eb7cb49a7f8311ca72deb057323b08140db2439f151b78f6fbd165d540ac1434aa996e285306a15798efc41f2cb6e7f5cd757c7dc838367bcc73bc57e0ba642a0c39c0f3f84b1d9915951e25f96d218ad8fecfab75e31a5b6d775522cc73e8194f221cee0f23ff549", 0xfb}, {&(0x7f0000000440)="5a6d2800ad46a7136017c615a280d08c0617f737ca8fa81ad3", 0x19}, {&(0x7f00000004c0)="a34c19f3339ad3e968436365429dc297", 0x10}, {&(0x7f0000000500)="38ba6ad678c0fd356c71f0383b4097444fe6a07ff9f43f0821420576173c3e424cacd3630adf62342365c79faba53950fcd75e5dab54c56763fd35329af8b0b4d68391500563cc0ed13be3677c53fbb89cd89358bc2b76029e7ad6cffed7b04fd26cca421a0818e3f5bbf26a7a94ee090a3778b3ecaad330c6b6609bb7f446c7cfc2d86e3e35b2fcd8854f6489909d2826efe2dac2bd7006c215d7a18beea9b526b9dcd2ba9d804605c168e05bbe31a0f0c8296051fda85d40829b546c784a7bba3107c13bba461cbed43e41e295c308f8ab43c3d77c3de4b7b29e78b2367c1410406195795bb6f01fa0b1c1656af8", 0xef}, {&(0x7f0000000600)="5f8d165985e2d6661dd8e81fe91b0835788f5c4d8be8678730", 0x19}, {&(0x7f0000000640)="8b0edc3a922b1e752c516e20c0af3641422be0b2e1e9e78b74f7790703cb8f8826a64c5dc61bab652eba8e0e2b150c1d7dc6e34f4dee9a48bd5a1e510378e3afd72d91f922554c63b442cd9b6a05ab6e6f87ebe626cd120d4a72e067afef15527629d9cfc0", 0x65}, {&(0x7f00000006c0)="7a355768a7b06932a7688a16cb0601061b0d97362f13cbefe27ea745963cf0e28e613d6f14b65145413e3447782e163f40abda026a8cb14a6a9b6bb30cee64f9554c8fadb99afc02eb1da564ebdae292d8cc9732d352e3dc3560d90f3cc8048664ddfe4405a9565c24c049eb77b242345394ac943621df6efeb7d98e4b07d81a1e53005f25639bf7c44ae199af31a6c3e972dc8ec44e7e9ef75e", 0x9a}], 0x9, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="240000000000000001000000010000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="00edb4fe19672d8967cd1e8e00000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x50, 0x4000040}}, {{&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b80)="330f59f90e0ef38bf67ff83da9930e9527d14c16aa59f75204091bc9ec9da8700d7c4a7a27ee0f439b0741746e0ae7886e93714f754dab36498f73b8b16d4f52fae0209cc9de2fc99b73acc6331471d26967f48ed70ec019218cd00e454c78e3aa36b2248ee20054ffbdfb072582ff79d4eac33d95b343a5ff2245d5a0e7bbda8b730bc8f074d871b134b4b0328167d654970c202519dfa0c35ad5b20a997b29a94b4ab9ee6e5d8c18bfac7704fad47a33b992275adc79b05e15181410e70c7a258fd87ea5c5fefaa5f0d0ce033c830cea3d19fee5dc93071bb85bc8cac60dfc29f3c1", 0xe3}], 0x1, &(0x7f0000000e00)=[@rights={{0x1c, 0x1, 0x1, [r1, r6, r0]}}, @rights={{0x24, 0x1, 0x1, [r7, r1, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xa0, 0x40004}}], 0x3, 0x4004) 9m1.202727633s ago: executing program 5 (id=1059): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x5, 0xa, 0x195, 0x27904000, 0x5089d9c, 0x14, 0x1, 0x7, 0x3}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = userfaultfd(0x801) dup2(0xffffffffffffffff, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x32}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) 9m0.318875104s ago: executing program 5 (id=1064): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xab, 0x81, 0x0, 0x6, 0xebef, 0x7, "18da3e1aa7a1f222905909a01eb612bf580a6951a73ee98c8ef1546bea1bf0031d6e4b686f441922d76813542f1ceb04ccabc408e022efbd5d0f15056250bae1b0aa7ebfe1e3a31d5b9260d3368fec4ae0a173e89b845cdebc388e99c0f446081f40517b31c5bf8f4da7af9c060364dbd7097e782f8d09392039d8dbf19ea7eb0fcb41eac7896ea78f4262c097fcb5f3e50fd580cf46e16657b782b513d455b24565bea08c5c193aa5375d"}}, 0x1c3) 8m59.873574754s ago: executing program 5 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x84, &(0x7f0000001300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x4e, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xfffc, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0xe, 0x800]}, {}, {0xa888, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x67ce626eb9b39ab3, 0x4008072, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', r1, &(0x7f0000000580)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f00000005c0)='./file0\x00', 0x1000, &(0x7f0000000680)={0x0, 0xa, 0x80000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000060c0)=[{{&(0x7f0000000000)=@caif, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/4096, 0xfffffffffffffe62}, {&(0x7f0000006200)=""/4111, 0x100f}, {&(0x7f0000002300)=""/177, 0xb1}], 0x3, &(0x7f00000023c0)=""/85, 0x55}, 0x5bc}, {{&(0x7f0000002440)=@un=@abs, 0x80, &(0x7f00000001c0)=[{&(0x7f00000024c0)=""/214, 0xd6}, {&(0x7f00000025c0)=""/233, 0xe9}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000026c0)=""/65, 0x41}], 0x1, &(0x7f0000002740)=""/132, 0x84}, 0x4}, {{&(0x7f0000002800)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/19, 0x13}, {&(0x7f00000028c0)=""/21, 0x15}, {&(0x7f0000002900)=""/61, 0x3d}, {&(0x7f0000002940)}], 0x4, &(0x7f00000029c0)=""/153, 0x99}}, {{&(0x7f0000002a80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000002b00)=""/116, 0x74}, {&(0x7f0000002b80)=""/170, 0xaa}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/164, 0xa4}, {&(0x7f0000003d00)=""/34, 0x22}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/229, 0xe5}, {&(0x7f0000005e40)=""/181, 0xb5}], 0x9, &(0x7f0000005fc0)=""/232, 0xe8}, 0x4}], 0x5, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fd}, 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x401}, 0x14}}, 0x0) 8m58.726325934s ago: executing program 5 (id=1069): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x103000, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0x5bdc, 0x10, 0x2, 0x1}, &(0x7f0000000040)=0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='rxrpc_client\x00', r3}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r10, 0x4080aea2, &(0x7f0000000040)={[], 0x0, 0xf864c314378f83e5}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) r11 = socket(0x10, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r12 = socket$kcm(0x21, 0x2, 0x2) r13 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x4, 0x400) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r13) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x6, 0x6, {{0x43, 0x4, 0x2, 0x5, 0x10c, 0x66, 0x0, 0x63, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x89, 0x1, 0x1, [{@private=0xa010102, 0xfff}, {@broadcast, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc79d}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@empty, 0x6c89}]}, @lsrr={0x83, 0x1f, 0x92, [@local, @local, @loopback, @initdev={0xac, 0x1e, 0x6, 0x0}, @rand_addr=0x64010102, @private=0xa010101, @local]}, @end, @cipso={0x86, 0x1a, 0x0, [{0x1, 0x3, '\\'}, {0x5, 0x2}, {0x6, 0xf, "b658206e58be2d8898ceebeeeb"}]}, @cipso={0x86, 0x4a, 0x2, [{0x6, 0x8, "47ccb30f53e7"}, {0x0, 0xa, "5b12e55dacba0508"}, {0x1, 0x8, "93716b7c1672"}, {0x5, 0x9, "5506c9686f0f84"}, {0x1, 0xb, "08cd06ff2c00bf1026"}, {0x5, 0x2}, {0x5, 0x8, "5194fc5d8d15"}, {0x2, 0xc, "dddde1677a6eefab053a"}]}, @end, @end, @timestamp_prespec={0x44, 0x34, 0xa6, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4bb}, {@dev={0xac, 0x14, 0x14, 0x40}}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}]}, @lsrr={0x83, 0xb, 0xf3, [@local, @rand_addr=0x64010100]}, @rr={0x7, 0x7, 0xa7, [@broadcast]}]}}}}}) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@ll={0x11, 0x15, r14, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x24000041) accept4(r12, 0x0, &(0x7f0000000140), 0x80c00) 8m58.191493301s ago: executing program 5 (id=1072): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) llistxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400010000100009042e00027e3a110009050202000001000009058202"], 0x0) 8m57.668482284s ago: executing program 33 (id=1072): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) llistxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400010000100009042e00027e3a110009050202000001000009058202"], 0x0) 6m28.418573922s ago: executing program 1 (id=1509): r0 = socket(0x40000000015, 0x805, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) shutdown(r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) getsockopt(r0, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) 6m27.690983964s ago: executing program 1 (id=1510): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) shutdown(0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xab, 0x81, 0x0, 0x6, 0xebef, 0x7, "18da3e1aa7a1f222905909a01eb612bf580a6951a73ee98c8ef1546bea1bf0031d6e4b686f441922d76813542f1ceb04ccabc408e022efbd5d0f15056250bae1b0aa7ebfe1e3a31d5b9260d3368fec4ae0a173e89b845cdebc388e99c0f446081f40517b31c5bf8f4da7af9c060364dbd7097e782f8d09392039d8dbf19ea7eb0fcb41eac7896ea78f4262c097fcb5f3e50fd580cf46e16657b782b513d455b24565bea08c5c193aa5375d"}}, 0x1c3) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010900000000000000000218"], 0x24}}, 0x0) 6m26.257353894s ago: executing program 1 (id=1514): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r1, @ANYBLOB="18005a80050001003020d7e000"/22], 0x34}}, 0x0) 6m25.722864573s ago: executing program 1 (id=1515): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x2000, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m24.690829974s ago: executing program 1 (id=1516): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x1000000, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2}}}], 0x20}, 0x0) 6m24.245948381s ago: executing program 1 (id=1519): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000540)='configfs\x00', 0x1) fsetxattr$security_smack_transmute(r1, &(0x7f0000000100), 0x0, 0x0, 0x3) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6ff7", @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6957608d766cfff5c3a6653d8900", 0x0, 0x0, {0x4, 0x2}, {0x7, 0xc00000}, 0x5, [0x3, 0xa, 0x7ff, 0x6, 0x0, 0x10000400, 0x401, 0x2, 0x8, 0x6, 0x6, 0x8000082, 0x10, 0xbd, 0x800000000007, 0xba]}) socket(0x1e, 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) fsetxattr$security_evm(r2, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "28a97df5b0822a440624b9485119bc95581f96aa"}, 0x15, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x20000010) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x10000, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x761c) r6 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r6, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d02"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200042, 0x0) 6m8.864777659s ago: executing program 34 (id=1519): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000540)='configfs\x00', 0x1) fsetxattr$security_smack_transmute(r1, &(0x7f0000000100), 0x0, 0x0, 0x3) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6ff7", @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"6957608d766cfff5c3a6653d8900", 0x0, 0x0, {0x4, 0x2}, {0x7, 0xc00000}, 0x5, [0x3, 0xa, 0x7ff, 0x6, 0x0, 0x10000400, 0x401, 0x2, 0x8, 0x6, 0x6, 0x8000082, 0x10, 0xbd, 0x800000000007, 0xba]}) socket(0x1e, 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) fsetxattr$security_evm(r2, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "28a97df5b0822a440624b9485119bc95581f96aa"}, 0x15, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x20000010) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x10000, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x761c) r6 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r6, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d02"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200042, 0x0) 5m15.223159993s ago: executing program 0 (id=1715): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c8d6a340ac050a038c65000000010902240001000000000904000002039d0200090509ffe700000000090503"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220a000000975d96040000007ef1d4"], 0x0}, 0x0) 5m12.42352019s ago: executing program 0 (id=1727): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000200)={0x20, 0xf, 0x19, "d1543041caea756aa20a7b2109aa1d0ba1935468830634029b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000200), 0x0, 0x0, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xe09, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5m10.331081436s ago: executing program 0 (id=1731): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) (fail_nth: 4) 5m9.288607102s ago: executing program 0 (id=1735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x64, r6, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x64}}, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x121100, 0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r5, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x5}) bind(r11, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0x5}}, 0x80) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000044d564b0000000005000000"]) 4m56.379059789s ago: executing program 0 (id=1766): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x2, &(0x7f00007ad000/0x1000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x4, "ff0f000000000000f5a72d866b0000008b00f0ffba8a3fdd0000000200"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000000180)) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0xfffffffd) writev(0xffffffffffffffff, 0x0, 0x0) 4m55.291033833s ago: executing program 0 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000d0601ffffff7f00000000000000000005000100070000000e0003006269746d2b703a69700000000500050000000000"], 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xf401, &(0x7f0000002700)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x40080) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) dup3(r5, r4, 0x0) 4m54.072154515s ago: executing program 35 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000d0601ffffff7f00000000000000000005000100070000000e0003006269746d2b703a69700000000500050000000000"], 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xf401, &(0x7f0000002700)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x40080) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) dup3(r5, r4, 0x0) 3m4.790581892s ago: executing program 3 (id=2060): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x2, 0x220341) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sync_file_range(r6, 0x0, 0x0, 0x3) sendmmsg$inet(r5, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}, {{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4000804) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x2, [{}, {}]}, 0x48) mremap(&(0x7f0000211000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000100)='udf\x00', 0x0) 3m3.599464516s ago: executing program 3 (id=2062): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b020000586500"/32, 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x67f) 3m3.234333719s ago: executing program 3 (id=2065): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x2, r1, 0x0, 0x0, 0xfcd1, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000000)={0x18, r1, 0xff, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x0) 3m0.866639685s ago: executing program 3 (id=2070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0x2, 0x80000001, 0x5, 0x9}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x4c, 0xb6, 0xe8, 0x10, 0x10c5, 0x819a, 0x9591, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x19, 0x0, 0x3}}]}}]}}]}}, 0x0) 2m56.054403548s ago: executing program 3 (id=2083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.550977179s ago: executing program 3 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7, 0x318, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0xd, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x0, 0x100000, 0x6001, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x468884590df06d7a, 0x300) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0401000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a8"], 0x104}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x19, 0x16, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4200}, {0xffffffffffffffff, 0x8012}], 0x2, &(0x7f0000000180), &(0x7f0000000200), 0x8) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r7, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7, 0x0) r8 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r9 = shmat(r8, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r9) 2m54.165208039s ago: executing program 36 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7, 0x318, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0xd, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x0, 0x100000, 0x6001, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x468884590df06d7a, 0x300) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0401000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a8"], 0x104}, 0x1, 0x0, 0x0, 0x40014}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x19, 0x16, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4200}, {0xffffffffffffffff, 0x8012}], 0x2, &(0x7f0000000180), &(0x7f0000000200), 0x8) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r7, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7, 0x0) r8 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r9 = shmat(r8, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r9) 1m0.158815644s ago: executing program 8 (id=2448): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffffffff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0xea, 0x0, 0x4}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x2b, 0x1, 0x1) r7 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x561, @remote, 0xd}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 57.331365546s ago: executing program 8 (id=2451): syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), &(0x7f0000000040)) (async) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="aa0169448de9b71e04dc67e0009b0da9a5ae67c1f6456a6735a62c0fbfd3de3749827cf0b698c397c2293aae95e48c0e26ae1fcbe7cbc516604a9dabb6601e00628a7d79b7d4e52612", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x60c742, 0xc8) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x60c742, 0xc8) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480), 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r6, r1, 0xffffffffffffffff, r6, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x20000000}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0xfffffffffffffffd, 0x3, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) (async) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0xfffffffffffffffd, 0x3, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0400000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f00004dab14140000000000000000000084200400000000000000000000000041554449540000bcb92dfff07fca0000004600f58f5dc8438b000000000000000800"/376]}, 0x1f0) 55.728598836s ago: executing program 8 (id=2456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 53.910504257s ago: executing program 8 (id=2463): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x1882, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x1882, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) syz_usb_control_io(r0, 0x0, 0x0) 48.891005103s ago: executing program 8 (id=2470): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa, 0x2}}, 0x126}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000383a00fe880000000000000000000000000001ff0200000000000000008be60000000102009078000000006098a35000000000fe800000000000000000000000000002fc010000000000"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 2) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 47.678694943s ago: executing program 8 (id=2478): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)='\b\x00', 0x2}, {&(0x7f0000000200)="968b524b3b9a", 0x6}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='1'], 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}}, 0x0) socket(0x1e, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) 47.113497869s ago: executing program 37 (id=2478): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)='\b\x00', 0x2}, {&(0x7f0000000200)="968b524b3b9a", 0x6}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='1'], 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}}, 0x0) socket(0x1e, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) 15.977404751s ago: executing program 6 (id=2571): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x101700, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="b04551a8cb00100025bd7000fcdbdf25130000000800ec00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="95004380d7dbf09ed76127e6034f513e7d19387df073b6cf390234c6ca998f561413bb2c59ed02765c41d82fc7581f24315979aa9d24e59f64db08614c8b4e339665d51f84c4c5d43c8483415432de199f9bd939f92b695d839524fea2470d920d516967c613a9e0a0626b7cfad25dbd8c6118975b0800e400", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0400be800400a380040029800000000000"], 