last executing test programs: 5m43.877564521s ago: executing program 3 (id=580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000000206ed07000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f727400000000"], 0x4c}}, 0x2) socket(0x22, 0x2, 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) 5m42.138260798s ago: executing program 3 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 5m41.871350533s ago: executing program 3 (id=583): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r0, &(0x7f0000000480)="ccd089f9", 0x4, 0x4004, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f00000007c0)=""/188, 0xbc, 0x0, &(0x7f0000000880)=""/8, 0x8}}, 0x10) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m41.371736555s ago: executing program 3 (id=585): syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 5m39.242969098s ago: executing program 3 (id=586): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x11) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000006c0)={0x1, 0x0, {0x80000001, 0x9, 0x7, 0xdc7d}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) syz_usb_connect(0x7, 0x538, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x66, 0x7d, 0xe6, 0x8, 0x1b3d, 0x1ee, 0xd946, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x526, 0x2, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1b, 0xb1, 0x1, 0x26, 0x78, 0xd6, 0x5d, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xfe}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0xf8, "18b1b542042b"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x10, "ceb5b60a"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x2, 0x3, "1df2c8264a51"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x9c, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x5}]}}]}}, {{0x9, 0x4, 0x3d, 0x3b, 0xd, 0x3, 0x6, 0x2, 0x8, [@hid_hid={0x9, 0x21, 0xda40, 0x4, 0x1, {0x22, 0x1d0}}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0xb, 0x29}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x2, 0x4, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x6}, @generic={0x4b, 0x6, "1b8cb5d6e5f91b9b4b737be2f1c114990a86c30dd012ab710ab2110c8f48d635f8363dc645ca173d5906620ea78ff991217566db53fca45eb1588f3d61fcc07236876148baa3f1f759"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xff, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x5}, @generic={0xc2, 0x23, "6311094a297ebbaeb0f6bd9080c8ec3455d20654bb032be2bf809ed4abcd1124e09686b7a86ee360c21b2f355021efb875e7844330185be2a0a2f3769dfc2fc2aac861bd08aaee7d0d0a37b26a64864f3fa836518db325c624568efdd93233418a3b5d585ca78880b51ae13c15506de0ad79c1b5498db6967ecaaf4b2787d34d301002084751c88907a4451edbeefb76394a5f4be2ec5412fcf700a12bf6425878fa25889c02ba2b07034079a0c527a9df317622a783fb5581bc16f0fa30f7ba"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x7, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}, @generic={0x27, 0x3, "d03e016f8790ca03c2a409a1f54475af21368d4d6915f285f066f117b7fadd40df46843f2f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xc, 0x7, 0x71, [@generic={0x5f, 0x21, "72da278bf61d80ba7adaab47e6e9d5a96a6a8460fe3b0b04e0e9e15db6748d527367640fede8a2522fc4bae093333982103a89ca6a5b7ce0a56aa82872f86120462a38903da7fefbfd29d8e23423ee00d544fe70ca02ade9d615273760"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x5}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xfc, 0x4, 0xc4, [@generic={0x39, 0xe, "f71e1edf8abc2e1b512dfa296998c4972e1209cd852d0b5aa87ec9123d6412ae81077bc8b552a8075cc8071748853e07d0969d69a165ba"}]}}, {{0x9, 0x5, 0xb, 0x16, 0x40, 0x4, 0x81, 0x6, [@generic={0x89, 0x8, "e7b270389db2361ac596e73c24ccc6cae280b965c002735eca0c7b74cf897cf6b9b5d6a671de7e60c1a7466db8cbf1138511b0628e8b60445d62a7c04073d83fdda3c099de7893e81a962eae7bc05602e19c9f1c4f803152b0aa9ea5bc7875f02af7e04cd9a2c41eb5655e710934bb934054e623ef18af5c94b89537f6ae190610a8ca52d6d97c"}, @generic={0xfa, 0x24, "f206a29024a512a00a775b8961405f673181be59df0ca7c7417d69c177104017482d9c555fdb1c0f2938926a87e73761acbf43b2028bbc8eb37d9d6f384efd8919dff712797df83a70463ddb19c7119b20ee9d58638f4cb87f0c6be079d896b460e15de1fc7884e668bf5040e3619e4edd1b946dc1d62061a80a3d4ab1dddd8cbc112ee127e53bfb2435a539bf4bbb4872d01cbae0b43e1191baa3bac73d6a08409b19b869cb266ec2154c9ae5acf4d91e6989faec7d0fa035066d426d380dbcf6594a27256c5bf5bdb9a49840107cbb47e6033855dabd1b2ffea3f7847ad014d83d034e3016921cc96e5ff1d60dc3050ec6b72251316cce"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x91, 0x9, 0x8, [@generic={0x92, 0x8, "748e69e156be05c3e17fe884d83ba6a0d50888abc5a88d34f6ae7aaa10fa7b98a8fb70ebe56b18ed8fce250a9a94cc7654e0827cc8d6e8776d8db256b6b179544d3b9edfae89f1876ad75e96270e942ac3af8a4af6a694a797ef36457d4c3e0a1c17f058f9806f5827dc70bf8ff2b83aa693d35ab31f2fb6d2998dd60af31081043fa149d075302ba6b95eb47697fc57"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x8, 0x8, 0xfe}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x44, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x0, 0x6, [@generic={0x33, 0x1, "62fbd14967f404dbc724c4e0254e4fde685a8213a06de88881e5e93bb8f710e085cefaf7bfbb30b9c9e8411f0d374eab73"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa4, 0xfd5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfff7}]}}]}}]}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) getdents64(r0, 0x0, 0x11) (async) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000006c0)={0x1, 0x0, {0x80000001, 0x9, 0x7, 0xdc7d}}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (async) syz_usb_connect(0x7, 0x538, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x66, 0x7d, 0xe6, 0x8, 0x1b3d, 0x1ee, 0xd946, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x526, 0x2, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1b, 0xb1, 0x1, 0x26, 0x78, 0xd6, 0x5d, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xfe}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0xf8, "18b1b542042b"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x10, "ceb5b60a"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x2, 0x3, "1df2c8264a51"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x9c, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x5}]}}]}}, {{0x9, 0x4, 0x3d, 0x3b, 0xd, 0x3, 0x6, 0x2, 0x8, [@hid_hid={0x9, 0x21, 0xda40, 0x4, 0x1, {0x22, 0x1d0}}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0xb, 0x29}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x2, 0x4, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x6}, @generic={0x4b, 0x6, "1b8cb5d6e5f91b9b4b737be2f1c114990a86c30dd012ab710ab2110c8f48d635f8363dc645ca173d5906620ea78ff991217566db53fca45eb1588f3d61fcc07236876148baa3f1f759"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xff, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x5}, @generic={0xc2, 0x23, "6311094a297ebbaeb0f6bd9080c8ec3455d20654bb032be2bf809ed4abcd1124e09686b7a86ee360c21b2f355021efb875e7844330185be2a0a2f3769dfc2fc2aac861bd08aaee7d0d0a37b26a64864f3fa836518db325c624568efdd93233418a3b5d585ca78880b51ae13c15506de0ad79c1b5498db6967ecaaf4b2787d34d301002084751c88907a4451edbeefb76394a5f4be2ec5412fcf700a12bf6425878fa25889c02ba2b07034079a0c527a9df317622a783fb5581bc16f0fa30f7ba"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x7, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}, @generic={0x27, 0x3, "d03e016f8790ca03c2a409a1f54475af21368d4d6915f285f066f117b7fadd40df46843f2f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xc, 0x7, 0x71, [@generic={0x5f, 0x21, "72da278bf61d80ba7adaab47e6e9d5a96a6a8460fe3b0b04e0e9e15db6748d527367640fede8a2522fc4bae093333982103a89ca6a5b7ce0a56aa82872f86120462a38903da7fefbfd29d8e23423ee00d544fe70ca02ade9d615273760"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x5}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xfc, 0x4, 0xc4, [@generic={0x39, 0xe, "f71e1edf8abc2e1b512dfa296998c4972e1209cd852d0b5aa87ec9123d6412ae81077bc8b552a8075cc8071748853e07d0969d69a165ba"}]}}, {{0x9, 0x5, 0xb, 0x16, 0x40, 0x4, 0x81, 0x6, [@generic={0x89, 0x8, "e7b270389db2361ac596e73c24ccc6cae280b965c002735eca0c7b74cf897cf6b9b5d6a671de7e60c1a7466db8cbf1138511b0628e8b60445d62a7c04073d83fdda3c099de7893e81a962eae7bc05602e19c9f1c4f803152b0aa9ea5bc7875f02af7e04cd9a2c41eb5655e710934bb934054e623ef18af5c94b89537f6ae190610a8ca52d6d97c"}, @generic={0xfa, 0x24, "f206a29024a512a00a775b8961405f673181be59df0ca7c7417d69c177104017482d9c555fdb1c0f2938926a87e73761acbf43b2028bbc8eb37d9d6f384efd8919dff712797df83a70463ddb19c7119b20ee9d58638f4cb87f0c6be079d896b460e15de1fc7884e668bf5040e3619e4edd1b946dc1d62061a80a3d4ab1dddd8cbc112ee127e53bfb2435a539bf4bbb4872d01cbae0b43e1191baa3bac73d6a08409b19b869cb266ec2154c9ae5acf4d91e6989faec7d0fa035066d426d380dbcf6594a27256c5bf5bdb9a49840107cbb47e6033855dabd1b2ffea3f7847ad014d83d034e3016921cc96e5ff1d60dc3050ec6b72251316cce"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x91, 0x9, 0x8, [@generic={0x92, 0x8, "748e69e156be05c3e17fe884d83ba6a0d50888abc5a88d34f6ae7aaa10fa7b98a8fb70ebe56b18ed8fce250a9a94cc7654e0827cc8d6e8776d8db256b6b179544d3b9edfae89f1876ad75e96270e942ac3af8a4af6a694a797ef36457d4c3e0a1c17f058f9806f5827dc70bf8ff2b83aa693d35ab31f2fb6d2998dd60af31081043fa149d075302ba6b95eb47697fc57"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x8, 0x8, 0xfe}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x44, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x0, 0x6, [@generic={0x33, 0x1, "62fbd14967f404dbc724c4e0254e4fde685a8213a06de88881e5e93bb8f710e085cefaf7bfbb30b9c9e8411f0d374eab73"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa4, 0xfd5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfff7}]}}]}}]}}]}}, 0x0) (async) 5m38.419501759s ago: executing program 3 (id=588): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x10000, 0x2000, 0x1, 0x31b}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x2, 0x8, 0x3, 0x7fff}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) sendmmsg$alg(r4, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000c80)="d0e8aae45597b31edd817fddb8da23863260feba96f07bc2d696fcf4c0547f845f43bb236c2adad75274e86a8af5f61d9054f40add4bf2070c554c35cf5947e1c60a93ef90d256b655f75c", 0x4b}, {&(0x7f00000007c0)="0ff72a74c3b410519a1f09da23abc637d8f70ab1ab7db039f9576ada18b9b34adbf8e362447e0a8933db55dd43108ef68fa6e2fb53b3eb215ba7aa81efa41d25e31eba1d3421202ef2ec17f59a9352978f2e834165a5d6e9b630b154d9b53852212e45babb25066b4a5b47dedbf12988eb98cfbbd36a751827562effe576bf81aef9fafe4874a1e92b38d60f4ca00a", 0x8f}], 0x2, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x8804) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000080)=""/55, 0x37}], 0x2}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x4, 0x8, 0x8, 0x40, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x2, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000300)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x70fe960e60a9a8c1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0x0, 0x8, 0x7, 0xfffffffffffffff0, 0x8}], &(0x7f0000000340)='GPL\x00', 0x101, 0xcb, &(0x7f0000000380)=""/203, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x0, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, r4, r5, r6, r7], &(0x7f0000000780)=[{0x4, 0x3, 0xd, 0x2}, {0x4, 0x5, 0xf, 0x4}, {0x1, 0x1, 0x7, 0x5}, {0x5, 0x4, 0xa, 0x6}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0x8f, @void, @value}, 0x94) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x0, 0x0, 0x10001}, {0x6}]}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @remote, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00) close_range(r0, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r12, 0x118, 0x2, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x2, 0xeeee0000, 0x1}}, "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", "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"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 5m23.057865917s ago: executing program 32 (id=588): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x10000, 0x2000, 0x1, 0x31b}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x2, 0x8, 0x3, 0x7fff}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) sendmmsg$alg(r4, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000c80)="d0e8aae45597b31edd817fddb8da23863260feba96f07bc2d696fcf4c0547f845f43bb236c2adad75274e86a8af5f61d9054f40add4bf2070c554c35cf5947e1c60a93ef90d256b655f75c", 0x4b}, {&(0x7f00000007c0)="0ff72a74c3b410519a1f09da23abc637d8f70ab1ab7db039f9576ada18b9b34adbf8e362447e0a8933db55dd43108ef68fa6e2fb53b3eb215ba7aa81efa41d25e31eba1d3421202ef2ec17f59a9352978f2e834165a5d6e9b630b154d9b53852212e45babb25066b4a5b47dedbf12988eb98cfbbd36a751827562effe576bf81aef9fafe4874a1e92b38d60f4ca00a", 0x8f}], 0x2, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x8804) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000080)=""/55, 0x37}], 0x2}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x4, 0x8, 0x8, 0x40, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x2, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000300)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x70fe960e60a9a8c1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0x0, 0x8, 0x7, 0xfffffffffffffff0, 0x8}], &(0x7f0000000340)='GPL\x00', 0x101, 0xcb, &(0x7f0000000380)=""/203, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x0, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, r4, r5, r6, r7], &(0x7f0000000780)=[{0x4, 0x3, 0xd, 0x2}, {0x4, 0x5, 0xf, 0x4}, {0x1, 0x1, 0x7, 0x5}, {0x5, 0x4, 0xa, 0x6}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0x8f, @void, @value}, 0x94) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x0, 0x0, 0x10001}, {0x6}]}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @remote, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00) close_range(r0, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r12, 0x118, 0x2, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x2, 0xeeee0000, 0x1}}, "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", "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"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 5m4.288049463s ago: executing program 0 (id=658): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000740)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x2, &(0x7f00000000c0), 0x8000, 0x10000}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000fbffbea221000000000300020000f8fffbbfb703000008001b00b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x4040004) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r6}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000240)=0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000600)=""/189, 0xbd}], 0x5, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14) 5m4.15047053s ago: executing program 2 (id=660): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@rose, @remote, @null, @null, @null, @netrom]}, &(0x7f00000010c0)=0x40, 0x800) connect$rose(r1, &(0x7f0000001100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}}, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000011c0)={0x0, 0x10001}, 0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001240)="eb65a22a79146086f81f58055531", 0xe}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001080)="b5a714a7", 0x4}], 0x1}}], 0x2, 0x24044801) shutdown(r0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004"], 0x44}}, 0x0) 5m2.040359954s ago: executing program 2 (id=663): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYRESOCT]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) (fail_nth: 2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000300)=""/222, 0xde, 0x22, 0x0, 0x0) 5m1.843513661s ago: executing program 0 (id=664): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) fsync(r8) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000300), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000040)=[0x2], &(0x7f00000003c0)=[r10, r10], &(0x7f0000000340), 0x0, 0xd}) 5m1.143296183s ago: executing program 2 (id=667): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="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"], 0x54}}, 0x0) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) (fail_nth: 9) 5m0.538938581s ago: executing program 0 (id=669): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4m59.415683448s ago: executing program 2 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000200)=0x40000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r3, 0x8, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) 4m59.27723285s ago: executing program 0 (id=673): shutdown(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x3, 0xa}, 0xc) r2 = io_uring_setup(0x79bf, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x32f}) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0x80, 0xfa, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0xed0, 0xc3, 0x1, {0x22, 0x2cf}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x47, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x240, 0xdf, 0x3b, 0x20}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x2, 0xfa, 0x80, 0xbf, 0xa5}, 0x117, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x8, [{0xa3, &(0x7f0000000480)=@string={0xa3, 0x3, "a8df870223293d128b3c5c9bcedbc44cc032585a723a6f2514c8d2ef945eaa53a11381c2fb3647efb3bd568064a4e033ffce1430a0d3fb7910c979faabf6469451eb65ed6e8c9b343b8587ac94963c99150fd6d490992e93c6653c44a7d2e1380c0e8dc2c9dc7d2d986bde364ffe293bcd84ad1bbc49dd916e712dc9589edd0e8e0b0f93da9d369a867509fe19d29963554abcc794fcd6c207a248f8b9180e2b01"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x436}}, {0xf4, &(0x7f0000000600)=ANY=[@ANYBLOB="f403f733de4b467d5f00b596aa359d3656624244fb37fe172d7baa88b712030c63cbdf7a02944950fa03cc09ab67285669b06ab30afb4f7870a0be4baad48d384c54b7e094f3d1688631b9fa4ed3a557cc81e6c325688e23f09585d9612b160a3ee4a148a819365872b4b49753feca65126476e31bdc2fd99994fd700784064e24868a128e73a5138cfc237ca831873417138e7a19fdcab82dde1da29f0c5257985e2e116919a84f6b8a303c0974b331e8af78c69bec0d3d06cacac66dc60321543a311fc229280890d55dbeaf67e10dc96fe4ec5013f937afc6a6ba7b84fe5ca7d8d2b607c4befe162c98c8c2032d113a79899f"]}, {0xa5, &(0x7f0000000700)=@string={0xa5, 0x3, "8529eabdde5791e457c3e22dc999dbdc984baec25dc647b0cfb1c7bf3bfd18a274ef6320466852dae372d4a4d33b8170b5cd33f9dbed04eae98366b8cebeb9e1e58d2f214826dade152325d70f7e4fcadd8b4f73d035d5620741b79c1f3cebec30ab22ed4e6fa4260c076e278734f8c84ae9a3e483979854c8026aae42747b69c549d73ce840511548d089eb987e57384b4c224b2d20e52434888e9d5f4d0a528f41b0"}}, {0xf4, &(0x7f00000007c0)=@string={0xf4, 0x3, "d5ca3c383ed874437b444b6e1b4147ecd95abb886b23f55504ea3966f489caa70b8b5beae7ecb0b4df2c9a2875190fda85e34f70780e76e67e88f57a3ef1af35f53e6a43df6560dc73315abcec4fcd70634a159e6cea434a46abaac2d562d81303e6cb13b733ea90c2d82cfbcbf6ea651fa6209f605b6105ba13e749d8fd2a4af5cc8bfba551aa6f466bcd8e412ed574616dbd0f0a3f5ab08a6fce9fcc5d3138c0b27e7f3d7ad56101da9ea63e4c49eb6695b30f5d24cb39007e9f9fb8e0c9da0c0aff7596e865ba4aece542cc23eca5fb894f4b6a5e864b2544f5715af686a3fb1fa87d6d428bc4756d915282a31196b371"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000b00)={0x24, &(0x7f00000009c0)={0x40, 0x0, 0x5c, {0x5c, 0xa, "b59183493cff4f0b7e5056b1ff5da766973411c924cf4758522abefb043085594ec8b99fd1b9f35330b96f023e05c41b894e742a0b2ffa205eff0c6d62ffecb489737bac71236f79e44d08cce45cdc30180a514ffd5cf9a22409"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0xc, "5f91aea4"}, @main=@item_4={0x3, 0x0, 0x8, "0cba59d7"}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x1, "9662d08a"}, @main=@item_012={0x2, 0x0, 0xb, "e62b"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x2, "fd7f287a"}, @local=@item_012={0x2, 0x2, 0x1, "e495"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x5}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b40)={0x20, 