0x3b0}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$tipc(r5, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$UHID_INPUT(r3, &(0x7f0000001940)={0x8, {"1a17924ab218eacb15a3fccf929e2dd2497903c1f853d95b995c65e99449ff953fa11c7723b2149ecdaa7f833f60e13b19a66e963f7e8da4297ebbfdda5b36fb4d01bd02e6c652dc4d99e2cb82c2a1d4a45e4c89ba9994e82f854bbc34a40b3a58aa256c9b4512fbf91b9846446c4909e4ec53982e7d7fd11ee0bdeab0bb4c469c9665dde8cb58f0ca148223b6cc4e2f306cfbeccedec8db5212f2fc4e14f836c68bdace4db1afbde9d463e5ac24567925b5fdf0e3af1a52dbd7669fe9227302c8f635bc2ddbf5bd7dccd7b92a9bd5c7363375a57851c2bc72509f2005f138f5a59cf85e9ddb1c972c89d50806e8941b7059cd3eca77527a7f20af70841b4d6f026614bdbb276a6814cc74d91856b968c5fdb52674d892a90d01ab91841b6811def78bdac9bc6f9df2598569fbdfef75079832b2750801dc83fd1987713c61136ac9e5f2f7e67f302109bb9a7fea75290b506a89a19d7e0e472937a8c9ecfe16ef6eb88c7a88a060756196d55d6a3d3f7cdf9915d22b6b3af69ec55017b821ec0621e8a59414efc2b46977a85846b53ae75a350947afcafbdef7233cc371bc2a6f29c0315b352ac2741c81df534303ddb30a4408db5679d05d245259c245c9d7f861711cc287cfd0462b948512623b921060386c587fd166df29e71ecfc8ed90031e95b2af1406b5ae73f6084e39e88194e3d37dc801982656b5b66342d74100f9f5b8c94c1e91b626bbf426a07b4be91dbdb76a6e40d0b788f89359e462e69bc4499fd4f9aa1e7f0c3f73a996b6ecef606c7651286e1f18a6823eed7191cd542057eaaf09aa32e8ce370c09050278b85fd359b8ca23e66e9d294ec57b3ddd90409d9b1ca28c6993b244f8ca46f6bf478ff22fb1df53e33abdda4b2b1e5cff7de19957bdc8e7ca39e4762204b1f9f33b9375b7282422b91841706751038e42023ba45c1cd0998c1794c1c2a5ff65466189bbb27bcbf01e5a48bfd8b6845f7d5c87d977df4ded5273ebf56b96c50b4eadc44bfaa0994259eeb1031644415fa9d729753d2138b06f9b7b624d9eeb1ef71dfdff0b639078f058c7a070451c4670af0c6eb1202f77be82faba9b6287995066b5f7e59b7967706d8d8c5bde48137e13df537ae54664fe4e8460b1bdf5b92a1dcf39ee1726bc6690d0ac5f799bcfab918c59cb132c45054ba17b8a44d505ad3eaeee95b4275b25b2087da8902552727a1e739014df348cfa3a1102661c35a6a38df6c410f5343577955dd57de5af089e3f1bcdf96d4ef1d5944243470b0ed10616144cccc5cac44e36fefd9441120c5d047867af0ea353da21fc0ae73b78b84d53a62efeb94ea8d441cc698c92fd7b36cf41472d036c5093bbdf943620c29ffa3b21ef4a0bb9274912b046834ee6f855ceadf18fb488040d5829ab6e8bf69a90315f7f84d002ac4e929e9f1010a8486746bd316799ba3a65744980c388202324ba50768c77a8481ba74d135da7507048c82714a8234837b69922126e4084a68f7418bfd26417cade786c7f8185e2492e3b64eb9d2c2c721504c7b4aeb383503f745fd69315c56b5b0158decd1b1606a63366b7e2d2b9124b6efca4480c703c8f37d6ddff55b0ec15f2ce6be6c902d06aec2ccabeba13b442b608076c33d19e690ab66cf6678d679758d22fb5d8d963f25d00c45576f8b2938543080297b9cb6c305e3131d2f412f00370c285251909f8ebefc3d18a23e25a183997b08251450b29fff32781e6a70e6e070ab3921f3f809392deb732d6f30cc034b5f77d41218bca86d515b16da0457dbf7aaefdcef9d5358e7b4f1e5d1a410f55449e765609d122f938fd57b71482244dff0523067cabfd322fc47aca1c331112e3d969f5fe3594c3c7adea7c36e9b9af6754cdea5ccf05b139f783d4b24540c50a6a9f7dff472d47c87c151d8439b5740cd1f423335dae2680050bd44766159cba66666b7dbc9e190130494327a0d8c9dbed5c8b831ce2b2bb236353ff7175a48b61a0f3209fa3db44f07a21a485ef1682a33cdf632ac2d6ca993b6cd90913e31704bb851711e1f2b5ebb19baaba102dd42d550933e9dfc17311665fef4d0206d7debbcbbd97efafffb905bf9a77b8eeb67d5f8bef8526f6f8607672bb3c50b14e16c264265594e05fa481f724290abdc9f60a899f26033236e3b90548c24288a7b627b51c4d7c638c359ec6325b0d79e1d69cf18cd9136a263b6aa84ad062b9831fc7c201b7ccec7d3b7ea2132ee4579632bf614bcde285527c36ef8a8e12651ef34a677a8d2f84360afa2f2245e4e0d61a12e8e446045fae61375082f983363795f11848edad24b3f7ae53f0eeb329fa62b6d7b446e3b2c1257981f9c0c3ea371c71021af834a285203b2e3177ddf5251044ea215c048f78701dec36a94ca3c435278d1fd889996adf5ea7c8db62f2b1331bc22c4b7798d587a5c4e619b7b576e19d92996bc0bdc0c8c15374e11b6eeda0e18b35aac4b96db9cdba025080bf5bea4ffdf4fa3c93ec5feede0a140f7f6727ef255783565935d59d348aaa6d12c060afd5f6d084346309d8cbf54b33050ecccf30ae083c4034165880214a94a5296427e2fcb6d90692a82212b6b8d86c6d163f0643944aaba4af1171aed463994f1374e1ec1654b89b04e9d635074e8d131bc2443daf1caad455671470329a287f4c711cb907403d5c05184cd3a647823b5b9c6dc4451fdde92dc1cb87010197026458b40d4809ab60aca1af6bb3702a3e0506cdd21faa6d9909f4ed74723de75fc48d44314fa3cc0c8e8ea226ec1d5875b9595aeacdff0a9f75b4a60dde781c58179f997ecb6479c91ecacc65bfe293a2d26c21ae7c1d7be1241cc1c4ea86a6cf8d93012bd98508aae8db723ff167026298cab227b7d0062c27ccc8e81df7268423ad063638760b44e77147ee9bd84140166ae2bfd592f845ca68c719f7520ae3c9988cc89db73bf93ad6f2f7d9394b2288f0176723acd167081ade4e066a26832f7b655cd874aa5026a7369bb9912c90599d1407f0488a9c540a31997890f5433bd1df91ba13a9e0721c9a707eac7cff1c3efef6cd716779c7ad631c3560caa2031d9d2591329c1867d0d5f96b5897cac2c6a381f0ce5c27969c2b3e7d188e1e896d815b01a3e177933817325953140272ad718a36ae522d43de109ba92255ee66d2a14897f2b2014dc9a495c108727e0eef54df617e269e43a0c48d28a91aaf14d58719e21ea39c1c534e39a1dfabb61377b55d2f69fe79c7d5111b8b952c388925ea8ab1503ae68bce95a34a10a85aa0e5da52add14b93eaac5861a6504e23dda8034e809253c1071ddda934663faac454cd378c5725f5c6f4d943779994357185e512a4b6993156e624f25d86d24e7254d3e9b231aa80ed5a32e108cb528d402f93e58c25ac937420ff7dcd7d9ec2126c7fe7cefa47c038f23de40523d5e026fe3bb4cfd3040f9bd9631cf5a2cde1e20a6032703cd64c2ad97ea95d05a7aa3ea3b3b9d5a86961116dd1338c0a2caae0ceab3178ac7736dfa8a949cd81d261748e6678cb730b57468fb2b7e22c5eb08ad496e76775dce0c31950a596580ad7d6c3fd9ce90dded340f20b77fe53e81fb6e2a7a6c450b8ac9009c7c077893f704457a90401fb758c0769fbfd38e40ae692e410b889bbf0b09a32dc731b6768c0fa3963a5b6279b6a5db611174339f3218fff567f6cfb7377ddc8e2c730da35cc3ec680a6bc95010dd03834caab7afb2c0023ad9ce3aae3c0fd1ece42ea840bf5fc798a0b5fbe7692f13549cdba4a0b68f722ef6877856a76fc3c39f7cfd760675a9f341d9f09f381972be9171e50455ed13e665e61a03b0c2a79276a871c25fc5c486639a71a8dfdf36174373b8995014752aba3026045be6b43074ac3824d687bbf5f6544228cea52791828f54980ee9f728534ea32edd205aaace717adcf61ce28f92719048d44b09812bcfd2d22cc9d7a45ed6b4634756f6b3189908c71728c373ea94aa5c74ce4a73c20138b8cb21db6e2dfb35329b86b1805a5208dd370b8342ca8aa3cbd3e7a3ec79d7b8ee677b04e19c524ddc6de0b22443ac15de908f61719399d0f9890ca2b0283a7db914944f424af10ba0ec9e3e253c060d7b28552eaae5eed1e906f8f93c2195293deabdad6cb38ddab51603e4a96ef1e086de911fb716ffbca467294d9e66e5d0f8225bc28d6c074c4ffba76706f61b0b386b7e4b6500a15fad291f34f6c84f1596a97512f31196a529a7a5725437c038e17d531da3838c8aef3bade6bc1d4c7624560d4fba72e5f8be2c5dc905e1e4bcb2aa7eddb275408ef4288ac69c7a18ae58fb26c2f5a6964f051b81d2e426fc2a5d8617050341b96d5a746e3419fbe94bd3752403868b655c2dba6f48ef109a2e6ec0041842fae52bfab70481ecfe8d27f3d5e444f1b941d871c8057cbe35df68665bc3aadea02d203b106d1179a428daa7d9fea9dbddd8955bb289a92ec790de74cd6a1edf925ab85471633dedf8ba46abe456963a2381addce2aa16c06dd80bb54d8e53d7c82607916af175061da29122afde8687add6b6f42233b76a1164893dcc1ec3dcf935576d2d0f3ab3b1adbace086da915234b4f9bad0afc2915608fc4f6611dc3b91d7e0e48cb0a0f3fdc70ef70ef82043afbd3325f0f6186390ab28ca9f0009184637530d79f0c5a77c6e912afbe6533988f543fc6c02d3d44fbdb0e2ebfad2680184f1ed451991667df958a71fb41cf4367bdb931389ea8b6340e225b312a09dadd8e2ac2d200db6e75323d48c73c6b819e13f92b01bf405e796a2e10b863e773598abcbcc196987e18b19530337809b56480778207103a12acfff1c0ad62846088251a1a0d0d6b300059a99698c84ccac78d53eb32e3984001978db7679960b4d75d71b49696909826c66320526fe02a060265821d15b8b2337121a201402a118ec03ff0d4f3dfa48f2dadd20b510ecdf4e6440b5b2466b9bf28e32327189f0405245694a6371dbe4eae7a8293cdc15193c284123d64690120634f808096a8f3f7a04a5bac9dd86c09f2e4e87c7d7c98d0b370e84ea5f265730f5480eb1375d4f82c7d4efbb6e58c5a92848331b2becd2531f6c456b5d0e690b102dd8faec55bde56f95727f4abf52c58543faaeb9cefd39bba788bd7e2b02b27ecbc1679a1ac00823c83e1ae29690cd25544d3ae0a8db25e963e9fb5bd94987637ac3546b9b312bf04d5c6211c135e806525d423fde9ccb5ef7962ec1e056e6f29adaeebb331f6c234586d1fe21577f56d620c6942a29d4915772144cc60008d1236db21100d5a3112c29396b9e18cdb5b104bed2df2b6ea72c9aa03bb6082f3eb07f0eae359864967a749492d21005b0d39c9613c20b1e21700ab66a4f5ca03ec08d67b95f759252d758743820ba243032e1708447fbaebc27e1316af4cf547cef3ac4966a1f04dd07012f257a0204107c23a0046b12493d9784b24dc561c1f88e591056bcc3b338ab1de65e5ad578021f26f93e9b12f00b5f8c8ae2db6b7b8f254303c7ff06514735974e65fb9a93dc79b115a12310040490ca11ef315340af104e20a2e22dcd132f7d7a61d9d3a12e832ee048a2170dbe03d747ed7402180eb964fde0ecb77e778b18a4e5a83479bb7e0ea0a7d5145ffed4607bd7e6b8f961625d5e3dcac2d4a05e71dc9c2e52195bd55aed4e6749dc1c329e2cda966d18e9bf882c05db627c1047fc71533bbba2c8a83d04db5bad6da349a9ad1992eb88e0274d32a16137e2396ad973c0ecbbc2d243e68b6959bf9b", 0x1000}}, 0x1006) 15.46421026s ago: executing program 4 (id=2576): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @mcast2, 0x400004}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, @in6={0xa, 0x4e20, 0xfff, @private1, 0x8}, @in6={0xa, 0x4e21, 0xfffffe01, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x54a0}], 0x64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r5, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(r5, &(0x7f0000000000)=@unspec, 0xc) 14.680652508s ago: executing program 6 (id=2577): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r5 = socket$inet(0x2, 0xa, 0x0) bind$inet(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r6, 0x8955, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x100000000008) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x26}}) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 12.499175811s ago: executing program 4 (id=2580): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x9, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) fsync(r4) 10.771751788s ago: executing program 4 (id=2583): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffc, 0x80, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) unshare(0x400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r3}, 0x10) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r4}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="f7fa83c1eb9696f043dff52d5287ad5450740573315b7cfd671d7abcef4c09598a1bd1c4c5ba45879056aec4d7eb10507e32e74a20e639cf815cc3a5e7002defd75b8e946b347cc8768bcebbda07d3d6c1957942c0298f3e5acbfb41d025beb40f14aad761a2494a492d5b310ca91f37a51a65d32b8858ea8d343153acb2890d3f9fc3547cfd4d4e21d5c2da278847b9af7c5b123ded1637", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.602668653s ago: executing program 6 (id=2587): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "a9d636bef82632b31e18ff9f8b7e638bf8e00ff1d190a702dd4d5ebbc021b4615546e09e921a24a953994a0f64adb6d75210f1d0699c764fedf10b05b2d4fe98", 0x34}, 0x48, 0xfffffffffffffff9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948000000a1a93c5240f45f819e01177d1afa8011992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x35) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x800, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r6, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 7.071793978s ago: executing program 6 (id=2592): r0 = open$dir(&(0x7f00000001c0)='./cgroup\x00', 0x2000, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}, @NFT_MSG_DELRULE={0x134, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x2c, 0x7, 0x1, 0x0, "3d71b32682bb15897c01d4fa66a8175e9872e4cc0d9b3832de08e08e24df369ec0a31c82067f6a31"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x46, 0x7, 0x1, 0x0, "5c890b690e2214dac90362bb4f8e989a74bdc1985458a1e6868adb9ac469290098443d437b475c9c2a18de6b34f9e8558b70644604cadd65d58ce8b25f35723200cf"}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_USERDATA={0x44, 0x7, 0x1, 0x0, "bef2077827d68611293f798db07a28cc2c1202c7e2d73fcc3d77ee08e72db9248d17c4cb04a4ef18eb8f1f24c9c36d7d09b85546d932ec0960261f57c866e38f"}]}, @NFT_MSG_DELRULE={0x288, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf0}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7ab334f44e26cb}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x33}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x118, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8}]}}}, {0x60, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x80000001}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4d8}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r4, 0xfbff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000440)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf251400000018000180140002006e657464657673696d3000000000000008001400adf4b75c080010004e07020008000f000000010008000e"], 0x4c}}, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@isofs={0x14, 0x1, {0x7, 0x7, 0x92a, 0x4000000, 0x2, 0x967a}}, 0x301800) 5.689495848s ago: executing program 4 (id=2595): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd, 0x0, &(0x7f0000000100)="ff418864b0833efc792e968781", 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) 5.688874758s ago: executing program 9 (id=2596): move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 4.766808899s ago: executing program 9 (id=2597): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @private, @remote}, &(0x7f0000000240)=0xc) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}]}]}]}}]}, 0xb8}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast1, @multicast2}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)=@newchain={0x22b4, 0x64, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xf, 0xf}, {0xf, 0xffe0}, {0xfff2, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2280, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x5}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x2260, 0x1, [@m_pedit={0x1f08, 0x1, 0x0, 0x0, {{0xa}, {0xedc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xe, 0x4, 0x10000000, 0x1, 0x2}, 0x29, 0x7}, [{0x0, 0x6, 0xfffffff8, 0x6cd1f920, 0x62a9, 0x5}, {0x4, 0x9, 0x8, 0x3, 0xb, 0x9c3a}, {0x80, 0x2, 0x1000, 0x9, 0x7, 0x800}, {0x100, 0x7fffffff, 0x800, 0x5, 0x40, 0xe}, {0xff, 0xffffff24, 0x7f, 0x0, 0x6, 0x8}, {0xdce, 0x6, 0x31653f38, 0x7, 0xf41d, 0x7}, {0x2, 0x40000000, 0x8, 0x1, 0xdc, 0xfffffffe}, {0x3, 0x3, 0x101, 0x5549, 0x5, 0x1ff}, {0x2, 0x9, 0x3, 0x9, 0x7, 0x1}, {0x0, 0x101, 0x6, 0x8, 0x101}, {0x8, 0xffffffff, 0x9, 0x4829, 0x1b7, 0x9}, {0x0, 0xf76, 0x9, 0x3c, 0x7, 0xfff}, {0x400, 0x3ff, 0x9, 0x0, 0x2, 0x6}, {0x1, 0x3, 0x6, 0x80000001, 0x3, 0xfffff000}, {0x7, 0xffff, 0xf, 0xc, 0x5}, {0xffff, 0x5, 0x9, 0x401, 0x3, 0x3}, {0x1, 0xa000, 0xfffffffe, 0x3, 0xf52, 0x2}, {0x200, 0x4, 0x5, 0x1ff, 0x401, 0x8}, {0x7fff, 0x7, 0xffff, 0x2, 0x8a2, 0xfff}, {0x4f13, 0x1ff, 0x3, 0x9, 0xffffffff, 0x9}, {0x9, 0x12, 0x9, 0x8, 0x8}, {0x2, 0xfffffff9, 0x8, 0x9, 0x1, 0x7}, {0x7, 0x9, 0xfffffff8, 0x3, 0xa, 0x4}, {0x81, 0x7, 0x2ec2, 0x7, 0x101, 0x2}, {0x2, 0x4, 0x626, 0x2, 0xf6d5, 0x8}, {0x546, 0x881, 0x0, 0x5, 0x3, 0x80}, {0x4f, 0x3, 0x2a08, 0x6, 0x3, 0x3ff}, {0x0, 0x82f, 0x5, 0x2, 0x0, 0x2}, {0x5b6, 0xffff7fff, 0xf6, 0x8, 0x5, 0x8001}, {0x26f9, 0x0, 0xc, 0xec5, 0xfb, 0x6}, {0x5, 0x9, 0x1, 0x6, 0x8, 0x40}, {0x8, 0x1000, 0x9, 0x1, 0x1, 0x3e}, {0xffff, 0x0, 0x4, 0x1, 0xe3d6, 0x8}, {0xfffffffa, 0xfffff000, 0x3, 0x5, 0x7, 0xcd}, {0x5221, 0x7, 0xfffffffb, 0x9, 0x9, 0x80}, {0xf1b4, 0x9, 0x9, 0x0, 0xafcf, 0xfffffffe}, {0x1, 0x36d84000, 0x6, 0x100, 0x9, 0x3}, {0x70f, 0x4, 0xc0c, 0x10001, 0x4, 0x8}, {0xfffffff8, 0x4, 0x401, 0x3, 0x1, 0x81}, {0x4, 0x2, 0x3, 0x0, 0x3, 0x3}, {0x18000, 0x7, 0x164, 0x2, 0x400}, {0x9e, 0x380, 0x16703c99, 0x7, 0x1, 0x6}, {0x3, 0x6, 0x3, 0x6, 0x8001, 0x5}, {0x8, 0x7, 0xf, 0x1000, 0x2, 0x3}, {0x3, 0xf9, 0x0, 0x9e6, 0x7}, {0x4, 0x8, 0x2, 0xda55, 0xbb, 0xffffffff}, {0x9a90, 0x4c, 0x1, 0x4, 0x6, 0xd9}, {0x4, 0x1, 0x4, 0x10001, 0x9a26, 0x9523}, {0x9b, 0xffff, 0x7, 0x3, 0x4, 0x81}, {0x9, 0x2, 0x2, 0x200, 0x5f, 0x401}, {0x1, 0x7, 0x3, 0x101, 0x7, 0x40}, {0xfffff734, 0xff, 0x80000001, 0x1200, 0x8f, 0x8}, {0xfffffffc, 0x78e, 0x4, 0x0, 0x6, 0x8}, {0x100000, 0x4, 0x3, 0x9, 0x6, 0x8}, {0xfffffffd, 0x482, 0x1, 0x5, 0x4}, {0x7, 0x9, 0x6, 0x3, 0x7, 0x7}, {0x36c1a98, 0x2, 0xfffffffe, 0x4, 0x6, 0xd}, {0x10000000, 0xb, 0x8, 0x4, 0x2, 0x8000}, {0x7, 0x3, 0x8000, 0x4, 0x1, 0x80000001}, {0x9, 0x6d23766a, 0x1000, 0x38, 0x9c4, 0x7ff}, {0x6, 0x6, 0x0, 0x0, 0x10, 0x8}, {0x8, 0x212b, 0xc, 0x5, 0x7, 0x7}, {0x34c4, 0x2, 0x64e, 0x6, 0x8, 0x1}, {0x800, 0x0, 0x80000000, 0x9e9, 0x100, 0x2}, {0x3, 0x630, 0x4, 0xe81d, 0xffffffff, 0x2}, {0x6d, 0xa50, 0x1fe00000, 0x4, 0x10001, 0x200}, {0x9, 0x9, 0x4, 0x5, 0x1, 0xb8a}, {0xff, 0xbb28, 0x7fffffff, 0x9220000, 0x8000, 0x1}, {0x1, 0x6, 0x400, 0x5, 0x5c2, 0x5}, {0x3, 0x0, 0x1, 0x2, 0x0, 0x2}, {0x721, 0x6, 0x4, 0x7, 0x7, 0x800}, {0x10001, 0xffffffd6, 0x3, 0x6db, 0x3, 0x5}, {0xe8, 0x100, 0xffffff00, 0x50, 0x4, 0x1}, {0x7, 0x401, 0x5bd709f6, 0xffffffff, 0x6, 0x6}, {0xe, 0x80000001, 0xd, 0x5, 0x103afccc, 0x6}, {0x4, 0x0, 0x3, 0x5, 0x8, 0x100}, {0x7, 0x6, 0x800000, 0x7, 0xc5, 0x8}, {0xf417, 0x9, 0x8, 0x7f, 0x8001, 0x6}, {0x86, 0x8, 0x7, 0x3, 0x30000000, 0x6}, {0x200, 0xff, 0x5, 0xf19c, 0x7, 0x4}, {0x8, 0x9, 0x92ad, 0xf, 0x7, 0x8}, {0x129, 0x3, 0x7, 0x9, 0x8, 0xfff}, {0x2, 0x1000, 0x5, 0xfc1, 0x8b, 0x80000001}, {0x5, 0x0, 0x6, 0x69, 0x4263844, 0x6}, {0xfffffffc, 0x8, 0x7, 0xef1e, 0x5, 0x2}, {0x7, 0x0, 0x8, 0xbf, 0x8, 0x4}, {0x3, 0xfffffff7, 0x6, 0x53, 0x768, 0x7fff}, {0x8, 0xffffffff, 0x5bf, 0x2, 0x3, 0x7d0}, {0xfffff308, 0x80000000, 0x2, 0x97bb, 0x6, 0x864}, {0x1, 0x3, 0x8, 0x9, 0x8, 0x792}, {0x1, 0x7, 0xfffffffb, 0x9, 0x8, 0x1}, {0x8221, 0x4, 0x7, 0x0, 0x9, 0x8}, {0x9, 0x6, 0x18000000, 0x6, 0x4, 0x4}, {0x4, 0x400, 0x1000, 0x82, 0x4, 0x30000000}, {0x5, 0xff, 0x6, 0x6, 0x4, 0x6}, {0x5, 0xf2, 0x8000, 0x3, 0x7, 0x6}, {0x10, 0x5, 0x400, 0x3, 0x6, 0x40}, {0x59, 0x1ff, 0x4bfd, 0x5, 0x4, 0x101}, {0xb, 0x2, 0x1, 0x1ee, 0x5f3e, 0xd74b}, {0x99, 0x5, 0x7, 0x1, 0x5911, 0x5}, {0x5, 0x6a8ba91e, 0x401, 0x1, 0x2a3e, 0xa}, {0x9, 0x7, 0x9, 0x0, 0x7, 0x1}, {0xf, 0x9, 0x8, 0x9, 0x7, 0x7}, {0x200, 0xb3, 0x1, 0x4, 0x1, 0x1}, {0x7, 0x9, 0xfffffffe, 0x0, 0x100, 0x5}, {0xfffffff7, 0x74e, 0xe8, 0x4da, 0x1, 0x5}, {0xbaec, 0x67272dad, 0xf4f6, 0x9, 0xe32, 0x98}, {0xffff, 0x0, 0xb92b, 0x101, 0x7, 0x7}, {0xa7, 0x3, 0x776, 0x42, 0x23a1303c, 0x8}, {0x1, 0x0, 0xffffffff, 0x6, 0x5, 0x9}, {0x4, 0x7, 0x5, 0x7241, 0xd872, 0x4}, {0x57, 0x3, 0x1, 0x7, 0x0, 0xffffffff}, {0x0, 0x5, 0x400, 0x9, 0x9, 0x3}, {0xffffffff, 0x80000000, 0x2, 0xfff, 0x6, 0x7f}, {0x5e, 0x6, 0x9, 0x8, 0x1, 0x3}, {0x9, 0x4, 0x2, 0x7f, 0x4, 0x7}, {0x8f, 0x8, 0x0, 0x10001, 0x8000, 0x10001}, {0x5, 0xa, 0x4, 0x0, 0x2, 0xffffffff}, {0x4, 0xc0000, 0xc, 0x1c4, 0x8, 0xd6cc}, {0x7, 0xc0, 0x10000, 0xfffffffc, 0x470b, 0x7f}, {0x10, 0x7fffffff, 0x0, 0xfffff80b, 0x8, 0x8000}, {0x7, 0xeef, 0x81, 0x5, 0x80, 0x8}, {0x80000001, 0x3, 0x0, 0xc, 0xe0000, 0x7}, {0xe1, 0x3, 0xb91, 0xe, 0x8, 0xc96d}, {0x536, 0xc0f5f28, 0xfffffff0, 0x662, 0x3, 0x68e}, {0x3, 0x1, 0xc1e, 0xa9fd, 0x9, 0x7}, {0x1ff, 0x8, 0x3, 0x8001, 0x9, 0x7}, {0xfffffff3, 0x3, 0x7fff, 0x1, 0xe0, 0x7e09}], [{0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xfa8d7d31e5c5834e}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0xf16afed8d994da47}, {0x5}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xc}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {}, {}, {0x0, 0x1}, {0x3}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x12de2bbd0fbaab5c, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x158, 0x11, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x7, 0x5, 0x17, 0xfffffff8}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff6b, 0x5, 0xffffffffffffffff, 0x65, 0x6}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0x0, 0x2}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x7, 0x20000000, 0x0, 0x66}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x3, 0x7, 0x7, 0xfffff40e}, 0x1}}]}, {0x8c, 0x6, "3d31bcf38b020439119c3d5da7e60205a9c307d7f8a4ff104eadc176958da880d1eaccb43953886d45071fbe7ee99166c4e1061c909460d44bcf9a9d50f558019d30d09090a9f59e34720389a09ce0962755046781009f9e29a904227c3d098b91caa9be6303d5185bc8bb750700d744f4ba05e4798486a5fdffb38b7ce701582d98985704bc2f69"}, {0xc, 0x7, {0x40426b2de1a3949d, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1fc, 0xf, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0xffffffffffffffff, 0x5, 0x445b}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x10000, 0x3, 0x23d, 0x5}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x1, 0xfd1bee407f663420, 0xeb, 0x9}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xfffffffa, 0x4, 0x6, 0x5}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x0, 0x3, 0xda29}, 0x7, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xc, 0x7, 0x4, 0xfffffcef}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8000, 0xf, 0x5ef1, 0x14}, 0x3, r8}}]}, {0xef, 0x6, "9cf125b93ef68648a9479339867f8f46bc3a042f4ce92571608d84da57f748cbc873fc40731440a89adc888f16f2472eb907a2ed4c0236fc875de5269e61e706bbdbf2873696f91e48b2a84479605fcc46ce0a5bdcf6bad5ba1dc6653915226cab75c84abacba89ac7cb83cb29d8b8d2af06f7f7d92c51f1625485f838e8f9ec325f3cd967bc237e3ebee9f8149db170f6499c1ca0c99350e5dae6347339b40eaa97bc565dcbb51167707a81d0917eb8f802b63814134dc7ce2fd7b763e73fa931b75274b3bcfe283d8fe857231f4bc7371a9e01403022627138a6c811208d0da3d71b4b7ecd84ef46270f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}, @TCA_RATE={0x6}]}, 0x22b4}, 0x1, 0x0, 0x0, 0x80}, 0x40044) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x83000000) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) 3.916185628s ago: executing program 2 (id=2603): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd, 0x17, 0x20000000, 0x2, 0x8, 0x0, {0x3}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r3, 0x8}, 0x8) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 3.908171354s ago: executing program 7 (id=2604): socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0104000000000000000001000000080002400000000209"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020601010000000000000000000000000573797a310000000005000500020000000500040000000000120003006821a47b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600000066ec9223924d53b930ae3031350f90842d864346b6c08b5c049e7a1d275056fde45bc7fca32cd602991b6cfcc9abc8cc29f76f9c6e2986fffe50df8440991f3d50649aebd4f155289e14c68a066439f2b6cc9214b4ddcb5a967c2fe3fc6d451f2f236ecf4fe79c5221db7f6aad1ad349711ab63aa95ef4d9139731b2f62a645462813bb782ae1f63371a980b5325338af95f11555f655337b4d2591acbda239ee80853762ef870949a0f1daaec8288e2364be5795e77fc6144a3e1b2ba575ab71a0b197a9a0be44e1f20d002fd2d292201f022f51c97"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44854) 3.651193356s ago: executing program 2 (id=2605): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x300, 0x0, 0x0) 2.605347974s ago: executing program 7 (id=2606): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x32f2, 0xf10, &(0x7f0000000080)=0x4}) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000100)=""/50, 0x8000, 0x1800, 0x9, 0x3}, 0x20) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000180)) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) r3 = syz_open_pts(r0, 0x307000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000200)) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r4}) (async) ioctl$TCSBRKP(r2, 0x5425, 0xa38) (async) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) fsetxattr(r3, &(0x7f00000002c0)=@random={'trusted.', '\x00'}, &(0x7f0000000300)='}\x00', 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x17) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x400) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000380)) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000003c0)={{0x44, 0x79}, 0x100, './file0\x00'}) (async, rerun: 32) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000600)={'filter\x00', 0x0, 0x4, 0xbd, [0x8001, 0x0, 0x4676, 0x7f, 0x9, 0xfffffffffffffffc], 0x4, &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000540)=""/189}, &(0x7f0000000680)=0x78) (rerun: 32) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x820a000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000840), r0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000811) (async, rerun: 32) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0xa) (async, rerun: 32) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000940), 0x2080, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000980)={0xffffef43, {{0x2, 0x4e21, @broadcast}}}, 0x88) (async) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000a40)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000a80)={0x0, {{0xa, 0x4e22, 0x1, @local, 0x401}}, {{0xa, 0x4e23, 0x6, @private1, 0x8}}}, 0x108) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r8, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x880) 2.592319444s ago: executing program 2 (id=2607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000063c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="a0000000000901080012d2a910659c5a6ea3fb920000000000000000000000780002002c00018014000300fc02000000000000000000000000000013f00400fc0100000000000000000000000000011400018009000100ac14142d08000200ffffffff140001800800010000000000080002006401010214dcce741400018008000100ffffffff08000200e00000020c00028005000100210000000900010073797a300000000008000640000000004d76e5111f3c045bcee180c8304afc080b6a73ba6a77bcf0f4e868d416467b69d674ba7e5483707f42d2f44ffc4b794c9d3bfd449a8ca014"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f0000000040), 