0x14, 0x9c, "a97df0acd7968a931136b2d454287d6902f51e6073308988607c1de63da5378b6ef3328a57c5d887919f2fe21db4aea766e0ac1b2d28a946a400c3131290dbbaf94468788af8edd6831c54d59a97753850df4493879a0bc24cf70619b52c27d74af24eae8a410abcd020ac5d55bf6b3ea4e57c7fc449e44afedb977def37d07096f12195569c467d5e59215431b5190c786c7fef0ac9504ed77002f2"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0xf5}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000c80)={0x20, 0x1, 0x4d, "d8d837907c3112aa5e5a194504727addf83ae38e293d4df3518df8c342132690526ffbfdd363c8d83c3afdbabbba95055e27ca1d4736b978105b034873fcc892345daad734467c683379566b67"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x2}}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x7800, 0x8, 0xa81, 0x1000, {{0x5, 0x4, 0x0, 0x39, 0x14, 0x65, 0x0, 0x3e, 0x29, 0x0, @broadcast, @private=0xa010101}}}}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001b000000306c5e6900001000"/28], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3a6}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0xc4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000020000001851000001e2380000000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r7, r7], 0x0, 0x10, 0x1, @void, @value}, 0x94) accept4(r3, 0x0, 0x0, 0x80000) close_range(r2, 0xffffffffffffffff, 0x0) 4m59.046211462s ago: executing program 2 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x3d, 0x107, 0x7000000, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}]}, 0x2c}}, 0x4010) 4m58.585307031s ago: executing program 2 (id=677): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0) preadv(r6, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000080)=""/149, 0x95}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setaffinity(r0, 0xff8c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000085000000810000009500"/32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r8, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 4m58.341660865s ago: executing program 0 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x171141) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-aLw\xfe\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) r3 = dup(r1) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf2503000000080001004a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00001a", @ANYRES16=r6, @ANYBLOB="00002bbd7000ffdbdf2511000000080015000200000008000100", @ANYRES32=r7, @ANYBLOB="0800150001000000080015000100000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0800150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069100c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x79, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x6, r11, r10}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r14 = accept4(r12, 0x0, 0x0, 0x0) sendto$inet6(r14, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) 4m54.754776259s ago: executing program 0 (id=684): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x100000000, 0x200089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000000010d, 0x6, &(0x7f0000000100)="3c24f8f949", 0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r3}, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x860901) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340), 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000003c0)={{{0xe, 0x1}}, 0x0, 0x6, 0x0}) r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff0300000009058203"], 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x160, 0x150, 0x150, 0x0, 0x90a, 0x238, 0x238, 0x238, 0x238, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x39}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 4m36.334093387s ago: executing program 33 (id=684): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x100000000, 0x200089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000000010d, 0x6, &(0x7f0000000100)="3c24f8f949", 0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r3}, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$evdev(0x0, 0x2, 0x860901) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340), 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000003c0)={{{0xe, 0x1}}, 0x0, 0x6, 0x0}) r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff0300000009058203"], 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x160, 0x150, 0x150, 0x0, 0x90a, 0x238, 0x238, 0x238, 0x238, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x39}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 4m35.221155386s ago: executing program 34 (id=677): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0) preadv(r6, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000080)=""/149, 0x95}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setaffinity(r0, 0xff8c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000085000000810000009500"/32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r8, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 3m38.011550663s ago: executing program 6 (id=881): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) r1 = open(0x0, 0x2a4c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r5) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2], 0x20000078}}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r7}, 0x10) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) 3m36.629347233s ago: executing program 6 (id=887): r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x210300, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0xfffffff7}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000640)={[], 0xe0ffffff7f0000}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f00000000c0)="d188324db70a8600e958dcb7e414119c4008e69ae3b9bf4e99ef38a544f27d02d618a588fa1ae77630a844ece82ef04054da91ad082608559e8d89364beb7158554b15d3d6bac26b4d38b60e10c882d8ffc6b78caf64c1eab955f463c1246303c108fbf605f83fea2176f4fd2578078b868bba7f446a3003440c63b5442f8e1b60ef530af9dad21123ea42d240660b706235725222c27186c3df5eacdb8e4b39053084f66833e288b26300ff47d584e8c91a9daf336fca9b1745706313677fee0e06c879f5f36c132687d51d8e537c53144109649a1df517ec592075d6b15a78e977c64fe92f14129a4407c9e6e7845b6966", 0xf2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x27, 0x2, 0x0, "a60600000000000000736c9b8fd1f8800c880000020a00", 0x32314d48}) 3m35.861787775s ago: executing program 6 (id=888): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000bfbedf9a5b9cc42100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x15000000) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000000000e02000000001b78ae92898124ed00000c00000000000000000000002e2e"], &(0x7f00000001c0)=""/250, 0x3e, 0xfa, 0x1, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c7465", @ANYRES16=r3], 0xc4}}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x162) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xa8, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m35.343259689s ago: executing program 6 (id=892): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20010, 0xffffffffffffffff, 0x4000) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) open$dir(&(0x7f0000000480)='./file1\x00', 0x8000, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, r3, 0x0, 0x8a03f) syz_genetlink_get_family_id$SEG6(&(0x7f0000002d00), r5) sendmsg$NFT_BATCH(r5, &(0x7f0000002cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002c80)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x2930, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28e8, 0x3, 0x0, 0x1, [{0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "4ad8f97d1c50fadf4512728ad6f3b031a70970d277b4b2ff9b9f"}, @NFTA_SET_ELEM_DATA={0x120, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2f, 0x1, "4c4cb1424ace567907ba86aa0468c46104e666901ca7cd42f3feb9250946ffc4643a0c72b0541f2294a3e8"}, @NFTA_DATA_VALUE={0xec, 0x1, "b792526caf54d2aa2eb66cfb967f5b936b9dfbd7a9a0ab472e30adab653c8433d5614e101178f05ed9f79bca9c279cbbbe668cda3e32a573a18c940c44183b01fbea212c1ecab500fa983cdb1fb214f3b4c5f9fd38dddf8419e6c7be85ffd47301fab0b4c2cc97d7fd34eb9144d7a53713ebc465ec31ec189f78352c50c4c64b339a68740bc5bb316fbaa549c199438a00754cbbb26fa2bac32be521247b0e27fce4a657604ff2b7d402926f6ac459f0c3a27ca89a23af798d9e41ebc56a785038ec4554c865a26c7fd20621d0ef4191dc2f8bd36ce5d06ba2dcfd4814977e1872338c141bf80b50"}]}]}, {0x110c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x62, 0x1, "c37b1c019a4b860ef5aa5b6e260efac27675aae4682d0b69874e3b53b02000e8a157668b9248f0523423b544dc304d84a98321d7e874300812e1536af2cc1e3a955bd0a33e77a4a00be464401954e5821d538407d037145a452103abb158"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x46}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xe6}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2621}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfffe}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x158c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "7d7ae30ed9a36b38ad4dfba03e53a4d34ff07c92271b6dbd3724d6054888044737376f99846401921e2a03e6a87eed7a85c1f854f162933a4ad72dc00e3b33187b0762a024fec5980bfb06e98649550b310dd73865e7aa7a1ba091dd0a683662ebc29f14550c6e9173dfdd58004458b809c5f6f919fa3f4c3bd2d02038950b3f2b69e0b734490de577988f4826fb73c80cffbe72c4e05bbfa992167f40b1ea6aabe1c9df9e7827fef0a0353a19f3d1c1c6ffbcd76851e55f301092bd2ef530310735"}]}, @NFTA_SET_ELEM_USERDATA={0xf0, 0x6, 0x1, 0x0, "c4e8b9d8f2e4955ca877e69202a49b1b0b133097664473c20c626fadafd396dda2ffcd9931feda1fa388e7e46a3884d69af23cb458b2995e213849a55289508a3188266c2943cb030b4f6dfed032ef8d394de8d7fa88803c5cddaafab4a7803b15373a38e1216dd0667c4eb5ac616bb517cd37dfa07fe77eaece8f5eaab3516328509481b8e6718af161bee7405bba626e8f8ba2392323809adc852d5d9cac8fb2f1de359da15b5ba8b074ee011bff0c598de1543472826b95f78876c1dc65d0db7b0b9ea0d0f9467cd5b251938d23acc4f1f0b2ef8cf9d0be7b80df4fec51f7a6aef2509b9928dc8bb9765c"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x53ec4c7d}, @NFTA_SET_ELEM_KEY={0x12e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x86}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xec, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_USERDATA={0xd0, 