0x8) close(r4) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000f00000c47d57ea49b000000600730"], 0x0, 0x27, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x7, 0x5, 0x20, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000006c0)="586e4af0f476d200000000000b8a4ee212d9fedb247e91294004776fdf6fd4758ccac86326691baea9a49bae48e275650a1b7dbbac64316877f48c4cbeaa8f83c27f916f2a1751d268d6b512dc8234f2c7b80cc0785fd80192e60888d350210f931cede21e9f68c72560fd2bf6f7833a6fcf9ae4033b3f679ccbcde03feb790e78e6216446631c20db99e9", 0x1, r6, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000007c0)="f9972a86d93cfda9f636cae759e494a7e95ba25d1476ba0925d292d898c884fd250fdceb5783a5f7316bb88dd2a90600572932458bb46688cfcce56d6a6e3e579909a05ab033590632ddfb6d71efc3680eaffafc5f7b3c105cb8869128975d960a9cda5df44105", &(0x7f0000000b40)=""/4096}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x20000000, 0x6}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x90}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="20005a801c00008014000303fcff070009000800020006000100070004000200"], 0x3c}}, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r13}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) r14 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x420000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x2, 0x2, {{0x2d, 0x4, 0x3, 0x6, 0xb4, 0x67, 0x0, 0x3, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x54, 0xbd, 0x3, 0x3, [{@broadcast, 0x2c2b}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x6a}, {@local, 0x74}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x5}, {@multicast2, 0x1}, {@broadcast, 0x7}, {@loopback, 0x3}, {@loopback, 0x8003}]}, @ssrr={0x89, 0x17, 0x74, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xa0, 0x1, 0xa, [{@multicast2, 0x29}, {@rand_addr=0x64010100, 0xf}]}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x1b, 0x6b, [@loopback, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @noop]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200513c8d664bf9a4f0ab8499ad1d9852000004000000080000000100000080000000", @ANYRES32=r14, @ANYBLOB="ac0300"/20, @ANYRES32=r15, @ANYRES32=r5, @ANYBLOB="01000000000000000300"/28], 0x50) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r14, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="18005a80140001800500010030000000050002000000000073235174f1c6d42b5b535cda68fd5246c54b7e664302b19df32b85e48d242df99c19b09ce2efee3956129a29e6dc5bbb45b082010af52fd5"], 0x34}}, 0x0) 2.515444661s ago: executing program 9 (id=2608): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffff91, @empty}, 0x1c) 2.426980809s ago: executing program 4 (id=2609): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) (async) r6 = socket$inet(0x2, 0x6, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) recvmmsg(r8, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/195, 0xc3}, 0x800}], 0x1, 0x30140, 0x0) (async) read$FUSE(r7, &(0x7f0000000a00)={0x2020}, 0x2020) (async) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103d02, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x15) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000500), 0x10) 2.35140451s ago: executing program 4 (id=2610): syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000700)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) 2.317874156s ago: executing program 6 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0\x00'}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x0) utimensat(r10, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x24}}, 0x9590f6cc3aa711f2) r11 = getpid() lseek(0xffffffffffffffff, 0x8ce, 0x1) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.199172017s ago: executing program 7 (id=2612): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xfff5}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x6559c346}}}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c0000040040001400018006000600800a000008000a00e0000001"], 0x2c}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x809b}, @void, @eth={@broadcast, @multicast, @void, {@mpls_mc={0x8848, {[{0x2011}, {0x9c, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv6=@icmpv6={0x2, 0x6, "181124", 0x452, 0x3a, 0x0, @local, @mcast2, {[@srh={0x3c, 0x2, 0x4, 0x1, 0x2, 0x0, 0x8, [@private1]}, @fragment={0xd9, 0x0, 0x9, 0x0, 0x0, 0x1a, 0x66}, @routing={0x2c, 0xa, 0x2, 0xb3, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @empty, @loopback, @mcast1, @local]}, @hopopts={0x0, 0x13, '\x00', [@generic={0x3, 0x2, "0279"}, @generic={0x1, 0x90, "e818c5a09665f7676e069a2066c733b03d81ae11d990d60515d6dd145130fbe5133ea16b9f3a6b992c04985a248d37b743634b789d92301df48b3546644c7b3ac52a27ff434c4557e51f9678c6aa875d8ee85ac2b2e631bbe4874a0c018e7a30fb2c6cd2a7436a8f2dc121816a8f82d429135a3f62f3ada3afefe6359f7224702d8c6de4e82c486e7a0e011c67305c65"}, @enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x33, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0xffdd, [0x10001]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x8a, 0x1, [0x1, 0x401, 0x80, 0x10001, 0x100000000, 0x837e]}}]}, @srh={0x62, 0x4, 0x4, 0x2, 0x6, 0x58, 0x9, [@rand_addr=' \x01\x00', @empty]}, @routing={0x2b, 0x8, 0x1, 0x4, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x33, 0x0, 0x4, 0x1, 0x0, 0xa, 0x64}], @time_exceed={0x3, 0x1, 0x0, 0x5, '\x00', {0x6, 0x6, "298232", 0x7fff, 0x89, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [@routing={0xff, 0xc, 0x2, 0x9, 0x0, [@remote, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x73, 0x24, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @private1}, @generic={0x5, 0xad, "133ebb035aa5b246ed7aae7c7f2a911b27df211da7965d6c5231d08f3e16266c76842854d30e10d309621c81e813d6d88182afe3b9874ad1545f701921b66e36813eb51f3add01468f8b9d5b865e83be5337dc1e8c55d8f755b1da2c56380166ee443f61a51be949e290580bd055be7107d11451b3fb333931f18ac6d0c3afab5346a4147a88de025cecdd7643537e1cd44364d26055bdc88806bbf5b5fbf4e18bc303b80d527eb335613a7676"}, @ra={0x5, 0x2, 0x8001}, @calipso={0x7, 0x48, {0x2, 0x10, 0x7, 0x1, [0x3, 0x8, 0x4, 0xa9bd, 0x10, 0x10001, 0x2, 0x5]}}]}, @fragment={0x87, 0x0, 0xc, 0x0, 0x0, 0x4, 0x64}, @srh={0x1, 0x6, 0x4, 0x3, 0x10, 0x40, 0x5, [@remote, @private1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x21, 0x0, 0x4, 0x0, 0x0, 0x1c, 0x64}, @hopopts={0x3b, 0x4, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3a, 0x0, 0x6, 0x0, 0x0, 0x11, 0x66}], "1ddf114a2ce3974635f0ae7100688f35b14c"}}}}}}}}}, 0x4a4) 2.198861209s ago: executing program 9 (id=2613): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "0700000000000000000400"}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xe6, "57d321129b113b06edd99c0238df0b5b9e2b14ae4f4ff503e73674fef516381d6ae5723dffa1a03542f6e36f0958bdb8ded769f6ea6b7a690ab80a057f81c5a6fd19c1b7912d10426bc1fd6a3a3e9197a315e37cada1d0eb7a015a8cb23b8da1014398a2d4def09f06d3ccec851d1305c372e307fceea5a9647528508cee88197711abfaa26be0766ac2c18d5902b8a09329bd15d414aa75c0f6cc545c19c09d407584da43533daf183ed6cd8f179170747de5198390faa5c5ab2e4261910730f999125a3cfadae98826bcdda2f6614dd0e03a223ce24eb3ea53a91fa3d046adc54b542f9887"}, &(0x7f0000000040)=0xee) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}], 0x10) getsockname$inet6(r1, 0x0, &(0x7f0000001700)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca", 0x21}, {&(0x7f0000000500)="fc", 0x1}], 0x2}}], 0x1, 0x0) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000880)={0xb, @sdr={0x31364d4e, 0xad50}}) 2.171606451s ago: executing program 2 (id=2614): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0, 0x6004}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 1.769158313s ago: executing program 7 (id=2615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0xd7, 0xffffffff}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x2, 0x4) 1.087230528s ago: executing program 7 (id=2616): socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0104000000000000000001000000080002400000000209"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020601010000000000000000000000000573797a310000000005000500020000000500040000000000120003006821a47b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600000066ec9223924d53b930ae3031350f90842d864346b6c08b5c049e7a1d275056fde45bc7fca32cd602991b6cfcc9abc8cc29f76f9c6e2986fffe50df8440991f3d50649aebd4f155289e14c68a066439f2b6cc9214b4ddcb5a967c2fe3fc6d451f2f236ecf4fe79c5221db7f6aad1ad349711ab63aa95ef4d9139731b2f62a645462813bb782ae1f63371a980b5325338af95f11555f655337b4d2591acbda239ee80853762ef870949a0f1daaec8288e2364be5795e77fc6144a3e1b2ba575ab71a0b197a9a0be44e1f20d002fd2d292201f022f51c97"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44854) 1.086907524s ago: executing program 2 (id=2617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000009030000000000000000007ddaa3ce0000000000000000000a020000000000"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e0", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"], 0x48) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r1) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x4462}, {r5, 0x1c05}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x4995, 0x40}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000018b80)=@deltfilter={0xe0, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0xc}, {0x1, 0xfff1}, {0xffe0, 0xe}}, [@f_tcindex={{0xc}, {0x2c, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xf, 0xe}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xa}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_FALL_THROUGH]}}, @f_rsvp6={{0xa}, {0x64, 0x2, [@TCA_RSVP_CLASSID={0x33, 0x1, {0xfff1, 0xd}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x10}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x9, 0x7}, {0x2, 0x4, 0x8}, 0x62, 0x3}}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0xfff1}}, @TCA_RSVP_DST={0x14, 0x2, @remote}]}}, @f_rsvp6={{0xa}, {0x8, 0x2, [@TCA_RSVP_POLICE={0x4}]}}]}, 0xe0}}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000008c0)=""/222, 0xde}, {&(0x7f0000000700)=""/165, 0xa5}], 0x2, 0x0, 0x0, 0x2000}, 0x38, 0x10000) 1.068815372s ago: executing program 9 (id=2618): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2010000}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 922.456286ms ago: executing program 6 (id=2619): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000787b000008150000010000009046af1b9ee951f34a92a64cccd2f280002000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000800000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t'], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113520000000000bf2000000000000007000000182000003d030100000000009500f000000000006926200000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000003d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003e2d6326f54ef34aa37506d8b22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981ba32d1ac0b9ecc8f604dcac2463e1c1e7624000921"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@nl, 0x80, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xe3}], 0x1, &(0x7f0000000640)=""/207, 0xcf}}, {{&(0x7f0000000740)=@xdp, 0x80, &(0x7f0000000380)=[{&(0x7f00000007c0)=""/149, 0x95}], 0x1, &(0x7f0000000880)=""/197, 0xc5}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/229, 0xe5}, {&(0x7f0000002100)=""/91, 0x5b}], 0x3, &(0x7f0000000c40)=""/205, 0xcd}}, {{&(0x7f0000000d40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000e00)=""/107, 0x6b}], 0x1, &(0x7f0000002180)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/184, 0xb8}], 0x1, &(0x7f0000001f80)=""/30, 0x1e}, 0x3}], 0x5, 0x2, 0x0) r7 = syz_io_uring_setup(0x10f, &(0x7f00000004c0)={0x0, 0x932c, 0x80, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 721.735838ms ago: executing program 9 (id=2620): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) socket$inet(0x2, 0x3, 0x1) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) (async) 632.028µs ago: executing program 2 (id=2621): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="48b8506e0000000000000f23c80f21f8350c00f0000f23f867460f239c48b800300000000000000f23c00f21f83501000f000f23f80f20d835200000000f22d8660f38810666b859008ee066ba2100b002eef2f4440f011966b8df008ed8", 0x5e}], 0x1, 0xe8, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0), 0x4) prctl$PR_SET_MM_AUXV(0x48, 0xc, 0x0, 0x29) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d00118025b57efaa223b473fe7783bc4a506cf756740574b89d316af935963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000004d000f803b6f94d7032d68bea0612044f47c2842a9c4f937b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71d25afd"], 0xb4}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x1}}, 0x44) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x3, 0xffffffffffffff53}) 0s ago: executing program 7 (id=2622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0xe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1000000}}}, 0x108) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0xb635773f06ebbee0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = dup(r7) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1290c2, 0x20) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): cutor exec"[13670] was attempted by "./syz-executor exec"[13669] [ 792.579459][T13671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.695482][ T7720] hsr_slave_0: left promiscuous mode [ 792.712187][ T7720] hsr_slave_1: left promiscuous mode [ 792.724173][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.731760][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.754061][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.761842][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.799267][T10726] usb 4-1: device descriptor read/64, error -71 [ 792.803234][T13674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2012'. [ 792.836470][ T7720] veth1_macvtap: left promiscuous mode [ 792.857584][ T7720] veth0_macvtap: left promiscuous mode [ 792.865285][ T7720] veth1_vlan: left promiscuous mode [ 792.870777][ T7720] veth0_vlan: left promiscuous mode [ 792.920990][T10726] usb usb4-port1: attempt power cycle [ 793.009500][ T5824] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 793.200077][ T5824] usb 8-1: Using ep0 maxpacket: 16 [ 793.241655][ T5824] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 793.252796][ T5824] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 793.267036][ T5824] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.280387][T10726] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 793.297009][ T5824] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 793.306512][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.317617][T10726] usb 4-1: device descriptor read/8, error -71 [ 793.328649][ T5824] usb 8-1: Product: syz [ 793.339379][ T5824] usb 8-1: Manufacturer: syz [ 793.344232][ T5824] usb 8-1: SerialNumber: syz [ 793.639722][ T5132] Bluetooth: hci1: command tx timeout [ 794.803603][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 794.870232][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 794.989925][ T5132] Bluetooth: hci5: command 0x040f tx timeout [ 795.502673][T13673] lo speed is unknown, defaulting to 1000 [ 795.532140][ T5824] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 795.655561][ T5824] usb 8-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 795.714765][ T5839] Bluetooth: hci1: command tx timeout [ 795.783097][ T5824] usb 8-1: USB disconnect, device number 6 [ 795.847555][T13625] chnl_net:caif_netlink_parms(): no params data found [ 796.164220][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.179526][T13625] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.205070][T13625] bridge_slave_0: entered allmulticast mode [ 796.374449][T13625] bridge_slave_0: entered promiscuous mode [ 796.604716][T13721] ptrace attach of "./syz-executor exec"[13722] was attempted by "./syz-executor exec"[13721] [ 797.201466][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.219590][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.228128][T13625] bridge_slave_1: entered allmulticast mode [ 797.242170][T13625] bridge_slave_1: entered promiscuous mode [ 797.393363][T13625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.544921][T13625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.215018][T13625] team0: Port device team_slave_0 added [ 798.225235][T13625] team0: Port device team_slave_1 added [ 798.304721][T13625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.333105][T13625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.402507][T13625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.434987][T13625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.446208][T13625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.507609][T13625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.625145][T13625] hsr_slave_0: entered promiscuous mode [ 798.672086][T13625] hsr_slave_1: entered promiscuous mode [ 798.693922][T13625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.734796][T13625] Cannot create hsr debugfs directory [ 800.016963][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2029'. [ 800.383505][T13625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 800.392903][ T8] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 800.407940][T13625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 800.462931][T13625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 800.478074][T13625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 800.575546][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 800.585448][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.608792][ T8] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 800.618297][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.623771][T13625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.644425][ T8] usb 5-1: config 0 descriptor?? [ 800.657721][T13753] ieee802154 phy0 wpan0: encryption failed: -22 [ 800.666145][ T8] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 800.685552][ T8] usb 5-1: Detected SIO [ 800.695071][ T8] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 800.698618][T13625] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.745342][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.752566][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.770966][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.778087][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.854134][T13625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 800.873942][T13625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 800.885822][ T5980] usb 5-1: USB disconnect, device number 37 [ 800.913844][ T5980] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 800.965509][ T5980] ftdi_sio 5-1:0.0: device disconnected [ 801.357627][T13625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.013804][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2040'. [ 805.943470][T13783] Bluetooth: hci1: command 0x0405 tx timeout [ 806.117621][T13625] veth0_vlan: entered promiscuous mode [ 806.185549][T13625] veth1_vlan: entered promiscuous mode [ 806.216346][T13807] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 806.236731][T13807] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 806.275121][T13807] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 806.293217][T13810] netlink: 'syz.3.2044': attribute type 10 has an invalid length. [ 806.307467][T13807] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 806.341808][T13625] veth0_macvtap: entered promiscuous mode [ 806.377029][T13625] veth1_macvtap: entered promiscuous mode [ 806.399332][ T5980] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 806.427110][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.466610][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.477457][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.488416][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.499029][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.510455][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.599063][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.614967][T13815] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2046'. [ 806.638338][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.650066][ T5980] usb 7-1: Using ep0 maxpacket: 32 [ 806.662219][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.664875][ T5980] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 806.673863][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.694762][T13625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.720300][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.731073][ T5980] usb 7-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 807.002915][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.162980][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.381853][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.409203][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.446552][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.478363][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.517190][ T5980] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 807.526105][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.526358][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.549465][ T5980] usbhid 7-1:32.0: couldn't find an input interrupt endpoint [ 807.558395][T13625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.569676][T13625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.580630][T13625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.595026][T13819] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 807.702913][T13625] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.738379][T13625] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.804659][T13625] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.830207][T13625] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.361461][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.590207][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.611608][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.792064][T13832] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 808.923446][T12647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.931757][T12647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.646489][T10726] usb 7-1: USB disconnect, device number 19 [ 810.809173][ T5824] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 811.089123][ T5824] usb 9-1: Using ep0 maxpacket: 32 [ 811.096103][ T5824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.113369][ T5824] usb 9-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 811.128502][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.981575][ T5824] usb 9-1: Product: syz [ 812.009761][ T5824] usb 9-1: Manufacturer: syz [ 812.036877][ T5824] usb 9-1: SerialNumber: syz [ 812.064343][ T5824] usb 9-1: config 0 descriptor?? [ 812.107914][ T5824] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 812.127571][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 812.341339][ T5824] gspca_sunplus: reg_r err -71 [ 814.488333][T13895] ip6gre1: entered promiscuous mode [ 815.462943][T13925] xt_socket: unknown flags 0x8 [ 815.474935][T13925] overlayfs: failed to resolve './file0': -2 [ 815.903547][T13924] Can't find ip_set type bitm+p:ip [ 816.129046][ T25] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 817.126027][ T25] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 817.134431][ T25] usb 4-1: config 0 has no interface number 0 [ 817.140968][ T25] usb 4-1: config 0 interface 128 has no altsetting 0 [ 817.163380][ T25] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 817.182301][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.197447][ T5824] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 817.215231][ T25] usb 4-1: Product: syz [ 818.397172][ T5824] usb 9-1: USB disconnect, device number 5 [ 818.403119][ T25] usb 4-1: Manufacturer: syz [ 818.407749][ T25] usb 4-1: SerialNumber: syz [ 819.251753][ T25] usb 4-1: config 0 descriptor?? [ 819.299420][ T25] usb 4-1: can't set config #0, error -71 [ 819.306573][ T25] usb 4-1: USB disconnect, device number 38 [ 821.153101][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2086'. [ 821.310446][ T6162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.007865][ T6162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.102404][T13995] bond1: entered promiscuous mode [ 822.108004][T13995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.351139][ T6162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.576281][ T6162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.603645][T13783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 822.625425][T13783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 822.635062][T13783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 822.639088][ T5824] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 822.661518][T13783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 822.671297][T13783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 822.680974][T13783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 824.228040][T14014] lo speed is unknown, defaulting to 1000 [ 824.292448][ T6162] bridge_slave_1: left allmulticast mode [ 824.298326][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.335822][ T6162] bridge_slave_0: left allmulticast mode [ 824.341852][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 824.348552][ T5824] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 824.358531][ T5824] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 824.377200][ T6162] bridge_slave_0: left promiscuous mode [ 824.389277][ T5824] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.391087][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.779377][ T5839] Bluetooth: hci3: command tx timeout [ 825.460952][ T5824] usb 7-1: string descriptor 0 read error: -71 [ 825.480050][ T5824] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.646143][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.399730][ T5824] usb 7-1: can't set config #1, error -71 [ 826.479997][ T5824] usb 7-1: USB disconnect, device number 20 [ 826.922828][ T5839] Bluetooth: hci3: command tx timeout [ 828.546612][T14063] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2110'. [ 829.062649][ T5839] Bluetooth: hci3: command tx timeout [ 829.533226][ T6162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.566358][ T6162] bond0 (unregistering): Released all slaves [ 830.000282][T14072] Cannot find add_set index 0 as target [ 830.313440][T14014] chnl_net:caif_netlink_parms(): no params data found [ 830.635207][T14084] overlayfs: failed to resolve './file0/file0': -2 [ 831.327732][ T5839] Bluetooth: hci3: command tx timeout [ 831.476829][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.509187][ T6162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.541998][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.555205][ T6162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.656950][ T6162] veth1_macvtap: left promiscuous mode [ 831.673568][ T6162] veth1_vlan: left promiscuous mode [ 831.696844][ T6162] veth0_vlan: left promiscuous mode [ 835.119090][ T5824] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 835.296279][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.341972][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.423312][ T5824] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 835.483553][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.604294][ T5824] usb 5-1: config 0 descriptor?? [ 835.745355][ T6162] team0 (unregistering): Port device team_slave_1 removed [ 835.812504][ T6162] team0 (unregistering): Port device team_slave_0 removed [ 836.358146][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.365617][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.382105][T14014] bridge_slave_0: entered allmulticast mode [ 836.389164][T14014] bridge_slave_0: entered promiscuous mode [ 836.427991][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.440293][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.447621][T14014] bridge_slave_1: entered allmulticast mode [ 836.455545][T14014] bridge_slave_1: entered promiscuous mode [ 836.533189][T14109] trusted_key: encrypted_key: master key parameter is missing [ 836.561440][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.616236][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.651769][ T5824] hid-led 0003:27B8:01ED.002F: probe with driver hid-led failed with error -71 [ 836.699197][ T5824] usb 5-1: USB disconnect, device number 38 [ 836.782477][T14014] team0: Port device team_slave_0 added [ 836.864791][T14014] team0: Port device team_slave_1 added [ 836.990854][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.028884][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.106029][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.142824][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.159005][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.331578][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.444325][T14126] FAULT_INJECTION: forcing a failure. [ 837.444325][T14126] name failslab, interval 1, probability 0, space 0, times 0 [ 837.469178][T14126] CPU: 0 UID: 0 PID: 14126 Comm: syz.4.2127 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 837.480007][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 837.490088][T14126] Call Trace: [ 837.493387][T14126] [ 837.496339][T14126] dump_stack_lvl+0x241/0x360 [ 837.501053][T14126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.506278][T14126] ? __pfx__printk+0x10/0x10 [ 837.510907][T14126] ? ref_tracker_alloc+0x332/0x490 [ 837.516044][T14126] should_fail_ex+0x3b0/0x4e0 [ 837.520770][T14126] should_failslab+0xac/0x100 [ 837.525476][T14126] ? skb_clone+0x20c/0x390 [ 837.529912][T14126] kmem_cache_alloc_noprof+0x70/0x380 [ 837.535320][T14126] skb_clone+0x20c/0x390 [ 837.539587][T14126] __netlink_deliver_tap+0x3cc/0x7f0 [ 837.544907][T14126] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.550123][T14126] netlink_deliver_tap+0x19d/0x1b0 [ 837.555250][T14126] netlink_sendskb+0x68/0x140 [ 837.559949][T14126] netlink_unicast+0x39d/0x990 [ 837.564751][T14126] ? __pfx_netlink_unicast+0x10/0x10 [ 837.570079][T14126] netlink_rcv_skb+0x262/0x430 [ 837.574861][T14126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 837.580364][T14126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.585694][T14126] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.590915][T14126] netlink_unicast+0x7f6/0x990 [ 837.595713][T14126] ? __pfx_netlink_unicast+0x10/0x10 [ 837.601040][T14126] ? __virt_addr_valid+0x45f/0x530 [ 837.606171][T14126] ? __phys_addr_symbol+0x2f/0x70 [ 837.611226][T14126] ? __check_object_size+0x47a/0x730 [ 837.616551][T14126] netlink_sendmsg+0x8e4/0xcb0 [ 837.621379][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.626714][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.632020][T14126] __sock_sendmsg+0x221/0x270 [ 837.636739][T14126] ____sys_sendmsg+0x52a/0x7e0 [ 837.641534][T14126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.646902][T14126] ? __fget_files+0x2a/0x410 [ 837.651552][T14126] ? __fget_files+0x2a/0x410 [ 837.656185][T14126] __sys_sendmsg+0x269/0x350 [ 837.660817][T14126] ? __pfx_lock_release+0x10/0x10 [ 837.665877][T14126] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.671025][T14126] ? __pfx_vfs_write+0x10/0x10 [ 837.675824][T14126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 837.682166][T14126] ? do_syscall_64+0x100/0x230 [ 837.686947][T14126] ? do_syscall_64+0xb6/0x230 [ 837.691640][T14126] do_syscall_64+0xf3/0x230 [ 837.696156][T14126] ? clear_bhb_loop+0x35/0x90 [ 837.700858][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.706773][T14126] RIP: 0033:0x7f403197ff19 [ 837.711206][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.730826][T14126] RSP: 002b:00007f4032750058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.739248][T14126] RAX: ffffffffffffffda RBX: 00007f4031b45fa0 RCX: 00007f403197ff19 [ 837.747219][T14126] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 837.755188][T14126] RBP: 00007f40327500a0 R08: 0000000000000000 R09: 0000000000000000 [ 837.763159][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.771135][T14126] R13: 0000000000000000 R14: 00007f4031b45fa0 R15: 00007ffc85bf1088 [ 837.779124][T14126] [ 838.288149][T14014] hsr_slave_0: entered promiscuous mode [ 838.313708][T14014] hsr_slave_1: entered promiscuous mode [ 838.407693][T14014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.417184][T14014] Cannot create hsr debugfs directory [ 838.455827][T14137] tipc: Started in network mode [ 838.475132][ T6162] IPVS: stop unused estimator thread 0... [ 838.488915][T14137] tipc: Node identity 10000, cluster identity 4711 [ 838.513450][T14137] tipc: Node number set to 65536 [ 838.852717][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 838.998927][ T8] usb 5-1: device descriptor read/64, error -71 [ 839.318990][ T8] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 839.421172][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2132'. [ 839.589845][ T8] usb 5-1: device descriptor read/64, error -71 [ 839.726010][ T8] usb usb5-port1: attempt power cycle [ 840.632312][T14014] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 840.671622][T14014] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 840.689271][ T8] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 840.712268][T14014] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 840.734639][ T8] usb 5-1: device descriptor read/8, error -71 [ 840.749249][T14014] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 840.801627][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2136'. [ 841.003905][ T8] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 841.091140][ T8] usb 5-1: device descriptor read/8, error -71 [ 841.208428][ T8] usb usb5-port1: unable to enumerate USB device [ 841.405997][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.462902][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.516833][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.524057][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.612275][T12647] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.619494][T12647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.582001][T14174] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 842.966399][T14160] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2137'. [ 842.991305][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2137'. [ 843.051294][T14014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.450534][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.053232][T14222] program syz.4.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.761413][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 846.945214][T14014] veth0_vlan: entered promiscuous mode [ 846.989212][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 847.003850][ T8] usb 8-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 847.026820][T14014] veth1_vlan: entered promiscuous mode [ 847.037654][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.219176][ T8] usb 8-1: Product: syz [ 847.242489][ T8] usb 8-1: Manufacturer: syz [ 847.263065][ T8] usb 8-1: SerialNumber: syz [ 847.303957][T14014] veth0_macvtap: entered promiscuous mode [ 847.304744][ T8] usb 8-1: config 0 descriptor?? [ 847.347269][T14014] veth1_macvtap: entered promiscuous mode [ 847.486933][T14234] tipc: Started in network mode [ 847.492607][T14234] tipc: Node identity 101, cluster identity 4711 [ 847.500414][T14234] tipc: Node number set to 257 [ 847.506555][T14234] tipc: Cannot configure node identity twice [ 847.569266][ T8] usb-storage 8-1:0.0: USB Mass Storage device detected [ 847.648913][ T8] usb-storage 8-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 847.665740][ T8] usb-storage 8-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc2-syzkaller-00018-g7cb1b4663150) [ 847.665740][ T8] Please send a copy of this message to and [ 847.783518][ T8] usb 8-1: USB disconnect, device number 7 [ 847.973488][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.018963][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.029636][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.041224][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.051526][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.062255][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.076124][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.093885][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.113422][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.134567][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.158457][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.190033][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.217666][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.248950][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.260665][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.272303][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.283792][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.296144][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.307278][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.320151][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.332316][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.344555][T14251] 9pnet_fd: Insufficient options for proto=fd [ 848.374336][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.406124][T14014] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.433696][T14014] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.444705][T14014] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.453666][T14014] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.500642][T14257] syz.8.2162[14257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.500755][T14257] syz.8.2162[14257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.556111][T14257] syz.8.2162[14257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.601697][T14256] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2162'. [ 848.664578][T14256] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2162'. [ 848.685198][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 848.795012][ T6162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.813881][ T6162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.873677][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.907398][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.059121][ T5908] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 849.218977][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 849.231106][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.379573][ T5908] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 849.388735][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.260346][ T5908] usb 7-1: config 0 descriptor?? [ 850.290844][ T5908] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 850.380956][ T5908] usb 7-1: Detected SIO [ 850.408116][ T5908] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 850.496913][ T5908] usb 7-1: USB disconnect, device number 21 [ 850.541805][ T5908] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 850.629695][ T5908] ftdi_sio 7-1:0.0: device disconnected [ 850.709648][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'. [ 850.740133][T14286] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2171'. [ 850.757797][T14281] netlink: 'syz.4.2168': attribute type 2 has an invalid length. [ 854.114141][T14333] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2185'. [ 854.182900][T14335] 9pnet_fd: Insufficient options for proto=fd [ 854.769107][ T9740] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 855.483655][ T9740] usb 10-1: Using ep0 maxpacket: 16 [ 856.436992][ T9740] usb 10-1: config 8 has an invalid interface number: 45 but max is 1 [ 856.448958][ T9740] usb 10-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 856.457768][ T9740] usb 10-1: config 8 has an invalid interface number: 6 but max is 1 [ 856.701445][ T9740] usb 10-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 857.652230][ T9740] usb 10-1: config 8 has no interface number 0 [ 857.658456][ T9740] usb 10-1: config 8 has no interface number 1 [ 857.664852][ T9740] usb 10-1: config 8 interface 45 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 857.675958][ T9740] usb 10-1: config 8 interface 45 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 857.685904][ T9740] usb 10-1: config 8 interface 45 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 857.697082][ T9740] usb 10-1: config 8 interface 45 altsetting 2 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 857.709132][ T9740] usb 10-1: config 8 interface 45 altsetting 2 endpoint 0x8E has an invalid bInterval 87, changing to 7 [ 857.720468][ T9740] usb 10-1: config 8 interface 45 altsetting 2 endpoint 0x8E has invalid maxpacket 1057, setting to 1024 [ 857.731823][ T9740] usb 10-1: config 8 interface 45 altsetting 2 endpoint 0xC has an invalid bInterval 69, changing to 7 [ 857.743454][ T9740] usb 10-1: config 8 interface 45 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 857.754661][ T9740] usb 10-1: config 8 interface 45 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 857.765617][ T9740] usb 10-1: config 8 interface 45 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 857.776614][ T9740] usb 10-1: config 8 interface 45 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 857.787500][ T9740] usb 10-1: config 8 interface 45 altsetting 2 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 857.800863][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 857.812116][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 857.822837][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 857.833589][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 857.844706][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 857.855775][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 857.866612][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 857.877382][ T9740] usb 10-1: config 8 interface 6 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 64 [ 857.881402][T14361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.887394][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 857.906362][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 857.917108][ T9740] usb 10-1: config 8 interface 6 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 857.928014][ T9740] usb 10-1: config 8 interface 45 has no altsetting 0 [ 857.934983][ T9740] usb 10-1: config 8 interface 6 has no altsetting 0 [ 857.942220][T14361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.233110][ T9740] usb 10-1: string descriptor 0 read error: -71 [ 858.240136][ T9740] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice=d0.24 [ 858.249922][ T9740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.261252][ T9740] usb 10-1: can't set config #8, error -71 [ 858.269559][ T9740] usb 10-1: USB disconnect, device number 2 [ 859.188912][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 859.188935][ T29] audit: type=1400 audit(1733842589.450:602): lsm=SMACK fn=smack_unix_may_send action=denied subject="h" object="_" requested=w pid=14363 comm="syz.8.2195" [ 861.752197][ T5908] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 861.890992][T14418] fuse: Bad value for 'rootmode' [ 861.896942][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2209'. [ 861.910623][ T5908] usb 8-1: config 0 has an invalid interface number: 100 but max is 0 [ 861.920617][ T5908] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.934448][ T5908] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 861.944689][ T5908] usb 8-1: config 0 has no interface number 1 [ 861.970818][ T5908] usb 8-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 861.998899][ T5908] usb 8-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 862.014602][ T5908] usb 8-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 862.023924][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.037588][ T5908] usb 8-1: Product: syz [ 862.041878][ T5908] usb 8-1: Manufacturer: syz [ 862.046510][ T5908] usb 8-1: SerialNumber: syz [ 862.053224][ T5908] usb 8-1: config 0 descriptor?? [ 862.059996][ T5908] port100 8-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 862.073776][ T5908] port100 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 862.270227][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.284497][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.351505][ T5908] usb 8-1: USB disconnect, device number 8 [ 862.826444][T14432] FAULT_INJECTION: forcing a failure. [ 862.826444][T14432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 862.873914][T14432] CPU: 1 UID: 0 PID: 14432 Comm: syz.4.2212 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 