0xd, 0x1, 0x0, "3833f2de9d9421653ffdfb87a7be122d16833f5148dc8a93ef1b77ed80a0e72e106eec75967965b660c3d6e826ae9ba625f83a75f47611cf6bf20afc487dc4c671aec15eee4eaffeb9a0e78f17eb30df05b03754154684ea755c76567d44c1e4e6c8834f05f1dfc927bf374474a69690df8bd853251daa8e3d3209669bc42c060ed199ea1e0f46835c75e73de76230ad990f1326ba6aab46411178bd5b647fee0b5363b1b56e026b4da7579b6e6a0369a7f4523ec33154436478e1ce47a5df554d41a0b682c4aa2df07b8485"}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x2c10}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m33.892346519s ago: executing program 6 (id=895): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0xfffffffa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2e, 0x0, "a0bfcb77a7a2387ddcf19293ca1ad0484ceab17a21148b16e5629d74fa99cb9741366c077d8653e85f78c41ba1f5c4c3392ed33cea5b2eae5950db42922953a90f7deaae1af3a13e4547819f40cabb00"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000841, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) write$binfmt_script(r5, &(0x7f0000000cc0)={'#! ', './file3'}, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8], 0x48) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r11}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="04000000440800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000ff"], 0x80}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r9, 0x0, &(0x7f0000000040)=""/99}, 0x20) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}]}]}]}}]}, 0x4c}}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r12, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)) 3m32.447579823s ago: executing program 6 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @pic={0x10, 0xb, 0x5, 0x2d, 0x8, 0x4, 0x1, 0x1, 0x3, 0xfc, 0x8, 0x3, 0xfb, 0x8, 0x6, 0xa0}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800006e0b00000000000000006d25e608f7ed29c7492bc5c3000000000000001771afff78845cd9000000003fa62462ab080b0d9038fd8e8343e2b8184b948c8c3e200f5626a35f6ab656adcbc697622dcdb93f478fe366f89471bd7c21d857b6633fbe77047be22b992996ea802b6dbc5c738290370bc62286933a52485dbf1a772dfc84f669cb856ef45290fca2f7d741a65218caf554710999067b6206e9e8eb8e4334082189192d9025a86087adc2778050a4203376f8a52a23ce37d9d0bea94020d5d49bd61034b0e3f2ca7b4b98b91c9eefdb543932c2784a75efe2037e792a0e1d47f715281cf651e31d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000140)={0x0, 0x1, 0xfd40}) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010300000a2401"], 0x0) 3m31.412241298s ago: executing program 35 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @pic={0x10, 0xb, 0x5, 0x2d, 0x8, 0x4, 0x1, 0x1, 0x3, 0xfc, 0x8, 0x3, 0xfb, 0x8, 0x6, 0xa0}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800006e0b00000000000000006d25e608f7ed29c7492bc5c3000000000000001771afff78845cd9000000003fa62462ab080b0d9038fd8e8343e2b8184b948c8c3e200f5626a35f6ab656adcbc697622dcdb93f478fe366f89471bd7c21d857b6633fbe77047be22b992996ea802b6dbc5c738290370bc62286933a52485dbf1a772dfc84f669cb856ef45290fca2f7d741a65218caf554710999067b6206e9e8eb8e4334082189192d9025a86087adc2778050a4203376f8a52a23ce37d9d0bea94020d5d49bd61034b0e3f2ca7b4b98b91c9eefdb543932c2784a75efe2037e792a0e1d47f715281cf651e31d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000140)={0x0, 0x1, 0xfd40}) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010300000a2401"], 0x0) 1m44.542967708s ago: executing program 1 (id=1296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000000008010100000000000000000100000a050003000600000006000240600600000900010073797a31000000002c000480080001400000000b08000140ffffffca080001408000000008000140ffffc2b008000140000000010900010000000000000000004c00048008000140000000040800014000000009080001400000000108000140000000030800014000000005080001400000000a0800014080000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x40008d8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4008, 0x0, 0x0, 0x22) msgget$private(0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902"], 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x4022}, {r8, 0x20}, {0xffffffffffffffff, 0x10}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f00000003c0), 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) r9 = timerfd_create(0x9, 0x80800) timerfd_gettime(r9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000340)={0xc354, 0x1, [{0x1, 0x1}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x40c0, 0x0) 1m44.398479049s ago: executing program 7 (id=1297): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000300)=[{0x0, 0x1}, {0x2, 0x0, 0x1000}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r0, &(0x7f0000000180)=[{}, {}], 0x2) 1m43.152348081s ago: executing program 7 (id=1299): pipe(0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = dup(r0) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x69) truncate(&(0x7f0000000000)='./file0\x00', 0x4) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xf}, {0x2, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0xff68, 0x2, [@m_simple={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_DATA={0x0, 0x3, '&}%.\x00'}]}, {0x1a, 0x6, "5a64655c67feeec4a71ff0490055faa661ff016ab6ad"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa8}}, 0x801) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e0000000000000040000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000100b705000008000000850000e9a400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xd, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x84a45aac9d62de6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x2, 0x5, 0x4}, {0x0, 0x5, 0xe, 0x5}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) socket$kcm(0x23, 0x2, 0x0) 1m43.080505217s ago: executing program 8 (id=1300): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000940)={0xe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "8d67f5c12e5f78"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001940)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "df520cf6420671"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002940)={r2, r3, "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", "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"}) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1m42.087568258s ago: executing program 4 (id=1301): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="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"], 0x54}}, 0x0) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe000001000000001400120011"], 0x30}}, 0x0) 1m41.891563834s ago: executing program 5 (id=1302): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x71e, &(0x7f0000000140)={0x0, 0x5884, 0x400, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1a000}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m41.772340824s ago: executing program 7 (id=1303): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x7ff, 0x9, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x69) truncate(&(0x7f0000000000)='./file0\x00', 0x4) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0xff68, 0x2, [@m_simple={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_DATA={0x0, 0x3, '&}%.\x00'}]}, {0x1a, 0x6, "5a64655c67feeec4a71ff0490055faa661ff016ab6ad"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa8}}, 0x801) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e0000000000000040000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000100b705000008000000850000e9a400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085000000"], &(0x7f0000000140)='GPL\x00', 0xd, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x84a45aac9d62de6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x1, 0x2, 0x5, 0x4}, {0x0, 0x5, 0xe, 0x5}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, 0x0, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) socket$kcm(0x23, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) 1m40.632722758s ago: executing program 8 (id=1304): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@rose, @remote, @null, @null, @null, @netrom]}, &(0x7f00000010c0)=0x40, 0x800) connect$rose(r1, &(0x7f0000001100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}}, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000011c0)={0x0, 0x10001}, 0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) sendmmsg$inet6(r0, 0x0, 0x0, 0x24044801) shutdown(r0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400000000000000", @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004"], 0x44}}, 0x0) 1m40.632375383s ago: executing program 4 (id=1305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f00000020c0)={@multicast, @random="caf6e222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x4c, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373242b02fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34"}]}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 1m40.497214679s ago: executing program 7 (id=1306): socket$kcm(0x10, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="0cbb", 0x2}], 0x2, 0x0, 0x0, 0x9000000}, 0x0) 1m40.496699849s ago: executing program 5 (id=1307): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000140)=0x5, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) close(r0) 1m39.449405016s ago: executing program 8 (id=1308): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f00000005c0)="253754687c06d8f58187445ffe9858217350ae0bd72487386e5fed40000000f6b4ecc8a6356cee94d42a3c4dd5ca349e026febcc2c1ebe4115e66c050c2f7247149eba608ddbf64ffbc8b282129359e61be1972f2f6072457d4c7cb98443def118ac59a62d52b69007d04c019998cecc81724339b72867", 0x77) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x5, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x8, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x3ea, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x7, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x4, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x1, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x200005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x3, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r5, 0x0) 1m39.448442613s ago: executing program 1 (id=1309): syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1m39.373671753s ago: executing program 4 (id=1310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_setup(0x6779, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x3}) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x533, &(0x7f00000003c0)={0x0, 0x52cf, 0x400, 0x0, 0x145}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 1m38.248733855s ago: executing program 8 (id=1311): syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1m38.247816231s ago: executing program 7 (id=1312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0xfffffffffffffffd, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0xfeff) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m38.183367785s ago: executing program 5 (id=1313): pipe(0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = dup(r0) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x69) truncate(&(0x7f0000000000)='./file0\x00', 0x4) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xf}, {0x2, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0xff68, 0x2, [@m_simple={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_DATA={0x0, 0x3, '&}%.\x00'}]}, {0x1a, 0x6, "5a64655c67feeec4a71ff0490055faa661ff016ab6ad"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa8}}, 0x801) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e0000000000000040000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000100b705000008000000850000e9a400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xd, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x84a45aac9d62de6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x2, 0x5, 0x4}, {0x0, 0x5, 0xe, 0x5}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) socket$kcm(0x23, 0x2, 0x0) 1m38.160056939s ago: executing program 4 (id=1314): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) iopl(0x3) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x214600, 0x81) iopl(0x3) syz_open_dev$MSR(&(0x7f0000000180), 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000100)=[{0x5, 0x800}, {0xfff7, 0x7}, {0x7fff, 0x5}, {0x1, 0xfffd}]}) iopl(0x6) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 1m37.526720542s ago: executing program 1 (id=1315): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = io_uring_setup(0x6779, &(0x7f0000000100)={0x0, 0x49af, 0x0, 0x0, 0x139}) io_uring_setup(0x533, &(0x7f00000003c0)={0x0, 0x52cf, 0x400, 0x0, 0x145}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = dup(r1) preadv(r3, &(0x7f0000000180)=[{&(0x7f000000c300)=""/102386, 0x18ff2}], 0x1, 0xa30e, 0x0) 1m36.931638658s ago: executing program 4 (id=1316): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010a24010400000201020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303b90905031210"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 1m36.894358739s ago: executing program 1 (id=1317): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x7ff, 0x9, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x69) truncate(&(0x7f0000000000)='./file0\x00', 0x4) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0xff68, 0x2, [@m_simple={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_DATA={0x0, 0x3, '&}%.\x00'}]}, {0x1a, 0x6, "5a64655c67feeec4a71ff0490055faa661ff016ab6ad"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa8}}, 0x801) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e0000000000000040000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000100b705000008000000850000e9a400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085000000"], &(0x7f0000000140)='GPL\x00', 0xd, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x84a45aac9d62de6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x1, 0x2, 0x5, 0x4}, {0x0, 0x5, 0xe, 0x5}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, 0x0, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) socket$kcm(0x23, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) 1m36.874562576s ago: executing program 5 (id=1318): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x67) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x101400, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./bus\x00', 0x0) unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1m36.873933693s ago: executing program 7 (id=1319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000000008010100000000000000000100000a050003000600000006000240600600000900010073797a31000000002c000480080001400000000b08000140ffffffca080001408000000008000140ffffc2b008000140000000010900010000000000000000004c00048008000140000000040800014000000009080001400000000108000140000000030800014000000005080001400000000a0800014080000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x40008d8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4008, 0x0, 0x0, 0x22) msgget$private(0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902"], 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x4022}, {r8, 0x20}, {0xffffffffffffffff, 0x10}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f00000003c0), 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) r9 = timerfd_create(0x9, 0x80800) timerfd_gettime(r9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000340)={0xc354, 0x1, [{0x1, 0x1}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x40c0, 0x0) 1m36.453034205s ago: executing program 8 (id=1320): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@rose, @remote, @null, @null, @null, @netrom]}, &(0x7f00000010c0)=0x40, 0x800) connect$rose(r1, &(0x7f0000001100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}}, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000011c0)={0x0, 0x10001}, 0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) sendmmsg$inet6(r0, 0x0, 0x0, 0x24044801) shutdown(r0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400"/18, @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004"], 0x44}}, 0x0) 1m35.343319465s ago: executing program 5 (id=1321): pipe(0x0) fadvise64(0xffffffffffffffff, 0x7ff, 0x9, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x69) truncate(0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0xff68, 0x2, [@m_simple={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_DATA={0x0, 0x3, '&}%.\x00'}]}, {0x1a, 0x6, "5a64655c67feeec4a71ff0490055faa661ff016ab6ad"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa8}}, 0x801) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e0000000000000040000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000100b705000008000000850000e9a400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xd, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x84a45aac9d62de6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x2, 0x5, 0x4}, {0x0, 0x5, 0xe, 0x5}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) socket$kcm(0x23, 0x2, 0x0) 1m35.331850142s ago: executing program 1 (id=1322): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f00000005c0)="253754687c06d8f58187445ffe9858217350ae0bd72487386e5fed40000000f6b4ecc8a6356cee94d42a3c4dd5ca349e026febcc2c1ebe4115e66c050c2f7247149eba608ddbf64ffbc8b282129359e61be1972f2f6072457d4c7cb98443def118ac59a62d52b69007d04c019998cecc81724339b72867", 0x77) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x5, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x8, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x3ea, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x7, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x4, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x1, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x200005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x3, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r5, 0x0) 1m34.76644416s ago: executing program 8 (id=1323): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0x7, 0x4) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmmsg$unix(r2, &(0x7f0000002800), 0x4000000000001e7, 0x40010000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0xe9, &(0x7f0000000300)={0x0, 0x9b9c, 0x200, 0x3, 0xad}, &(0x7f0000000480), &(0x7f00000003c0)) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288, 0x0, r4}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x3}, {0xe7ab, 0x10, 0x3c}, {0x7, 0x4, 0x1a, 0x2}]}) socket$packet(0x11, 0x0, 0x300) fchdir(r7) r8 = open(&(0x7f00000000c0)='.\x00', 0x50000, 0xe85b980fe538b2cc) getdents64(r8, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r9 = syz_usb_connect(0x6, 0x48, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x20}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 1m34.700784013s ago: executing program 1 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_setup(0x6779, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x3}) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x533, &(0x7f00000003c0)={0x0, 0x52cf, 0x400, 0x0, 0x145}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 1m34.2548479s ago: executing program 5 (id=1325): syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1m34.08400733s ago: executing program 4 (id=1326): r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffe25, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{0x2ce5}, 'syz0\x00', 0xfffffffc}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xe02, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) utime(0x0, 0x0) 0s ago: executing program 36 (id=1323): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0x7, 0x4) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmmsg$unix(r2, &(0x7f0000002800), 0x4000000000001e7, 0x40010000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0xe9, &(0x7f0000000300)={0x0, 0x9b9c, 0x200, 0x3, 0xad}, &(0x7f0000000480), &(0x7f00000003c0)) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288, 0x0, r4}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x3}, {0xe7ab, 0x10, 0x3c}, {0x7, 0x4, 0x1a, 0x2}]}) socket$packet(0x11, 0x0, 0x300) fchdir(r7) r8 = open(&(0x7f00000000c0)='.