862.884747][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 862.894834][T14432] Call Trace: [ 862.898147][T14432] [ 862.901109][T14432] dump_stack_lvl+0x241/0x360 [ 862.905866][T14432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.911108][T14432] ? __pfx__printk+0x10/0x10 [ 862.915737][T14432] ? look_up_lock_class+0x77/0x170 [ 862.920920][T14432] ? register_lock_class+0x102/0x980 [ 862.926263][T14432] should_fail_ex+0x3b0/0x4e0 [ 862.931009][T14432] prepare_alloc_pages+0x1da/0x5b0 [ 862.936187][T14432] __alloc_pages_noprof+0x16f/0x710 [ 862.941451][T14432] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 862.947242][T14432] alloc_pages_mpol_noprof+0x3e8/0x680 [ 862.952758][T14432] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 862.958795][T14432] ? alloc_pages_noprof+0xef/0x170 [ 862.963960][T14432] pte_alloc_one+0x8f/0x510 [ 862.968511][T14432] ? __pfx_pte_alloc_one+0x10/0x10 [ 862.973760][T14432] ? down_read+0x82b/0xa40 [ 862.978234][T14432] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 862.983835][T14432] __pte_alloc+0x79/0x3c0 [ 862.988221][T14432] ? __lock_acquire+0x1397/0x2100 [ 862.993279][T14432] ? __pfx___pte_alloc+0x10/0x10 [ 862.998263][T14432] ? uffd_lock_vma+0x91/0x2e0 [ 863.002984][T14432] mfill_atomic_poison+0xe40/0x1800 [ 863.008235][T14432] ? __pfx_mfill_atomic_poison+0x10/0x10 [ 863.013907][T14432] ? __pfx___might_resched+0x10/0x10 [ 863.019246][T14432] ? __might_fault+0xaa/0x120 [ 863.023967][T14432] ? __pfx_lock_release+0x10/0x10 [ 863.029046][T14432] ? preempt_count_add+0x93/0x190 [ 863.034102][T14432] ? __might_fault+0xc6/0x120 [ 863.038878][T14432] userfaultfd_ioctl+0x3441/0x66f0 [ 863.044000][T14432] ? __kernel_text_address+0xd/0x40 [ 863.049221][T14432] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 863.054775][T14432] ? stack_trace_save+0x118/0x1d0 [ 863.059832][T14432] ? __pfx_stack_trace_save+0x10/0x10 [ 863.065268][T14432] ? stack_depot_save_flags+0x37/0x940 [ 863.070788][T14432] ? kasan_save_track+0x51/0x80 [ 863.075666][T14432] ? kasan_save_track+0x3f/0x80 [ 863.080533][T14432] ? kasan_save_free_info+0x40/0x50 [ 863.085806][T14432] ? __kasan_slab_free+0x59/0x70 [ 863.090761][T14432] ? kfree+0x196/0x430 [ 863.094848][T14432] ? tomoyo_path_number_perm+0x679/0x860 [ 863.100488][T14432] ? security_file_ioctl+0xc6/0x2a0 [ 863.105703][T14432] ? __se_sys_ioctl+0x46/0x170 [ 863.110499][T14432] ? do_syscall_64+0xf3/0x230 [ 863.115188][T14432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.121270][T14432] ? do_vfs_ioctl+0xf07/0x2e40 [ 863.126050][T14432] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 863.131088][T14432] ? mark_lock+0x9a/0x360 [ 863.135436][T14432] ? tomoyo_path_number_perm+0x206/0x860 [ 863.141072][T14432] ? __pfx_lock_release+0x10/0x10 [ 863.146116][T14432] ? tomoyo_path_number_perm+0x679/0x860 [ 863.151777][T14432] ? tomoyo_path_number_perm+0x679/0x860 [ 863.157452][T14432] ? tomoyo_path_number_perm+0x6f9/0x860 [ 863.163102][T14432] ? __lock_acquire+0x1397/0x2100 [ 863.168142][T14432] ? tomoyo_path_number_perm+0x206/0x860 [ 863.173799][T14432] ? smack_log+0x123/0x540 [ 863.178240][T14432] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 863.184238][T14432] ? __pfx_smack_log+0x10/0x10 [ 863.189051][T14432] ? smk_access+0x4ab/0x4e0 [ 863.193585][T14432] ? smk_tskacc+0x300/0x370 [ 863.198094][T14432] ? smack_file_ioctl+0x2f7/0x3a0 [ 863.203140][T14432] ? __pfx_smack_file_ioctl+0x10/0x10 [ 863.208541][T14432] ? __fget_files+0x2a/0x410 [ 863.213145][T14432] ? __fget_files+0x2a/0x410 [ 863.217764][T14432] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 863.223258][T14432] __se_sys_ioctl+0xf5/0x170 [ 863.227875][T14432] do_syscall_64+0xf3/0x230 [ 863.232413][T14432] ? clear_bhb_loop+0x35/0x90 [ 863.237100][T14432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.243001][T14432] RIP: 0033:0x7f403197ff19 [ 863.247424][T14432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.267084][T14432] RSP: 002b:00007f4032750058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.275511][T14432] RAX: ffffffffffffffda RBX: 00007f4031b45fa0 RCX: 00007f403197ff19 [ 863.283509][T14432] RDX: 0000000020000240 RSI: 00000000c020aa08 RDI: 0000000000000004 [ 863.291507][T14432] RBP: 00007f40327500a0 R08: 0000000000000000 R09: 0000000000000000 [ 863.299481][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.307472][T14432] R13: 0000000000000000 R14: 00007f4031b45fa0 R15: 00007ffc85bf1088 [ 863.315468][T14432] [ 863.318616][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.341330][T14437] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2214'. [ 864.157641][T14454] netlink: 'syz.4.2218': attribute type 17 has an invalid length. [ 864.166167][T14454] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2218'. [ 864.294710][T14454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.879410][ T5908] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 865.033235][ T5908] usb 5-1: device descriptor read/64, error -71 [ 865.418983][ T5908] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 865.602666][ T5908] usb 5-1: device descriptor read/64, error -71 [ 866.049541][ T5908] usb usb5-port1: attempt power cycle [ 866.079423][ T5824] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 866.087129][ T51] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 866.269034][ T5824] usb 8-1: Using ep0 maxpacket: 8 [ 866.274234][ T51] usb 10-1: Using ep0 maxpacket: 32 [ 866.283032][ T5824] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 866.299871][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.329004][ T5824] usb 8-1: Product: syz [ 866.333581][ T5824] usb 8-1: Manufacturer: syz [ 866.339501][ T5824] usb 8-1: SerialNumber: syz [ 866.339715][ T51] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 866.355657][ T5824] usb 8-1: config 0 descriptor?? [ 866.378854][ T51] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.389940][ T5824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 866.401112][ T51] usb 10-1: config 0 descriptor?? [ 866.412088][ T51] as10x_usb: device has been detected [ 866.418215][ T51] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 866.429149][ T5908] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 866.453369][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2229'. [ 866.474546][ T51] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 866.489477][ T5908] usb 5-1: device descriptor read/8, error -71 [ 866.600763][ T51] as10x_usb: error during firmware upload part1 [ 866.607651][ T51] Registered device nBox DVB-T Dongle [ 866.641127][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.667602][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.739373][ T5908] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 866.779849][ T5908] usb 5-1: device descriptor read/8, error -71 [ 867.124304][ T5908] usb usb5-port1: unable to enumerate USB device [ 867.139620][ T5824] gspca_zc3xx: reg_w_i err -110 [ 867.171057][ T5907] usb 10-1: USB disconnect, device number 3 [ 868.206438][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2231'. [ 868.877056][ T5907] Unregistered device nBox DVB-T Dongle [ 869.025933][ T5907] as10x_usb: device has been disconnected [ 869.133914][T14513] netlink: 'syz.6.2233': attribute type 2 has an invalid length. [ 869.229379][ T5824] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 869.238129][ T5824] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 869.674171][ T5980] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 869.751434][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.779692][ T5907] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 869.883681][ T5980] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 869.950686][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 869.979142][ T5907] usb 9-1: Using ep0 maxpacket: 8 [ 870.064342][ T5907] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 870.073289][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 870.088172][ T5907] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 870.099511][ T5907] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 870.108450][ T5907] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 870.119709][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 870.130905][ T5907] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 870.143540][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 870.158858][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 870.164341][ T5824] usb 8-1: USB disconnect, device number 9 [ 870.209032][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 870.220795][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 870.237688][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 870.252703][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 870.263989][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 870.276250][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 870.283065][ T5907] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 870.297723][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 870.307824][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 870.319453][ T5907] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 870.328530][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.338095][ T5907] usb 9-1: Product: syz [ 870.342749][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 870.425123][ T5907] usb 9-1: Manufacturer: syz [ 870.459842][ T5907] usb 9-1: SerialNumber: syz [ 870.478719][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 870.529511][ T5908] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 870.567880][ T5907] usb 9-1: config 0 descriptor?? [ 870.573043][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 870.585732][T14525] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 870.593838][ T5907] hub 9-1:0.0: bad descriptor, ignoring hub [ 870.600147][ T5907] hub 9-1:0.0: probe with driver hub failed with error -5 [ 870.609641][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 870.618604][ T5907] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input18 [ 870.679173][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 870.719560][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 870.911833][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.930008][ C0] usb_acecad 9-1:0.0: can't resubmit intr, dummy_hcd.8-1/input0, status -1 [ 870.960837][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 870.967872][ T5908] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 871.035314][ T5908] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 871.044771][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.065076][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.081684][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 871.100148][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 871.107737][ T5908] usb 7-1: config 0 descriptor?? [ 871.118191][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.127759][ T5980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 871.147823][ T5980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 871.407469][ T5908] Bluetooth: Can't get state to change to load configuration err [ 871.415558][ T5980] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 871.424677][ T5908] Bluetooth: Loading sysconfig file failed [ 871.430642][ T5908] ath3k 7-1:0.0: probe with driver ath3k failed with error -16 [ 871.438295][ T5980] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 871.457315][ T5908] usb 7-1: USB disconnect, device number 22 [ 871.463840][ T5980] usb 5-1: Product: syz [ 871.468418][ T5980] usb 5-1: Manufacturer: syz [ 871.474588][ T5980] usb 5-1: SerialNumber: syz [ 871.482390][ T5980] usb 5-1: config 0 descriptor?? [ 871.492957][ T5980] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 871.520222][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2244'. [ 871.562168][T14548] bridge_slave_0: left allmulticast mode [ 871.567924][T14548] bridge_slave_0: left promiscuous mode [ 871.601893][T14548] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.623343][T14548] bridge_slave_1: left allmulticast mode [ 871.649878][T14548] bridge_slave_1: left promiscuous mode [ 871.655689][T14548] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.675535][T14548] bond0: (slave bond_slave_0): Releasing backup interface [ 871.752366][T14548] bond0: (slave bond_slave_1): Releasing backup interface [ 871.779092][ T5907] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 871.810235][T14548] team0: Port device team_slave_1 removed [ 871.827515][T14548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.842279][T14548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.871296][T14548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.905477][T14548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.018978][ T5907] usb 10-1: Using ep0 maxpacket: 8 [ 872.033199][ T5907] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 872.055882][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.078923][ T5907] usb 10-1: Product: syz [ 872.083375][ T5907] usb 10-1: Manufacturer: syz [ 872.088472][ T5907] usb 10-1: SerialNumber: syz [ 872.098142][ T5907] usb 10-1: config 0 descriptor?? [ 872.108260][ T5907] gspca_main: se401-2.14.0 probing 047d:5003 [ 872.311325][ T5980] usb 9-1: USB disconnect, device number 6 [ 872.331394][T14546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.342093][T14546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.557981][ T5907] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 872.589043][ T5907] se401 10-1:0.0: probe with driver se401 failed with error -71 [ 872.600185][ T5907] usb 10-1: USB disconnect, device number 4 [ 873.894794][T10726] usb 5-1: USB disconnect, device number 47 [ 873.906959][T10726] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 874.092196][T14573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2250'. [ 874.123722][T14573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2250'. [ 874.328853][T14581] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2252'. [ 875.694195][ T29] audit: type=1326 audit(1733842606.210:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 875.715864][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.209832][ T29] audit: type=1326 audit(1733842606.210:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 876.231544][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.568900][ T29] audit: type=1326 audit(1733842606.210:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 876.676101][ T29] audit: type=1326 audit(1733842606.210:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 876.731559][T14605] FAULT_INJECTION: forcing a failure. [ 876.731559][T14605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.741503][ T29] audit: type=1326 audit(1733842606.210:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 876.766147][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.498538][ T29] audit: type=1326 audit(1733842606.210:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 877.578597][T14605] CPU: 1 UID: 0 PID: 14605 Comm: syz.9.2260 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 877.589431][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 877.598872][ T29] audit: type=1326 audit(1733842606.210:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 877.599492][T14605] Call Trace: [ 877.624335][T14605] [ 877.627285][T14605] dump_stack_lvl+0x241/0x360 [ 877.632002][T14605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.637234][T14605] ? __pfx__printk+0x10/0x10 [ 877.641861][T14605] ? snprintf+0xda/0x120 [ 877.646141][T14605] should_fail_ex+0x3b0/0x4e0 [ 877.650860][T14605] _copy_to_user+0x31/0xb0 [ 877.655322][T14605] simple_read_from_buffer+0xca/0x150 [ 877.660797][T14605] proc_fail_nth_read+0x1e9/0x250 [ 877.665871][T14605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.670175][ T29] audit: type=1326 audit(1733842606.210:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 877.671441][T14605] ? rw_verify_area+0x55e/0x6f0 [ 877.697841][T14605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.703431][T14605] vfs_read+0x1fc/0xb70 [ 877.707635][T14605] ? __pfx___mutex_lock+0x10/0x10 [ 877.712703][T14605] ? __pfx_vfs_read+0x10/0x10 [ 877.717411][T14605] ? __fget_files+0x2a/0x410 [ 877.718880][ T29] audit: type=1326 audit(1733842606.210:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 877.722012][T14605] ? __fget_files+0x395/0x410 [ 877.748223][T14605] ? __fget_files+0x2a/0x410 [ 877.752847][T14605] ksys_read+0x18f/0x2b0 [ 877.757124][T14605] ? __pfx_ksys_read+0x10/0x10 [ 877.761919][T14605] ? do_syscall_64+0x100/0x230 [ 877.766730][T14605] ? do_syscall_64+0xb6/0x230 [ 877.771441][T14605] do_syscall_64+0xf3/0x230 [ 877.775978][T14605] ? clear_bhb_loop+0x35/0x90 [ 877.778851][ T29] audit: type=1326 audit(1733842606.210:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14593 comm="syz.9.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6e17ff19 code=0x7ffc0000 [ 877.780669][T14605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.808190][T14605] RIP: 0033:0x7f4b6e17e92c [ 877.812651][T14605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 877.832293][T14605] RSP: 002b:00007f4b6ef3b050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 877.840736][T14605] RAX: ffffffffffffffda RBX: 00007f4b6e345fa0 RCX: 00007f4b6e17e92c [ 877.848722][T14605] RDX: 000000000000000f RSI: 00007f4b6ef3b0b0 RDI: 0000000000000004 [ 877.856711][T14605] RBP: 00007f4b6ef3b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 877.864719][T14605] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.872705][T14605] R13: 0000000000000000 R14: 00007f4b6e345fa0 R15: 00007ffe863863b8 [ 877.880697][T14605] [ 877.883805][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.302043][T14623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'. [ 878.328990][T14623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'. [ 878.511484][ T5980] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 878.863564][ T5980] usb 10-1: unable to get BOS descriptor or descriptor too short [ 878.905534][ T5980] usb 10-1: not running at top speed; connect to a high speed hub [ 878.963846][ T5980] usb 10-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 879.087889][ T5980] usb 10-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 879.109237][ T5980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.117370][ T5980] usb 10-1: Product: syz [ 879.133110][ T5980] usb 10-1: Manufacturer: syz [ 879.146973][ T5980] usb 10-1: SerialNumber: syz [ 879.377990][ T5980] usb 10-1: USB disconnect, device number 5 [ 881.206308][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 881.460147][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2275'. [ 881.560562][T14664] vlan2: entered promiscuous mode [ 881.607260][T14664] syz_tun: entered promiscuous mode [ 881.650359][T14669] delete_channel: no stack [ 881.655802][T14664] vlan2: entered allmulticast mode [ 881.670000][T14664] syz_tun: entered allmulticast mode [ 881.709831][T14664] syz_tun: left allmulticast mode [ 881.720717][T14664] syz_tun: left promiscuous mode [ 882.148758][T14677] sg_write: process 483 (syz.7.2281) changed security contexts after opening file descriptor, this is not allowed. [ 884.122699][ T9740] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 884.749198][ T9740] usb 8-1: Using ep0 maxpacket: 16 [ 884.757397][ T9740] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.797003][ T9740] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 884.818872][ T9740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.826951][ T9740] usb 8-1: Product: syz [ 884.848897][ T9740] usb 8-1: Manufacturer: syz [ 884.853577][ T9740] usb 8-1: SerialNumber: syz [ 885.126144][ T9740] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input19 [ 885.186942][ T5179] bcm5974 8-1:1.0: could not read from device [ 885.231897][ T9740] usb 8-1: USB disconnect, device number 10 [ 885.245509][ T5179] bcm5974 8-1:1.0: could not read from device [ 885.331441][ T5119] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x21 [ 885.608893][T10726] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 885.779030][T10726] usb 9-1: Using ep0 maxpacket: 32 [ 885.795759][T10726] usb 9-1: config 18 has an invalid interface number: 83 but max is 0 [ 885.818158][T10726] usb 9-1: config 18 has no interface number 0 [ 886.031366][T10726] usb 9-1: config 18 interface 83 altsetting 0 endpoint 0xA has an invalid bInterval 92, changing to 7 [ 886.372584][T10726] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=ba.af [ 886.408302][T10726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.453804][T10726] usb 9-1: Product: syz [ 886.469242][T10726] usb 9-1: Manufacturer: syz [ 886.485257][T10726] usb 9-1: SerialNumber: syz [ 886.567059][T10726] usb_ehset_test 9-1:18.83: probe with driver usb_ehset_test failed with error -32 [ 886.737013][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.745820][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.781122][ T25] usb 9-1: USB disconnect, device number 7 [ 887.028930][T14737] netlink: 'syz.7.2298': attribute type 31 has an invalid length. [ 887.051336][T14737] syz_tun: entered promiscuous mode [ 889.387271][T14756] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2302'. [ 890.520437][T14762] ieee802154 phy0 wpan0: encryption failed: -22 [ 890.713399][T14767] @: renamed from vlan0 (while UP) [ 894.758461][T14794] netlink: 'syz.6.2314': attribute type 10 has an invalid length. [ 894.830497][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2314'. [ 894.862361][T14794] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 895.044896][ T9740] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 896.090308][ T9740] usb 8-1: Using ep0 maxpacket: 16 [ 896.106891][ T9740] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 896.118813][ T9740] usb 8-1: config 0 has no interface number 0 [ 896.189622][T14798] bond0: (slave bridge0): Releasing backup interface [ 896.647885][ T9740] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 896.679691][ T9740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.688901][ T9740] usb 8-1: Product: syz [ 896.693102][ T9740] usb 8-1: Manufacturer: syz [ 896.697796][ T9740] usb 8-1: SerialNumber: syz [ 896.713761][ T9740] usb 8-1: config 0 descriptor?? [ 896.724471][ T9740] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 896.759640][ T5908] hid (null): unknown global tag 0xd [ 896.765471][ T5908] hid (null): invalid report_count -437012996 [ 896.772000][ T5908] hid (null): unknown global tag 0xd [ 896.790606][ T5908] hid-generic 0081:0000:0006.0030: unexpected long global item [ 896.798648][ T5908] hid-generic 0081:0000:0006.0030: probe with driver hid-generic failed with error -22 [ 897.414966][T14797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.463451][T14797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.494156][ T9740] gspca_spca1528: reg_w err -71 [ 897.519944][ T9740] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 897.545276][ T9740] usb 8-1: USB disconnect, device number 11 [ 898.206345][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 898.206367][ T29] audit: type=1107 audit(1733842628.720:618): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 898.221274][T14824] dlm: no locking on control device [ 898.312324][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.346032][T14871] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 902.203007][T14868] 9pnet_fd: Insufficient options for proto=fd [ 902.563402][ T5907] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 902.740207][ T5907] usb 9-1: Using ep0 maxpacket: 16 [ 902.786332][ T5907] usb 9-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 902.801860][ T5907] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 902.867107][ T5907] usb 9-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.942304][ T5907] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 902.980571][ T5907] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 903.029157][ T5907] usb 9-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 903.079606][ T5907] usb 9-1: config 1 interface 0 has no altsetting 0 [ 903.100947][ T5907] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 903.131968][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 903.146531][ T5907] usb 9-1: SerialNumber: syz [ 903.288649][T14897] syz.7.2345[14897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 904.617443][T14881] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 904.638481][T14881] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 904.700537][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 904.747847][T14897] overlayfs: overlapping lowerdir path [ 904.755364][ T5907] usb 9-1: bad CDC descriptors [ 904.938136][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 904.968413][ T25] usb 5-1: config 0 has no interfaces? [ 905.004671][ T25] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=9f.31 [ 905.085096][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.128126][ T25] usb 5-1: Product: syz [ 905.153880][ T25] usb 5-1: Manufacturer: syz [ 905.181693][ T25] usb 5-1: SerialNumber: syz [ 905.243000][ T25] usb 5-1: config 0 descriptor?? [ 905.243403][ T5980] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 905.557656][ T5907] cdc_subset 9-1:1.0: probe with driver cdc_subset failed with error -71 [ 905.598962][ T5980] usb 8-1: Using ep0 maxpacket: 16 [ 905.604598][ T5907] usb 9-1: USB disconnect, device number 8 [ 905.618142][ T5980] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 905.640482][ T5980] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.651070][ T5980] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.663748][ T5980] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.699156][ T5980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.740012][ T5980] usb 8-1: Product: syz [ 905.744250][ T5980] usb 8-1: Manufacturer: syz [ 905.756752][ T5980] usb 8-1: SerialNumber: syz [ 905.960669][ T5907] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 906.029335][ T8] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 906.148900][ T5907] usb 9-1: Using ep0 maxpacket: 16 [ 906.157821][ T5907] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 906.166558][ T5907] usb 9-1: config 0 has no interface number 0 [ 906.176937][ T5907] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 906.187656][ T5980] usb 8-1: 0:2 : does not exist [ 906.200424][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 906.206410][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.215323][ T5907] usb 9-1: Product: syz [ 906.220201][ T5907] usb 9-1: Manufacturer: syz [ 906.225139][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 906.237568][ T5907] usb 9-1: SerialNumber: syz [ 906.244927][ T8] usb 7-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 906.255743][ T5907] usb 9-1: config 0 descriptor?? [ 906.261048][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.274244][ T5907] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 906.281098][ T8] usb 7-1: Product: syz [ 906.285313][ T8] usb 7-1: Manufacturer: syz [ 906.290420][ T8] usb 7-1: SerialNumber: syz [ 906.306385][ T8] usb 7-1: config 0 descriptor?? [ 906.478311][ T5907] gspca_spca1528: reg_w err -71 [ 906.498971][ T5907] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 906.524192][ T8] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 906.538886][ T5907] usb 9-1: USB disconnect, device number 9 [ 906.561811][ T8] usb 7-1: USB disconnect, device number 23 [ 906.614675][T10726] usb 5-1: USB disconnect, device number 48 [ 907.174704][ T5980] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 907.302984][ T5980] usb 8-1: USB disconnect, device number 12 [ 907.442192][T14930] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 907.460513][T14930] dccp_invalid_packet: P.Data Offset(100) too large [ 907.470874][T14933] dccp_invalid_packet: P.Data Offset(100) too large [ 908.284338][ T29] audit: type=1326 audit(1733842638.800:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5030d7ff19 code=0x7ffc0000 [ 908.356196][ T29] audit: type=1326 audit(1733842638.820:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5030d7ff19 code=0x7ffc0000 [ 908.377844][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.478816][ T29] audit: type=1326 audit(1733842638.830:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5030d81e37 code=0x7ffc0000 [ 908.500861][ T29] audit: type=1326 audit(1733842638.830:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5030d81dac code=0x7ffc0000 [ 908.523071][ T5980] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 908.576265][ T29] audit: type=1326 audit(1733842638.830:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5030d81ce4 code=0x7ffc0000 [ 908.650130][ T29] audit: type=1326 audit(1733842638.830:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5030d81ce4 code=0x7ffc0000 [ 908.700043][ T5980] usb 8-1: too many configurations: 189, using maximum allowed: 8 [ 908.719427][ T5980] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 908.735749][ T5980] usb 8-1: can't read configurations, error -61 [ 908.778880][ T29] audit: type=1326 audit(1733842638.830:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5030d7eb7a code=0x7ffc0000 [ 908.827064][ T29] audit: type=1326 audit(1733842638.830:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5030d7ff19 code=0x7ffc0000 [ 908.929025][ T29] audit: type=1326 audit(1733842638.830:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5030d7ff19 code=0x7ffc0000 [ 908.956909][ T5980] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 909.068695][ T29] audit: type=1326 audit(1733842638.830:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.8.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5030d7ff19 code=0x7ffc0000 [ 909.322942][ T5980] usb 8-1: too many configurations: 189, using maximum allowed: 8 [ 909.348009][ T5980] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 909.365555][ T5980] usb 8-1: can't read configurations, error -61 [ 909.387279][ T5980] usb usb8-port1: attempt power cycle [ 909.568529][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2365'. [ 909.739543][ T5980] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 909.808643][ T5980] usb 8-1: too many configurations: 189, using maximum allowed: 8 [ 909.825007][ T5980] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 909.846168][ T5980] usb 8-1: can't read configurations, error -61 [ 909.969153][T10726] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 909.998886][ T5980] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 910.033567][ T5980] usb 8-1: too many configurations: 189, using maximum allowed: 8 [ 910.069133][ T5980] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 910.088808][ T5980] usb 8-1: can't read configurations, error -61 [ 910.117955][ T5980] usb usb8-port1: unable to enumerate USB device [ 910.497095][T10726] usb 10-1: config index 0 descriptor too short (expected 283, got 27) [ 910.523557][T10726] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 910.807131][T10726] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.832087][T10726] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 910.902277][T10726] usb 10-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 910.949856][T10726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.980161][T10726] usb 10-1: Product: syz [ 911.000095][T10726] usb 10-1: Manufacturer: syz [ 911.004926][T10726] usb 10-1: SerialNumber: syz [ 911.031063][T10726] usb 10-1: config 0 descriptor?? [ 911.262770][T15002] netlink: 'syz.8.2375': attribute type 9 has an invalid length. [ 911.296718][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.317691][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.356724][ T5907] usb 10-1: USB disconnect, device number 6 [ 911.802858][T15006] fuse: Bad value for 'fd' [ 913.658998][T10726] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 913.839385][T10726] usb 10-1: Using ep0 maxpacket: 32 [ 914.330207][T10726] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.369846][T10726] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 914.414674][T10726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.449777][T10726] usb 10-1: config 0 descriptor?? [ 914.702684][T10726] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 914.729528][T10726] usb 10-1: Detected SIO [ 914.737786][T10726] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 914.855690][T15028] siw: device registration error -23 [ 914.866382][T15028] : renamed from lo (while UP) [ 915.532956][T10726] usb 10-1: USB disconnect, device number 7 [ 915.562576][T10726] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 915.586841][T10726] ftdi_sio 10-1:0.0: device disconnected [ 916.372346][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 916.407648][T15041] netlink: 'syz.4.2386': attribute type 10 has an invalid length. [ 916.654729][T15041] team0: Device hsr_slave_0 failed to register rx_handler [ 916.748391][T15060] syz.8.2390[15060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 916.749702][T15060] syz.8.2390[15060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.141584][T15060] syz.8.2390[15060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.326146][T15057] lo speed is unknown, defaulting to 1000 [ 918.507027][ T8] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 918.671933][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 918.712002][ T8] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 918.743580][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.767094][ T8] usb 5-1: Product: syz [ 918.772777][ T8] usb 5-1: Manufacturer: syz [ 918.779415][ T8] usb 5-1: SerialNumber: syz [ 918.791056][ T8] usb 5-1: config 0 descriptor?? [ 918.801169][ T8] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 919.035058][ T8] usb 5-1: USB disconnect, device number 49 [ 919.069086][ T5980] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 919.240311][ T5980] usb 8-1: Using ep0 maxpacket: 32 [ 919.247453][ T5980] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.258303][ T5980] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 919.268026][ T5980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.298267][ T5980] usb 8-1: config 0 descriptor?? [ 919.322613][ T5980] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 919.343324][ T5980] usb 8-1: Detected SIO [ 919.357128][ T5980] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 919.908929][ T5908] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 919.920435][ T9740] usb 8-1: USB disconnect, device number 17 [ 919.943515][ T9740] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 919.972263][ T9740] ftdi_sio 8-1:0.0: device disconnected [ 920.229313][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 921.044475][ T5908] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 921.051996][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 921.098275][ T5908] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.133340][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.168186][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 921.242537][ T5908] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 921.250141][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 921.261551][ T5908] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.274530][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.286518][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 921.307141][ T5908] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 921.316105][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 921.329106][ T5908] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.341874][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.353183][ T5908] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 921.396698][ T5908] usb 7-1: string descriptor 0 read error: -22 [ 921.408325][ T5908] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 921.418069][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.427178][T15102] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2406'. [ 921.455351][ T5908] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 922.668996][ T5908] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 922.689013][ T8] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 922.794460][ T5907] usb 7-1: USB disconnect, device number 24 [ 922.999452][T13783] Bluetooth: hci1: command 0x0405 tx timeout [ 923.089077][T15129] netlink: 'syz.4.2412': attribute type 10 has an invalid length. [ 923.504854][T15129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.515842][T15129] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 923.519045][ T5908] usb 10-1: Using ep0 maxpacket: 32 [ 923.524962][T15129] syz.4.2412 (15129) used greatest stack depth: 17808 bytes left [ 923.552525][ T5908] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.564966][ T8] usb 8-1: device descriptor read/64, error -71 [ 923.581454][ T5908] usb 10-1: config 0 has no interfaces? [ 923.587069][ T5908] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 923.597705][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.622631][ T5908] usb 10-1: config 0 descriptor?? [ 923.821796][ T8] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 923.888866][ T5908] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 924.179186][ T8] usb 8-1: device descriptor read/64, error -71 [ 924.198853][ T5908] usb 9-1: Using ep0 maxpacket: 8 [ 924.349960][ T8] usb usb8-port1: attempt power cycle [ 924.932391][ T5908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.965552][ T5908] usb 9-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=10.15 [ 925.029011][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.043824][ T5908] usb 9-1: Product: syz [ 925.048046][ T5908] usb 9-1: Manufacturer: syz [ 925.053134][ T5908] usb 9-1: SerialNumber: syz [ 925.083108][ T5908] usb 9-1: config 0 descriptor?? [ 925.088325][ T9] usb 10-1: USB disconnect, device number 8 [ 925.100057][ T5908] keyspan 9-1:0.0: Keyspan 1 port adapter converter detected [ 925.100215][ T5908] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87 [ 925.100273][ T5908] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 925.101044][ T5908] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 925.101100][ T5908] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 925.101149][ T5908] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 925.101201][ T5908] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85 [ 925.101253][ T5908] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5 [ 925.104123][ T5908] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 925.186516][ T5839] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 925.312091][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.321550][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.359833][T10726] usb 9-1: USB disconnect, device number 10 [ 925.391180][T10726] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 925.423430][T10726] keyspan 9-1:0.0: device disconnected [ 925.449033][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 925.500749][T15156] FAULT_INJECTION: forcing a failure. [ 925.500749][T15156] name failslab, interval 1, probability 0, space 0, times 0 [ 925.516649][T15156] CPU: 0 UID: 0 PID: 15156 Comm: syz.7.2421 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 925.527444][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 925.537529][T15156] Call Trace: [ 925.540826][T15156] [ 925.543761][T15156] dump_stack_lvl+0x241/0x360 [ 925.548449][T15156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.553654][T15156] ? __pfx__printk+0x10/0x10 [ 925.558338][T15156] ? fs_reclaim_acquire+0x93/0x130 [ 925.563466][T15156] ? __pfx___might_resched+0x10/0x10 [ 925.568774][T15156] should_fail_ex+0x3b0/0x4e0 [ 925.573491][T15156] should_failslab+0xac/0x100 [ 925.578199][T15156] __kmalloc_noprof+0xdd/0x4c0 [ 925.582966][T15156] ? kstrtouint_from_user+0x128/0x190 [ 925.588337][T15156] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 925.594060][T15156] tomoyo_realpath_from_path+0xcf/0x5e0 [ 925.599615][T15156] tomoyo_path_number_perm+0x236/0x860 [ 925.605073][T15156] ? __lock_acquire+0x1397/0x2100 [ 925.610118][T15156] ? tomoyo_path_number_perm+0x206/0x860 [ 925.615754][T15156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 925.621779][T15156] ? __fget_files+0x2a/0x410 [ 925.626378][T15156] ? __fget_files+0x2a/0x410 [ 925.630986][T15156] security_file_ioctl+0xc6/0x2a0 [ 925.636033][T15156] __se_sys_ioctl+0x46/0x170 [ 925.640645][T15156] do_syscall_64+0xf3/0x230 [ 925.645162][T15156] ? clear_bhb_loop+0x35/0x90 [ 925.649849][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.655752][T15156] RIP: 0033:0x7f9112d7ff19 [ 925.660189][T15156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.679895][T15156] RSP: 002b:00007f9113aa8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.688407][T15156] RAX: ffffffffffffffda RBX: 00007f9112f45fa0 RCX: 00007f9112d7ff19 [ 925.696407][T15156] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 925.704384][T15156] RBP: 00007f9113aa80a0 R08: 0000000000000000 R09: 0000000000000000 [ 925.712362][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.720333][T15156] R13: 0000000000000000 R14: 00007f9112f45fa0 R15: 00007ffc3504d338 [ 925.728321][T15156] [ 925.747801][T15156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 925.819018][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 925.833736][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.854149][ T9] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 925.866961][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.887740][ T9] usb 10-1: config 0 descriptor?? [ 925.915959][ T9] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 925.935246][ T9] usb 10-1: Detected SIO [ 925.946859][ T9] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 927.050588][T10726] usb 10-1: USB disconnect, device number 9 [ 927.198369][T10726] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 927.219022][T10726] ftdi_sio 10-1:0.0: device disconnected [ 929.543120][ T5839] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 929.767509][ T5839] Bluetooth: hci5: Injecting HCI hardware error event [ 929.776583][ T5839] Bluetooth: hci5: hardware error 0x00 [ 931.153631][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.109241][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 934.493860][T15228] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 935.192174][T15233] lo speed is unknown, defaulting to 1000 [ 935.279031][ T5824] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 935.453513][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 935.486811][ T5824] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 935.525904][ T5824] usb 7-1: config 0 has no interface number 0 [ 935.762347][ T5907] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 936.494520][ T5824] usb 7-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 936.504807][ T5824] usb 7-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 936.551987][ T5824] usb 7-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 937.511541][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.519712][ T5824] usb 7-1: Product: syz [ 937.523891][ T5824] usb 7-1: Manufacturer: syz [ 937.528600][ T5824] usb 7-1: SerialNumber: syz [ 937.558048][ T5824] usb 7-1: config 0 descriptor?? [ 937.579466][T15231] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 937.779486][T15231] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 938.437367][ T5907] usb 10-1: device descriptor read/all, error -71 [ 938.473935][ T5824] asix 7-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 938.485275][ T5824] asix 7-1:0.255: probe with driver asix failed with error -71 [ 938.497648][ T5824] usb 7-1: USB disconnect, device number 25 [ 939.560268][T15259] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2450'. [ 939.941190][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2457'. [ 940.162007][T15289] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 941.749763][T15303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.935055][T15303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.985888][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 943.781938][ T9] usb 9-1: device descriptor read/64, error -71 [ 944.119351][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 944.258858][ T9] usb 9-1: device descriptor read/64, error -71 [ 945.397670][ T9] usb usb9-port1: attempt power cycle [ 945.841449][T15325] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2467'. [ 947.989079][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2477'. [ 948.224434][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.460501][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.593817][T13783] Bluetooth: hci3: command 0x0406 tx timeout [ 948.974729][T15366] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2482'. [ 949.548457][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.815929][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.939016][ T5824] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 950.059192][T13783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 950.082441][T13783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 950.256853][T13783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 950.273555][T13783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 950.290056][T13783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 950.300754][T13783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 950.860445][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 950.861226][T15376] lo speed is unknown, defaulting to 1000 [ 950.872352][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 950.889359][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 950.900625][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 950.915252][ T12] bridge_slave_1: left allmulticast mode [ 950.922198][ T12] bridge_slave_1: left promiscuous mode [ 950.933427][ T5824] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 950.933629][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.946980][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.975272][ T5824] usb 5-1: config 0 descriptor?? [ 950.987477][T15370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 951.000777][ T12] bridge_slave_0: left allmulticast mode [ 951.006469][ T12] bridge_slave_0: left promiscuous mode [ 951.027273][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.043003][T15388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 951.151626][ T5907] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 951.330921][ T5907] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 951.342949][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.371313][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.382486][ T5907] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 951.410130][ T5907] usb 7-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 951.419374][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.473816][ T5907] usb 7-1: config 0 descriptor?? [ 951.506162][ T5824] usbhid 5-1:0.0: can't add hid device: -71 [ 951.541249][ T5824] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 951.598376][ T5824] usb 5-1: USB disconnect, device number 50 [ 952.073566][ T5907] kye 0003:0458:501B.0031: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 952.099497][ T5907] kye 0003:0458:501B.0031: unknown main item tag 0x0 [ 952.116129][ T5907] kye 0003:0458:501B.0031: unknown main item tag 0x0 [ 952.124459][ T5907] kye 0003:0458:501B.0031: unknown main item tag 0x0 [ 952.131790][ T5907] kye 0003:0458:501B.0031: unknown main item tag 0x0 [ 952.138523][ T5907] kye 0003:0458:501B.0031: unknown main item tag 0x0 [ 952.148297][ T5907] kye 0003:0458:501B.0031: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.6-1/input0 [ 952.162390][ T5907] kye 0003:0458:501B.0031: tablet-enabling feature report not found [ 952.170623][ T5907] kye 0003:0458:501B.0031: tablet enabling failed [ 952.307753][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2487'. [ 952.338198][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.347054][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.358002][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.358310][ T9] usb 7-1: USB disconnect, device number 26 [ 952.375861][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.388149][ T12] bond0 (unregistering): Released all slaves [ 952.428948][T13783] Bluetooth: hci1: command tx timeout [ 952.499035][ T5907] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 952.559805][ T12] tipc: Left network mode [ 952.627546][T15376] chnl_net:caif_netlink_parms(): no params data found [ 952.671090][ T5907] usb 8-1: Using ep0 maxpacket: 8 [ 952.678433][ T5907] usb 8-1: unable to get BOS descriptor or descriptor too short [ 952.701293][ T5907] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.718541][ T5907] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 952.727857][ T5907] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 952.744647][ T5907] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.754437][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.763045][ T5907] usb 8-1: Product: syz [ 952.767559][ T5907] usb 8-1: Manufacturer: syz [ 952.772233][ T5907] usb 8-1: SerialNumber: syz [ 952.840611][T15412] Invalid logical block size (8192) [ 952.933149][ T9740] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 953.171178][ T5907] cdc_ncm 8-1:1.0: invalid descriptor buffer length [ 953.249240][ T9740] usb 5-1: Using ep0 maxpacket: 32 [ 953.262771][ T5907] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 953.281934][ T5907] cdc_ncm 8-1:1.0: bind() failure [ 953.290468][ T9740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.317025][ T5907] usb 8-1: USB disconnect, device number 21 [ 953.323138][ T9740] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 953.323170][ T9740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.325138][ T9740] usb 5-1: config 0 descriptor?? [ 953.351615][ T9740] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 953.360275][ T9740] usb 5-1: Detected SIO [ 953.368465][ T9740] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 953.516050][T15376] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.530011][T15376] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.537269][T15376] bridge_slave_0: entered allmulticast mode [ 953.557676][T15376] bridge_slave_0: entered promiscuous mode [ 953.561199][T15424] netlink: 'syz.6.2498': attribute type 12 has an invalid length. [ 953.571020][T15376] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.590977][T15376] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.598190][T15376] bridge_slave_1: entered allmulticast mode [ 953.605618][T15376] bridge_slave_1: entered promiscuous mode [ 953.634629][T15419] sch_tbf: peakrate 7 is lower than or equals to rate 62733 ! [ 953.901578][T15376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.954736][T15376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.419325][ T12] hsr_slave_0: left promiscuous mode [ 954.427848][ T12] hsr_slave_1: left promiscuous mode [ 954.465877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.478433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.496259][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.509003][T13783] Bluetooth: hci1: command tx timeout [ 954.522364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.611545][ T12] veth1_macvtap: left promiscuous mode [ 954.631395][ T12] veth0_macvtap: left promiscuous mode [ 954.650357][ T12] veth1_vlan: left promiscuous mode [ 954.667122][ T12] veth0_vlan: left promiscuous mode [ 955.342229][ T5824] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 955.466900][ T12] team0 (unregistering): Port device team_slave_1 removed [ 955.525374][ T5824] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 955.537495][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 955.550997][ T12] team0 (unregistering): Port device team_slave_0 removed [ 955.571080][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 955.582870][ T5824] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 955.605585][ T5824] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 955.615191][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.645877][ T5824] usb 8-1: config 0 descriptor?? [ 955.651722][T15443] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 956.267648][ T5824] usbhid 8-1:0.0: can't add hid device: -71 [ 956.286077][ T5824] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 956.570304][ T5824] usb 8-1: USB disconnect, device number 22 [ 956.589037][T13783] Bluetooth: hci1: command tx timeout [ 956.735084][ T9740] usb 5-1: USB disconnect, device number 51 [ 956.735936][T15376] team0: Port device team_slave_0 added [ 956.772337][ T9740] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 956.782264][T15376] team0: Port device team_slave_1 added [ 956.945002][ T9740] ftdi_sio 5-1:0.0: device disconnected [ 957.036092][T15376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.060267][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.114126][T15376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.143928][T15376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.184716][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.210684][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.244885][T15376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.432584][T15376] hsr_slave_0: entered promiscuous mode [ 957.448418][T15376] hsr_slave_1: entered promiscuous mode [ 957.457981][T15376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.481663][T15376] Cannot create hsr debugfs directory [ 958.669420][T13783] Bluetooth: hci1: command tx timeout [ 958.798290][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 958.981231][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 958.999307][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 959.025292][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 959.045438][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.074059][T15476] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 959.087378][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 959.279527][ T9740] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 959.360036][ T9] usb 8-1: USB disconnect, device number 23 [ 959.438991][ T9740] usb 5-1: Using ep0 maxpacket: 32 [ 959.461517][ T9740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.481803][ T9740] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 959.503076][ T9740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.518086][ T9740] usb 5-1: config 0 descriptor?? [ 959.541358][ T9740] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 959.557116][ T9740] usb 5-1: Detected SIO [ 959.563010][ T9740] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 959.589004][ T25] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 959.674420][T15376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 959.687142][T15376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 959.697758][T15376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 959.707981][T15376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 959.729512][ T25] usb 7-1: device descriptor read/64, error -71 [ 959.781687][ T5908] usb 5-1: USB disconnect, device number 52 [ 959.795870][ T5908] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 959.821141][ T5908] ftdi_sio 5-1:0.0: device disconnected [ 959.883450][T15376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.927783][T15376] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.952044][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.959266][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.988942][ T25] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 960.012950][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.020139][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.159804][ T25] usb 7-1: device descriptor read/64, error -71 [ 960.279548][ T25] usb usb7-port1: attempt power cycle [ 960.309190][ T5824] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 960.450537][T15547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2521'. [ 960.489440][T15547] tipc: Invalid UDP bearer configuration [ 960.489489][T15547] tipc: Enabling of bearer rejected, failed to enable media [ 960.522783][ T5824] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.552020][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 960.572465][T15376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.593268][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 960.631881][ T5824] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 960.645279][ T25] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 960.684779][ T25] usb 7-1: device descriptor read/8, error -71 [ 960.694634][T15376] veth0_vlan: entered promiscuous mode [ 960.701215][ T5824] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.722623][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.745529][T15376] veth1_vlan: entered promiscuous mode [ 960.758030][ T5824] usb 10-1: config 0 descriptor?? [ 960.787853][T15529] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 960.851157][T15554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2522'. [ 960.870484][T15376] veth0_macvtap: entered promiscuous mode [ 960.889647][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2522'. [ 960.901897][T15376] veth1_macvtap: entered promiscuous mode [ 960.949177][ T25] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 960.974710][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.990028][ T25] usb 7-1: device descriptor read/8, error -71 [ 961.012926][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.035495][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.084438][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.109860][ T25] usb usb7-port1: unable to enumerate USB device [ 961.140448][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.183136][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.220567][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.320291][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.364979][ T5824] usbhid 10-1:0.0: can't add hid device: -71 [ 961.380619][ T5824] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 961.475057][T15376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.493546][ T5824] usb 10-1: USB disconnect, device number 12 [ 963.033278][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.044442][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.055275][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.068711][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.086532][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.097465][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.108487][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.129732][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.335653][T15376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.937444][T15376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.159289][T15376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.214362][T15376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.268956][T15376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.540545][ T7720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.558916][ T7720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.646162][ T7720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.692520][ T7720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.060335][T15609] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2479'. [ 967.504471][T15633] overlayfs: missing 'workdir' [ 967.570350][T15633] netlink: 'syz.4.2533': attribute type 10 has an invalid length. [ 967.604034][T15638] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 967.729844][T15631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.825509][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 967.879058][ T5908] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 967.985548][T15648] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 968.010004][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.029332][T15648] overlayfs: failed to set xattr on upper [ 968.037680][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 968.049864][ T5908] usb 3-1: No LPM exit latency info found, disabling LPM. [ 968.068061][T15648] overlayfs: ...falling back to redirect_dir=nofollow. [ 968.076915][ T5908] usb 3-1: config 0 has no interfaces? [ 968.082975][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 968.094757][T15648] overlayfs: ...falling back to index=off. [ 968.101435][T15648] overlayfs: ...falling back to uuid=null. [ 968.107731][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 968.124168][ T5908] usb 3-1: string descriptor 0 read error: -22 [ 968.130582][ T5908] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 968.141419][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.151711][ T5908] usb 3-1: config 0 descriptor?? [ 968.167714][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 968.181767][T15648] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 968.192230][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.200441][T15648] overlayfs: failed to set xattr on upper [ 968.206194][T15648] overlayfs: ...falling back to redirect_dir=nofollow. [ 968.215576][ T9] usb 7-1: config 0 descriptor?? [ 968.220688][T15648] overlayfs: ...falling back to index=off. [ 968.227625][T15648] overlayfs: ...falling back to uuid=null. [ 968.234064][T15634] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 968.247198][T15648] overlayfs: ...falling back to xino=off. [ 968.253347][T15648] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 968.274683][T15648] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 968.310491][T15648] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 968.432649][T15638] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2535'. [ 968.454863][T15657] 9pnet_fd: Insufficient options for proto=fd [ 968.474587][T15511] usb 3-1: USB disconnect, device number 5 [ 968.742662][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 968.860135][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 969.165387][ T9] usb 7-1: USB disconnect, device number 31 [ 969.277607][T15670] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2540'. [ 972.926359][T15713] sctp: [Deprecated]: syz.6.2548 (pid 15713) Use of int in maxseg socket option. [ 972.926359][T15713] Use struct sctp_assoc_value instead [ 973.034571][T15713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2548'. [ 973.862373][T15730] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2553'. [ 974.306524][T15745] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2554'. [ 974.575224][T15745] netlink: 'syz.2.2554': attribute type 11 has an invalid length. [ 974.881660][T15737] 9pnet_fd: p9_fd_create_tcp (15737): problem connecting socket to 127.0.0.1 [ 975.451869][T15773] can: request_module (can-proto-0) failed. [ 975.459726][T15773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2560'. [ 975.479289][ T5824] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 975.489041][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 975.638987][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 975.659768][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 975.660077][ T5824] usb 3-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 975.669145][ T9] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 975.697959][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.722137][ T9] usb 8-1: config 0 descriptor?? [ 975.722406][ T5824] usb 3-1: config 1 interface 0 has no altsetting 0 [ 975.759857][ T5824] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 975.795911][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 975.814683][ T5824] usb 3-1: SerialNumber: syz [ 975.833638][ T5824] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 976.467864][T15749] bridge0: port 3(gretap0) entered blocking state [ 976.564165][T15749] bridge0: port 3(gretap0) entered disabled state [ 976.646280][T15749] gretap0: entered allmulticast mode [ 976.703482][T15749] gretap0: entered promiscuous mode [ 976.727703][T15749] bridge0: port 3(gretap0) entered blocking state [ 976.735075][T15749] bridge0: port 3(gretap0) entered forwarding state [ 976.840525][ T25] usb 3-1: USB disconnect, device number 6 [ 976.893580][ T9] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 976.903727][ T9] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 976.929150][ T9] asix 8-1:0.0: probe with driver asix failed with error -71 [ 977.885392][ T9] usb 8-1: USB disconnect, device number 24 [ 982.932252][T15869] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2578'. [ 986.600619][ T5824] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 986.659578][ T5908] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 986.778521][ T5824] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.880786][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 987.001235][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 987.067728][T15908] loop8: detected capacity change from 0 to 7 [ 987.069249][ T5824] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 987.089541][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 987.110422][T15908] Dev loop8: unable to read RDB block 7 [ 987.121162][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.142203][T15908] loop8: unable to read partition table [ 987.148047][ T5824] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 987.162460][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 987.167629][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.197483][T15908] loop8: partition table beyond EOD, truncated [ 987.214783][T15908] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 987.214783][T15908] ) failed (rc=-5) [ 987.230357][ T5824] usb 10-1: config 0 descriptor?? [ 987.236113][T15903] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 987.237863][ T5908] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 987.282160][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.291083][T15914] 9pnet_fd: Insufficient options for proto=fd [ 987.307547][ T5908] usb 5-1: config 0 descriptor?? [ 987.509272][ T5980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 987.605643][T15928] FAULT_INJECTION: forcing a failure. [ 987.605643][T15928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.620237][T15928] CPU: 1 UID: 0 PID: 15928 Comm: syz.7.2591 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 987.631142][T15928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 987.641226][T15928] Call Trace: [ 987.644537][T15928] [ 987.647496][T15928] dump_stack_lvl+0x241/0x360 [ 987.652219][T15928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.657461][T15928] ? __pfx__printk+0x10/0x10 [ 987.662101][T15928] ? __pfx_lock_release+0x10/0x10 [ 987.667191][T15928] ? __lock_acquire+0x1397/0x2100 [ 987.672262][T15928] should_fail_ex+0x3b0/0x4e0 [ 987.676999][T15928] _copy_from_user+0x2f/0xc0 [ 987.681640][T15928] kstrtouint_from_user+0xc6/0x190 [ 987.686794][T15928] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 987.692580][T15928] ? __pfx_lock_acquire+0x10/0x10 [ 987.697742][T15928] proc_fail_nth_write+0xaa/0x2d0 [ 987.702810][T15928] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 987.708761][T15928] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 