\x00', 0x50000, 0xe85b980fe538b2cc) getdents64(r8, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r9 = syz_usb_connect(0x6, 0x48, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x20}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kernel console output (not intermixed with test programs): ll-speed USB device number 2 using dummy_hcd [ 344.085064][ T5826] usb 6-1: unable to get BOS descriptor or descriptor too short [ 344.105293][ T5826] usb 6-1: not running at top speed; connect to a high speed hub [ 344.125894][ T5826] usb 6-1: config 3 has an invalid interface number: 3 but max is 1 [ 344.142179][ T5826] usb 6-1: config 3 has an invalid interface number: 66 but max is 1 [ 344.151295][ T5826] usb 6-1: config 3 has no interface number 0 [ 344.157777][ T5826] usb 6-1: config 3 has no interface number 1 [ 344.175900][ T5826] usb 6-1: config 3 interface 3 has no altsetting 0 [ 344.199450][ T5826] usb 6-1: config 3 interface 66 has no altsetting 0 [ 344.271587][ T5826] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 344.300760][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.320606][ T5826] usb 6-1: Product: syz [ 344.325520][ T5826] usb 6-1: Manufacturer: syz [ 344.330137][ T5826] usb 6-1: SerialNumber: syz [ 344.424098][ T8458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.464382][ T8458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.482761][ T8570] uprobe: syz.4.727:8570 failed to unregister, leaking uprobe [ 344.525196][ T8458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.616457][ T5826] hub 6-1:3.3: bad descriptor, ignoring hub [ 344.627345][ T5826] hub 6-1:3.3: probe with driver hub failed with error -5 [ 344.651954][ T5826] hub 6-1:3.66: bad descriptor, ignoring hub [ 344.659860][ T5826] hub 6-1:3.66: probe with driver hub failed with error -5 [ 344.708652][ T6405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.714617][ T5826] usb 6-1: USB disconnect, device number 2 [ 344.729663][ T6405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.818174][ T6405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.829123][ T6405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.921755][ T6405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.932510][ T6405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.988030][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.019649][ T6405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.031794][ T6405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.105305][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.123096][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.130223][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.192595][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.199756][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.230636][ T8581] dummy0: entered promiscuous mode [ 345.239208][ T8581] dummy0: left promiscuous mode [ 345.290134][ T8465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 345.311774][ T8465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 345.337157][ T8458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.348199][ T8458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.363148][ T8465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 345.375967][ T8465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 345.626390][ T8588] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 346.686469][ T6405] bond0 (unregistering): (slave team0): Releasing backup interface [ 346.697591][ T6405] bond0 (unregistering): Released all slaves [ 347.461761][ T29] audit: type=1800 audit(1737045739.546:209): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.736" name="/" dev="9p" ino=2 res=0 errno=0 [ 347.496361][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.692492][ T8600] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 347.704518][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.718611][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.791002][ T8600] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 347.834803][ T6405] hsr_slave_0: left promiscuous mode [ 347.881019][ T6405] hsr_slave_1: left promiscuous mode [ 347.928456][ T6405] veth1_macvtap: left promiscuous mode [ 347.942800][ T8613] uprobe: syz.4.739:8613 failed to unregister, leaking uprobe [ 347.944467][ T6405] veth0_macvtap: left promiscuous mode [ 347.961112][ T6405] veth1_vlan: left promiscuous mode [ 347.966467][ T6405] veth0_vlan: left promiscuous mode [ 348.120078][ T8619] FAULT_INJECTION: forcing a failure. [ 348.120078][ T8619] name failslab, interval 1, probability 0, space 0, times 0 [ 348.188466][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.1.741 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 348.199159][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 348.209261][ T8619] Call Trace: [ 348.212578][ T8619] [ 348.215543][ T8619] dump_stack_lvl+0x241/0x360 [ 348.220273][ T8619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.225532][ T8619] ? __pfx__printk+0x10/0x10 [ 348.230169][ T8619] ? __kmalloc_noprof+0xb5/0x4c0 [ 348.235148][ T8619] ? __pfx___might_resched+0x10/0x10 [ 348.240488][ T8619] should_fail_ex+0x3b0/0x4e0 [ 348.245211][ T8619] should_failslab+0xac/0x100 [ 348.249948][ T8619] __kmalloc_noprof+0xdd/0x4c0 [ 348.254757][ T8619] ? ovs_nla_copy_actions+0x79/0x3e0 [ 348.260091][ T8619] ovs_nla_copy_actions+0x79/0x3e0 [ 348.265251][ T8619] ? ovs_nla_get_identifier+0x11c/0x280 [ 348.271010][ T8619] ovs_flow_cmd_new+0x555/0xe00 [ 348.275927][ T8619] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 348.281414][ T8619] ? __nla_parse+0x40/0x60 [ 348.285890][ T8619] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 348.292284][ T8619] genl_rcv_msg+0xb14/0xec0 [ 348.296847][ T8619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.301955][ T8619] ? __pfx_lock_acquire+0x10/0x10 [ 348.307028][ T8619] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 348.312542][ T8619] ? __pfx___might_resched+0x10/0x10 [ 348.317895][ T8619] netlink_rcv_skb+0x1e3/0x430 [ 348.322710][ T8619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.327791][ T8619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.333130][ T8619] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 348.338665][ T8619] genl_rcv+0x28/0x40 [ 348.342682][ T8619] netlink_unicast+0x7f6/0x990 [ 348.347503][ T8619] ? __pfx_netlink_unicast+0x10/0x10 [ 348.352831][ T8619] ? __virt_addr_valid+0x45f/0x530 [ 348.357989][ T8619] ? __phys_addr_symbol+0x2f/0x70 [ 348.363049][ T8619] ? __check_object_size+0x47a/0x730 [ 348.368399][ T8619] netlink_sendmsg+0x8e4/0xcb0 [ 348.373228][ T8619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.378563][ T8619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.383885][ T8619] __sock_sendmsg+0x221/0x270 [ 348.388621][ T8619] ____sys_sendmsg+0x52a/0x7e0 [ 348.393435][ T8619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.398754][ T8619] ? __fget_files+0x2a/0x410 [ 348.403395][ T8619] ? __fget_files+0x2a/0x410 [ 348.408006][ T8619] __sys_sendmsg+0x269/0x350 [ 348.412612][ T8619] ? __pfx_lock_release+0x10/0x10 [ 348.417669][ T8619] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.422796][ T8619] ? __pfx_vfs_write+0x10/0x10 [ 348.427589][ T8619] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.433925][ T8619] ? do_syscall_64+0x100/0x230 [ 348.438705][ T8619] ? do_syscall_64+0xb6/0x230 [ 348.443424][ T8619] do_syscall_64+0xf3/0x230 [ 348.447947][ T8619] ? clear_bhb_loop+0x35/0x90 [ 348.452651][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.458565][ T8619] RIP: 0033:0x7fbf86f85d29 [ 348.462989][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.482606][ T8619] RSP: 002b:00007fbf87dec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.491039][ T8619] RAX: ffffffffffffffda RBX: 00007fbf87175fa0 RCX: 00007fbf86f85d29 [ 348.499019][ T8619] RDX: 0000000000004010 RSI: 0000000020000000 RDI: 0000000000000003 [ 348.506998][ T8619] RBP: 00007fbf87dec090 R08: 0000000000000000 R09: 0000000000000000 [ 348.514978][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.522956][ T8619] R13: 0000000000000000 R14: 00007fbf87175fa0 R15: 00007ffe95756618 [ 348.530949][ T8619] [ 348.552056][ T8619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.100272][ T8637] FAULT_INJECTION: forcing a failure. [ 350.100272][ T8637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.350991][ T8637] CPU: 0 UID: 0 PID: 8637 Comm: syz.4.746 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 350.361669][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 350.371772][ T8637] Call Trace: [ 350.375064][ T8637] [ 350.378005][ T8637] dump_stack_lvl+0x241/0x360 [ 350.382724][ T8637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.387938][ T8637] ? __pfx__printk+0x10/0x10 [ 350.392544][ T8637] ? __pfx_lock_release+0x10/0x10 [ 350.397579][ T8637] ? __lock_acquire+0x1397/0x2100 [ 350.402619][ T8637] should_fail_ex+0x3b0/0x4e0 [ 350.407309][ T8637] _copy_from_user+0x2f/0xc0 [ 350.411916][ T8637] kstrtouint_from_user+0xc6/0x190 [ 350.417042][ T8637] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 350.422776][ T8637] ? __pfx_lock_acquire+0x10/0x10 [ 350.427861][ T8637] proc_fail_nth_write+0xaa/0x2d0 [ 350.432904][ T8637] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 350.438812][ T8637] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 350.444468][ T8637] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 350.450121][ T8637] vfs_write+0x2a3/0xd30 [ 350.454387][ T8637] ? __pfx_vfs_write+0x10/0x10 [ 350.459170][ T8637] ? __fget_files+0x2a/0x410 [ 350.463772][ T8637] ? __fget_files+0x395/0x410 [ 350.468468][ T8637] ? __fget_files+0x2a/0x410 [ 350.473092][ T8637] ksys_write+0x18f/0x2b0 [ 350.477438][ T8637] ? __pfx_ksys_write+0x10/0x10 [ 350.482304][ T8637] ? do_syscall_64+0x100/0x230 [ 350.487090][ T8637] ? do_syscall_64+0xb6/0x230 [ 350.491785][ T8637] do_syscall_64+0xf3/0x230 [ 350.496316][ T8637] ? clear_bhb_loop+0x35/0x90 [ 350.501004][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.506912][ T8637] RIP: 0033:0x7fd9bd7847df [ 350.511337][ T8637] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 350.530955][ T8637] RSP: 002b:00007fd9be61f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 350.539380][ T8637] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9bd7847df [ 350.547366][ T8637] RDX: 0000000000000001 RSI: 00007fd9be61f0a0 RDI: 0000000000000005 [ 350.555353][ T8637] RBP: 00007fd9be61f090 R08: 0000000000000000 R09: 0000000000000000 [ 350.563528][ T8637] R10: 0000000000000012 R11: 0000000000000293 R12: 0000000000000001 [ 350.571512][ T8637] R13: 0000000000000000 R14: 00007fd9bd976080 R15: 00007ffd1b211528 [ 350.579505][ T8637] [ 351.941111][ T29] audit: type=1800 audit(1737045744.056:210): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.750" name="/" dev="9p" ino=2 res=0 errno=0 [ 352.372856][ T8647] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 352.388327][ T8647] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 352.407670][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.414877][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.495206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.502473][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.850226][ T8458] veth0_vlan: entered promiscuous mode [ 352.894904][ T8458] veth1_vlan: entered promiscuous mode [ 352.946498][ T8458] veth0_macvtap: entered promiscuous mode [ 352.958175][ T8458] veth1_macvtap: entered promiscuous mode [ 352.974739][ T5826] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 353.002857][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.041038][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.072213][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.082825][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.092843][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.103642][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.122563][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.150642][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.161979][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 353.172114][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.182486][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.193518][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.203604][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.214171][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.224797][ T5826] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 353.242914][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.255859][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.301261][ T5826] usb 6-1: config 0 descriptor?? [ 353.318906][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.382800][ T8458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.404327][ T8458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.430487][ T8458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.449851][ T8458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.514457][ T5826] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 353.560457][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.641452][ T5826] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 353.697327][ T5826] usb 6-1: media controller created [ 353.769861][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.805213][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.820273][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.904492][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.921635][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.082536][ T8685] netlink: 160 bytes leftover after parsing attributes in process `syz.1.757'. [ 354.655326][ T8465] veth0_vlan: entered promiscuous mode [ 354.709686][ T8465] veth1_vlan: entered promiscuous mode [ 354.792498][ T5826] az6027: usb out operation failed. (-71) [ 354.798628][ T5826] stb0899_attach: Driver disabled by Kconfig [ 354.805994][ T5826] az6027: no front-end attached [ 354.805994][ T5826] [ 354.813847][ T5826] az6027: usb out operation failed. (-71) [ 354.819993][ T5826] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 354.828637][ T5826] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 354.851399][ T5826] dvb-usb: schedule remote query interval to 400 msecs. [ 354.858649][ T5826] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 354.870061][ T5826] usb 6-1: USB disconnect, device number 3 [ 354.876946][ T8465] veth0_macvtap: entered promiscuous mode [ 354.887723][ T8465] veth1_macvtap: entered promiscuous mode [ 355.017397][ T8694] binder: 8688:8694 ioctl c0306201 20000580 returned -14 [ 355.030971][ T8694] binder: 8688:8694 ioctl c0306201 200002c0 returned -22 [ 355.711835][ T5826] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 355.712875][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.737215][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.752829][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.763374][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.773358][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.783963][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.794186][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.805260][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.816475][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.826742][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.837284][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.847255][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.858274][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.868422][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.878969][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.888900][ T8465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.899712][ T8465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.910989][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.933518][ T8465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.942431][ T8465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.960857][ T8465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.977103][ T8465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.917766][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.930865][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.016065][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.046323][ T29] audit: type=1800 audit(1737045749.156:211): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.763" name="/" dev="9p" ino=2 res=0 errno=0 [ 357.056547][ T8704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 357.074366][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.171470][ T8704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 357.699303][ T8720] tmpfs: Bad value for 'mpol' [ 358.495712][ T8726] pimreg: entered allmulticast mode [ 358.616546][ T8730] pimreg: left allmulticast mode [ 358.990594][ T8744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.273680][ T8748] netlink: 160 bytes leftover after parsing attributes in process `syz.4.768'. [ 361.605535][ T29] audit: type=1800 audit(1737045753.726:212): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.778" name="/" dev="9p" ino=2 res=0 errno=0 [ 361.631924][ T8767] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 361.648174][ T8767] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 364.582235][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 364.596965][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 364.756082][ T8820] netlink: 160 bytes leftover after parsing attributes in process `syz.7.785'. [ 365.346953][ T3698] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 365.380627][ T8824] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.796'. [ 365.414486][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.794'. [ 365.443660][ T8827] netlink: 1 bytes leftover after parsing attributes in process `syz.6.794'. [ 365.452814][ T8827] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.501111][ T5906] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 365.611314][ T3698] usb 5-1: Using ep0 maxpacket: 32 [ 365.640458][ T3698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.668725][ T3698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024 [ 365.696160][ T5826] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 365.731115][ T5906] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 365.767357][ T5906] usb 2-1: config 1 has an invalid descriptor of length 85, skipping remainder of the config [ 365.805906][ T3698] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 365.844424][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 365.863781][ T3698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.951163][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 