987.714448][T15928] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 987.720141][T15928] vfs_write+0x2a3/0xd30 [ 987.724430][T15928] ? __pfx_vfs_write+0x10/0x10 [ 987.729230][T15928] ? __fget_files+0x2a/0x410 [ 987.729247][ T5980] usb 3-1: Using ep0 maxpacket: 16 [ 987.733826][T15928] ? __fget_files+0x395/0x410 [ 987.733878][T15928] ? __fget_files+0x2a/0x410 [ 987.733911][T15928] ksys_write+0x18f/0x2b0 [ 987.752637][T15928] ? __pfx_ksys_write+0x10/0x10 [ 987.757508][T15928] ? do_syscall_64+0x100/0x230 [ 987.762295][T15928] ? do_syscall_64+0xb6/0x230 [ 987.766988][T15928] do_syscall_64+0xf3/0x230 [ 987.771508][T15928] ? clear_bhb_loop+0x35/0x90 [ 987.776207][T15928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.782127][T15928] RIP: 0033:0x7f9112d7e9cf [ 987.786556][T15928] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 987.806185][T15928] RSP: 002b:00007f9113aa8050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 987.814617][T15928] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9112d7e9cf [ 987.822592][T15928] RDX: 0000000000000001 RSI: 00007f9113aa80b0 RDI: 0000000000000004 [ 987.830565][T15928] RBP: 00007f9113aa80a0 R08: 0000000000000000 R09: 0000000000000000 [ 987.838537][T15928] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 987.846560][T15928] R13: 0000000000000000 R14: 00007f9112f45fa0 R15: 00007ffc3504d338 [ 987.854573][T15928] [ 987.857617][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.910776][ T5980] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 987.927820][ T5980] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 988.051030][ T5824] usbhid 10-1:0.0: can't add hid device: -71 [ 988.058287][ T5824] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 988.153865][ T5824] usb 10-1: USB disconnect, device number 13 [ 988.448828][ T5980] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 988.531851][ T5980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.541472][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.549625][ T5980] usb 3-1: Product: syz [ 988.553870][ T5980] usb 3-1: Manufacturer: syz [ 988.558511][ T5980] usb 3-1: SerialNumber: syz [ 989.065033][T15941] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2593'. [ 989.689638][ T5980] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 989.731343][ T5980] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 989.778451][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 989.785229][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 989.801799][ T5908] usb 5-1: USB disconnect, device number 53 [ 989.828523][ T5980] usb 3-1: USB disconnect, device number 7 [ 990.449016][ T5908] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 990.678951][ T5908] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 990.762014][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.840711][ T5908] usb 5-1: config 0 descriptor?? [ 990.923076][T15961] pim6reg: entered allmulticast mode [ 990.971084][T15961] pim6reg: left allmulticast mode [ 991.090482][T15968] 9pnet_fd: Insufficient options for proto=fd [ 992.312538][T15993] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2604'. [ 992.391595][ T5908] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 992.604768][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.660909][ T5908] usb 5-1: USB disconnect, device number 54 [ 992.981046][T15997] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2607'. [ 993.109671][T16011] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 993.199084][T16011] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 993.208291][T16011] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 993.217210][T16011] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 993.375044][T16024] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 994.237144][ T9740] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 994.305679][T16021] ebtables: ebtables: counters copy to user failed while replacing table [ 994.731352][ T9740] usb 5-1: Using ep0 maxpacket: 16 [ 994.740014][ T9740] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 994.751666][ T9740] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 994.769362][ T9740] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 994.844248][ T9740] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 994.931434][T16053] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2616'. [ 995.004199][ T9740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.136551][ T9740] usb 5-1: Product: syz [ 995.247977][ T9740] usb 5-1: Manufacturer: syz [ 995.399523][ T9740] usb 5-1: SerialNumber: syz [ 1100.998722][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1101.005736][ C0] rcu: 1-...!: (1 GPs behind) idle=a7c4/1/0x4000000000000000 softirq=59810/59811 fqs=0 [ 1101.017133][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16072/1:b..l [ 1101.025164][ C0] rcu: (detected by 0, t=10505 jiffies, g=64237, q=520 ncpus=2) [ 1101.032907][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1101.032946][ C1] NMI backtrace for cpu 1 [ 1101.032962][ C1] CPU: 1 UID: 0 PID: 16065 Comm: syz.9.2620 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1101.032982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1101.032993][ C1] RIP: 0010:check_preemption_disabled+0x7/0x120 [ 1101.033027][ C1] Code: c6 e0 c2 5e 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 <48> 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d 1c [ 1101.033042][ C1] RSP: 0018:ffffc90000a18af8 EFLAGS: 00000046 [ 1101.033057][ C1] RAX: ffffffff93ddd750 RBX: 0000000000000046 RCX: ffffffff817ac0d0 [ 1101.033069][ C1] RDX: 0000000000000000 RSI: ffffffff8c0aa4a0 RDI: ffffffff8c5ec300 [ 1101.033082][ C1] RBP: ffffc90000a18c50 R08: ffffffff90183af7 R09: 1ffffffff203075e [ 1101.033095][ C1] R10: dffffc0000000000 R11: fffffbfff203075f R12: 1ffff92000143170 [ 1101.033119][ C1] R13: ffffffff89c57054 R14: ffffc90000a18bd0 R15: dffffc0000000000 [ 1101.033131][ C1] FS: 00007f4b6ef1a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1101.033146][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1101.033157][ C1] CR2: 000000110c330aa3 CR3: 0000000072372000 CR4: 00000000003526f0 [ 1101.033171][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1101.033181][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1101.033192][ C1] Call Trace: [ 1101.033199][ C1] [ 1101.033207][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1101.033235][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1101.033263][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1101.033290][ C1] ? nmi_handle+0x2a/0x5a0 [ 1101.033327][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1101.033359][ C1] ? nmi_handle+0x14f/0x5a0 [ 1101.033384][ C1] ? nmi_handle+0x2a/0x5a0 [ 1101.033426][ C1] ? check_preemption_disabled+0x7/0x120 [ 1101.033451][ C1] ? default_do_nmi+0x63/0x160 [ 1101.033469][ C1] ? exc_nmi+0x123/0x1f0 [ 1101.033486][ C1] ? end_repeat_nmi+0xf/0x53 [ 1101.033511][ C1] ? advance_sched+0x9b4/0xca0 [ 1101.033533][ C1] ? lock_release+0xb0/0xa30 [ 1101.033551][ C1] ? check_preemption_disabled+0x7/0x120 [ 1101.033577][ C1] ? check_preemption_disabled+0x7/0x120 [ 1101.033603][ C1] ? check_preemption_disabled+0x7/0x120 [ 1101.033628][ C1] [ 1101.033634][ C1] [ 1101.033641][ C1] lock_release+0x1bc/0xa30 [ 1101.033662][ C1] ? advance_sched+0x9b4/0xca0 [ 1101.033680][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1101.033704][ C1] ? __pfx_lock_release+0x10/0x10 [ 1101.033726][ C1] ? taprio_set_budgets+0x32c/0x370 [ 1101.033747][ C1] _raw_spin_unlock+0x16/0x50 [ 1101.033768][ C1] advance_sched+0x9b4/0xca0 [ 1101.033793][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1101.033812][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 1101.033850][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1101.033871][ C1] ? sched_clock+0x4a/0x70 [ 1101.033895][ C1] ? read_tsc+0x9/0x20 [ 1101.033917][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1101.033939][ C1] hrtimer_interrupt+0x403/0xa40 [ 1101.033972][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1101.033993][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1101.034015][ C1] [ 1101.034021][ C1] [ 1101.034028][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1101.034053][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0x74/0x120 [ 1101.034081][ C1] Code: ff df 48 8d 1c dd 90 ea 2c 8e 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 16 dc 7d 00 48 8b 03 48 8d 98 00 f7 03 00 <48> 8d b8 20 f7 03 00 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 [ 1101.034095][ C1] RSP: 0018:ffffc900052ae810 EFLAGS: 00000246 [ 1101.034109][ C1] RAX: ffff8880b8700000 RBX: ffff8880b873f700 RCX: 0000000080000000 [ 1101.034122][ C1] RDX: 0000000000000000 RSI: ffffffff8c5ec2e0 RDI: ffffffff8c5ec2a0 [ 1101.034135][ C1] RBP: 00000000000002e0 R08: ffffffff820eb46e R09: 1ffffffff284db10 [ 1101.034147][ C1] R10: dffffc0000000000 R11: fffffbfff284db11 R12: 00000000000b86d7 [ 1101.034160][ C1] R13: ffffea0002e1b5c0 R14: dffffc0000000000 R15: ffff88801d280000 [ 1101.034176][ C1] ? page_ext_get+0xee/0x2a0 [ 1101.034204][ C1] ? page_ext_get+0x20/0x2a0 [ 1101.034226][ C1] rcu_read_lock_held+0x1e/0x50 [ 1101.034249][ C1] page_ext_get+0x192/0x2a0 [ 1101.034273][ C1] __reset_page_owner+0x30/0x430 [ 1101.034295][ C1] ? page_ext_get+0x1d6/0x2a0 [ 1101.034321][ C1] free_unref_folios+0xe23/0x1890 [ 1101.034350][ C1] shrink_folio_list+0x41b1/0x57e0 [ 1101.034386][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 1101.034406][ C1] ? mark_lock+0x9a/0x360 [ 1101.034426][ C1] ? __lock_acquire+0x1397/0x2100 [ 1101.034444][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1101.034483][ C1] ? mark_lock+0x9a/0x360 [ 1101.034503][ C1] ? __lock_acquire+0x1397/0x2100 [ 1101.034531][ C1] ? mark_lock+0x9a/0x360 [ 1101.034552][ C1] ? __lock_acquire+0x1397/0x2100 [ 1101.034577][ C1] reclaim_folio_list+0x142/0x600 [ 1101.034595][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 1101.034619][ C1] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1101.034638][ C1] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 1101.034659][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1101.034694][ C1] reclaim_pages+0x49e/0x5e0 [ 1101.034714][ C1] ? __pfx_reclaim_pages+0x10/0x10 [ 1101.034731][ C1] ? folio_isolate_lru+0x667/0x820 [ 1101.034750][ C1] madvise_cold_or_pageout_pte_range+0x1ea8/0x2360 [ 1101.034769][ C1] ? mark_lock+0x9a/0x360 [ 1101.034797][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1101.034823][ C1] ? mt_find+0x2a9/0x920 [ 1101.034854][ C1] walk_pgd_range+0xc3d/0x17e0 [ 1101.034883][ C1] ? __pfx_walk_pgd_range+0x10/0x10 [ 1101.034905][ C1] __walk_page_range+0x15f/0x700 [ 1101.034923][ C1] ? find_vma+0xf9/0x170 [ 1101.034941][ C1] ? __pfx_find_vma+0x10/0x10 [ 1101.034962][ C1] ? process_vma_walk_lock+0x135/0x390 [ 1101.034980][ C1] walk_page_range_mm+0x58f/0x7c0 [ 1101.035001][ C1] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1101.035019][ C1] ? handle_pte_fault+0x4776/0x5ed0 [ 1101.035043][ C1] ? tlb_gather_mmu+0x24e/0x310 [ 1101.035066][ C1] ? walk_page_range+0x6a/0x90 [ 1101.035083][ C1] do_madvise+0x391c/0x4d10 [ 1101.035115][ C1] ? __pfx_do_madvise+0x10/0x10 [ 1101.035131][ C1] ? mark_lock+0x9a/0x360 [ 1101.035151][ C1] ? count_memcg_event_mm+0x94/0x420 [ 1101.035169][ C1] ? __pfx_lock_release+0x10/0x10 [ 1101.035188][ C1] ? mark_lock+0x9a/0x360 [ 1101.035208][ C1] ? __lock_acquire+0x1397/0x2100 [ 1101.035242][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1101.035274][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1101.035296][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1101.035314][ C1] ? exc_page_fault+0x590/0x8b0 [ 1101.035337][ C1] __x64_sys_madvise+0xa6/0xc0 [ 1101.035355][ C1] do_syscall_64+0xf3/0x230 [ 1101.035379][ C1] ? clear_bhb_loop+0x35/0x90 [ 1101.035404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.035427][ C1] RIP: 0033:0x7f4b6e17ff19 [ 1101.035444][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.035458][ C1] RSP: 002b:00007f4b6ef1a058 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1101.035474][ C1] RAX: ffffffffffffffda RBX: 00007f4b6e346080 RCX: 00007f4b6e17ff19 [ 1101.035487][ C1] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000000020000000 [ 1101.035498][ C1] RBP: 00007f4b6e1f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1101.035509][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.035520][ C1] R13: 0000000000000001 R14: 00007f4b6e346080 R15: 00007ffe863863b8 [ 1101.035539][ C1] [ 1101.035939][ C0] task:cmp state:R running task stack:22416 pid:16072 tgid:16072 ppid:16046 flags:0x00004002 [ 1101.792285][ C0] Call Trace: [ 1101.795589][ C0] [ 1101.798540][ C0] __schedule+0x17fb/0x4be0 [ 1101.803100][ C0] ? __pfx___schedule+0x10/0x10 [ 1101.807978][ C0] ? mark_lock+0x9a/0x360 [ 1101.812359][ C0] ? preempt_schedule+0xe1/0xf0 [ 1101.817249][ C0] preempt_schedule_common+0x84/0xd0 [ 1101.822602][ C0] preempt_schedule+0xe1/0xf0 [ 1101.827319][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1101.832730][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1101.838666][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1101.843905][ C0] _raw_spin_unlock+0x3e/0x50 [ 1101.848610][ C0] unmap_page_range+0x36c3/0x4040 [ 1101.853695][ C0] ? __lock_acquire+0x1397/0x2100 [ 1101.858797][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1101.864217][ C0] ? mas_next_slot+0xdc6/0xea0 [ 1101.869020][ C0] ? uprobe_munmap+0x183/0x460 [ 1101.873822][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 1101.878893][ C0] unmap_vmas+0x3cc/0x5f0 [ 1101.883263][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1101.888173][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 1101.893672][ C0] exit_mmap+0x275/0xc20 [ 1101.897955][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1101.902764][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1101.907497][ C0] ? uprobe_clear_state+0x271/0x290 [ 1101.912721][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 1101.918032][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1101.923263][ C0] __mmput+0x115/0x3b0 [ 1101.927371][ C0] exit_mm+0x220/0x310 [ 1101.931469][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1101.936082][ C0] ? hrtimer_try_to_cancel+0x3d1/0x410 [ 1101.941568][ C0] ? taskstats_exit+0x326/0xa60 [ 1101.946474][ C0] do_exit+0x9b2/0x28e0 [ 1101.950678][ C0] ? __pfx_do_exit+0x10/0x10 [ 1101.955295][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1101.961309][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1101.967678][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.972911][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1101.978147][ C0] do_group_exit+0x207/0x2c0 [ 1101.982772][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1101.987906][ C0] x64_sys_call+0x26a8/0x26b0 [ 1101.992613][ C0] do_syscall_64+0xf3/0x230 [ 1101.997147][ C0] ? clear_bhb_loop+0x35/0x90 [ 1102.001858][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.007783][ C0] RIP: 0033:0x7fd8602b7a90 [ 1102.012222][ C0] RSP: 002b:00007ffd22322128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1102.020662][ C0] RAX: ffffffffffffffda RBX: 00007fd8603a8860 RCX: 00007fd8602b7a90 [ 1102.028653][ C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 1102.036665][ C0] RBP: 00007fd8603a8860 R08: 00007ffd22321fa0 R09: 00007ffd22322080 [ 1102.044829][ C0] R10: 00007ffd22321fe0 R11: 0000000000000246 R12: 0000000000000000 [ 1102.052838][ C0] R13: 0000000000000000 R14: 00007fd8603ac658 R15: 0000000000000001 [ 1102.060844][ C0] [ 1102.063882][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g64237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1102.075096][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1102.085077][ C0] rcu: RCU grace-period kthread stack dump: [ 1102.090974][ C0] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1102.102751][ C0] Call Trace: [ 1102.106046][ C0] [ 1102.108997][ C0] __schedule+0x17fb/0x4be0 [ 1102.113551][ C0] ? __pfx___schedule+0x10/0x10 [ 1102.118441][ C0] ? __pfx_lock_release+0x10/0x10 [ 1102.123501][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1102.129879][ C0] ? schedule+0x90/0x320 [ 1102.134142][ C0] schedule+0x14b/0x320 [ 1102.138322][ C0] schedule_timeout+0x15a/0x290 [ 1102.143192][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1102.148591][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1102.153906][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1102.159479][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1102.164354][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1102.169571][ C0] ? rcu_gp_init+0x1256/0x1630 [ 1102.174375][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1102.179326][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1102.185267][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1102.190567][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1102.196487][ C0] ? finish_swait+0xd4/0x1e0 [ 1102.201109][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1102.205729][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1102.210948][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1102.216867][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1102.221920][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1102.227152][ C0] kthread+0x2f0/0x390 [ 1102.231245][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1102.236468][ C0] ? __pfx_kthread+0x10/0x10 [ 1102.241086][ C0] ret_from_fork+0x4b/0x80 [ 1102.245543][ C0] ? __pfx_kthread+0x10/0x10 [ 1102.250154][ C0] ret_from_fork_asm+0x1a/0x30 [ 1102.254959][ C0] [ 1102.257990][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1102.264321][ C0] CPU: 0 UID: 0 PID: 16058 Comm: syz.2.2621 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1102.275091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1102.285161][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 1102.291948][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 1102.311572][ C0] RSP: 0018:ffffc9000446f900 EFLAGS: 00000293 [ 1102.317661][ C0] RAX: ffffffff8193790b RBX: 1ffff110170e88b9 RCX: ffff88802c875a00 [ 1102.325654][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1102.333648][ C0] RBP: ffffc9000446fb00 R08: ffffffff819378da R09: 1ffffffff284db10 [ 1102.341645][ C0] R10: dffffc0000000000 R11: fffffbfff284db11 R12: dffffc0000000000 [ 1102.349640][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 1102.357639][ C0] FS: 0000555593edb500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1102.366593][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1102.373199][ C0] CR2: 00007fd8601f9440 CR3: 0000000057b82000 CR4: 00000000003526f0 [ 1102.381195][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1102.389184][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1102.397171][ C0] Call Trace: [ 1102.400493][ C0] [ 1102.403379][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1102.409742][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1102.415414][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1102.421244][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 1102.426651][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1102.432927][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1102.438337][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1102.444020][ C0] ? update_process_times+0x242/0x2f0 [ 1102.449417][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1102.454576][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1102.460061][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1102.465475][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1102.471230][ C0] ? sched_clock+0x4a/0x70 [ 1102.475700][ C0] ? read_tsc+0x9/0x20 [ 1102.479796][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1102.485911][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1102.491079][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1102.497265][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1102.503094][ C0] [ 1102.506041][ C0] [ 1102.508992][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1102.515179][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1102.521362][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 1102.527551][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 1102.533749][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1102.538812][ C0] ? __pfx___text_poke+0x10/0x10 [ 1102.543802][ C0] ? __pfx___might_resched+0x10/0x10 [ 1102.549132][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1102.555486][ C0] ? __pfx___might_resched+0x10/0x10 [ 1102.560817][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1102.565881][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1102.571022][ C0] text_poke_bp_batch+0x352/0xb30 [ 1102.576082][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1102.582094][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1102.587486][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1102.593065][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1102.599334][ C0] ? __jump_label_update+0x379/0x3a0 [ 1102.604651][ C0] text_poke_finish+0x30/0x50 [ 1102.609358][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1102.615372][ C0] __static_key_slow_dec_cpuslocked+0xc4/0x110 [ 1102.621566][ C0] static_key_slow_dec+0x51/0xa0 [ 1102.626532][ C0] kvm_put_kvm+0xd6a/0xf60 [ 1102.630980][ C0] kvm_vm_release+0x43/0x50 [ 1102.635504][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 1102.640715][ C0] __fput+0x23c/0xa50 [ 1102.644727][ C0] task_work_run+0x24f/0x310 [ 1102.649353][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1102.654237][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1102.659371][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1102.665118][ C0] syscall_exit_to_user_mode+0x13f/0x340 [ 1102.670787][ C0] do_syscall_64+0x100/0x230 [ 1102.675401][ C0] ? clear_bhb_loop+0x35/0x90 [ 1102.680127][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.686045][ C0] RIP: 0033:0x7f4787d7ff19 [ 1102.690478][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.710107][ C0] RSP: 002b:00007ffcce5433e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1102.718542][ C0] RAX: 0000000000000000 RBX: 00000000000f32f4 RCX: 00007f4787d7ff19 [ 1102.726526][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1102.734513][ C0] RBP: 00007f4787f47ba0 R08: 0000000000000001 R09: 00007ffcce5436cf [ 1102.742529][ C0] R10: 00007f4787c00000 R11: 0000000000000246 R12: 00000000000f338b [ 1102.750522][ C0] R13: 00007f4787f45fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 1102.758537][ C0]