366.021789][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 366.034632][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58610, setting to 1024 [ 366.055127][ T5826] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 366.131010][ T5826] usb 6-1: can't read configurations, error -22 [ 366.139780][ T3698] usb 5-1: config 0 descriptor?? [ 366.147712][ T8812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.162082][ T5906] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.173771][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.181899][ T5906] usb 2-1: Product: syz [ 366.186106][ T5906] usb 2-1: Manufacturer: syz [ 366.204129][ T8816] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.219166][ T5906] cdc_wdm 2-1:1.0: skipping garbage [ 366.225169][ T5906] cdc_wdm 2-1:1.0: skipping garbage [ 366.231826][ T5906] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 366.239150][ T5906] cdc_wdm 2-1:1.0: Unknown control protocol [ 366.291532][ T5826] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 366.481088][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 366.652558][ T5826] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 366.660878][ T5826] usb 6-1: can't read configurations, error -22 [ 366.669247][ T5826] usb usb6-port1: attempt power cycle [ 367.016207][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.042442][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.080991][ T5826] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 367.111667][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 367.122049][ T5826] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 367.130217][ T5826] usb 6-1: can't read configurations, error -22 [ 367.199388][ T8] usb 2-1: USB disconnect, device number 32 [ 367.311019][ T5826] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 367.353220][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 367.361881][ T5826] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 367.372376][ T5826] usb 6-1: can't read configurations, error -22 [ 367.379224][ T5826] usb usb6-port1: unable to enumerate USB device [ 367.402223][ T3698] usb 5-1: string descriptor 0 read error: -71 [ 367.408887][ T3698] uclogic 0003:5543:3031.0006: failed retrieving string descriptor #200: -71 [ 367.418092][ T3698] uclogic 0003:5543:3031.0006: failed retrieving pen parameters: -71 [ 367.427341][ T3698] uclogic 0003:5543:3031.0006: failed probing pen v2 parameters: -71 [ 367.435683][ T3698] uclogic 0003:5543:3031.0006: failed probing parameters: -71 [ 367.443741][ T3698] uclogic 0003:5543:3031.0006: probe with driver uclogic failed with error -71 [ 367.455960][ T3698] usb 5-1: USB disconnect, device number 16 [ 367.925598][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 368.151922][ T8858] kAFS: No cell specified [ 368.826321][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.807'. [ 369.175283][ T8881] netlink: 'syz.5.813': attribute type 32 has an invalid length. [ 369.191267][ T5876] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 369.382654][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 369.400916][ T5876] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 369.429269][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 369.450062][ T5876] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 369.464740][ T8892] binder: BINDER_SET_CONTEXT_MGR already set [ 369.469490][ T5876] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 369.481121][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.489209][ T5876] usb 7-1: Product: syz [ 369.499276][ T8892] binder: 8888:8892 ioctl 4018620d 20000040 returned -16 [ 369.528087][ T5876] usb 7-1: Manufacturer: syz [ 369.537349][ T5876] usb 7-1: SerialNumber: syz [ 369.556535][ T5876] usb 7-1: config 0 descriptor?? [ 369.563338][ T8873] use of bytesused == 0 is deprecated and will be removed in the future, [ 369.580867][ T5876] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 369.600055][ T8873] use the actual size instead. [ 369.816807][ T5876] ums-isd200 7-1:0.0: probe with driver ums-isd200 failed with error -22 [ 370.856301][ T8926] $Hÿ: (slave team0): Releasing backup interface [ 370.876988][ T8926] team0: left promiscuous mode [ 370.930020][ T8926] team_slave_0: left promiscuous mode [ 371.831374][ T8926] team_slave_1: left promiscuous mode [ 371.922119][ T5876] usb 7-1: USB disconnect, device number 2 [ 371.925511][ T8926] bridge_slave_0: left allmulticast mode [ 372.318979][ T8926] bridge_slave_0: left promiscuous mode [ 372.362880][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.145030][ T8926] bridge_slave_1: left allmulticast mode [ 373.150952][ T8926] bridge_slave_1: left promiscuous mode [ 373.156704][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.194201][ T8926] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 373.226244][ T8926] bond_slave_0: left promiscuous mode [ 373.654621][ T8926] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 373.766588][ T8926] bond_slave_1: left promiscuous mode [ 373.820426][ T8949] input: syz0 as /devices/virtual/input/input8 [ 373.919374][ T8926] team0: Port device team_slave_0 removed [ 373.937771][ T8926] team0: Port device team_slave_1 removed [ 373.951555][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.959511][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.973023][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.982088][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.210981][ T5918] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 374.775022][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 374.788485][ T5918] usb 7-1: config 0 interface 0 has no altsetting 0 [ 375.413191][ T5918] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 375.424401][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.435511][ T5918] usb 7-1: Product: syz [ 375.447038][ T5918] usb 7-1: Manufacturer: syz [ 375.453076][ T5918] usb 7-1: SerialNumber: syz [ 375.459973][ T5918] usb 7-1: config 0 descriptor?? [ 375.806465][ T29] audit: type=1800 audit(1737045767.876:213): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.838" name="/" dev="9p" ino=2 res=0 errno=0 [ 375.830966][ T8975] netlink: 36 bytes leftover after parsing attributes in process `syz.7.839'. [ 376.454749][ T8972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 376.511002][ T8972] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 376.574532][ T5918] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 376.589829][ T5918] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 376.624050][ T5918] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 378.168786][ T8] usb 7-1: USB disconnect, device number 3 [ 378.290819][ T29] audit: type=1800 audit(1737045770.406:214): pid=8992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.844" name="/" dev="9p" ino=2 res=0 errno=0 [ 378.486043][ T8992] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 378.518575][ T8992] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 378.868061][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.211264][ T9014] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 381.237716][ T9014] CIFS mount error: No usable UNC path provided in device string! [ 381.237716][ T9014] [ 381.248220][ T9014] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.804280][ T9017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.850'. [ 382.766245][ T9027] x_tables: unsorted underflow at hook 3 [ 382.802341][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 383.447614][ T9036] FAULT_INJECTION: forcing a failure. [ 383.447614][ T9036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.464911][ T9036] CPU: 1 UID: 0 PID: 9036 Comm: syz.4.858 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 383.475579][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 383.485682][ T9036] Call Trace: [ 383.488999][ T9036] [ 383.491960][ T9036] dump_stack_lvl+0x241/0x360 [ 383.496690][ T9036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.501928][ T9036] ? __pfx__printk+0x10/0x10 [ 383.506737][ T9036] ? __pfx_lock_release+0x10/0x10 [ 383.511884][ T9036] ? __drm_mode_object_find+0x448/0x5d0 [ 383.517479][ T9036] should_fail_ex+0x3b0/0x4e0 [ 383.522199][ T9036] _copy_from_user+0x2f/0xc0 [ 383.526844][ T9036] drm_mode_atomic_ioctl+0x786/0x1410 [ 383.532279][ T9036] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 383.538164][ T9036] ? do_raw_spin_unlock+0x13c/0x8b0 [ 383.543431][ T9036] ? _raw_spin_unlock+0x28/0x50 [ 383.548344][ T9036] drm_ioctl_kernel+0x337/0x440 [ 383.553248][ T9036] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 383.559102][ T9036] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 383.564613][ T9036] ? __might_fault+0xc6/0x120 [ 383.569362][ T9036] drm_ioctl+0x60e/0xad0 [ 383.573656][ T9036] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 383.579520][ T9036] ? __pfx_drm_ioctl+0x10/0x10 [ 383.584429][ T9036] ? __fget_files+0x2a/0x410 [ 383.589082][ T9036] ? __pfx_drm_ioctl+0x10/0x10 [ 383.593899][ T9036] __se_sys_ioctl+0xf5/0x170 [ 383.598553][ T9036] do_syscall_64+0xf3/0x230 [ 383.603107][ T9036] ? clear_bhb_loop+0x35/0x90 [ 383.607823][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.613774][ T9036] RIP: 0033:0x7fd9bd785d29 [ 383.618247][ T9036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.637913][ T9036] RSP: 002b:00007fd9be640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.646385][ T9036] RAX: ffffffffffffffda RBX: 00007fd9bd975fa0 RCX: 00007fd9bd785d29 [ 383.654407][ T9036] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 383.662431][ T9036] RBP: 00007fd9be640090 R08: 0000000000000000 R09: 0000000000000000 [ 383.670438][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.678462][ T9036] R13: 0000000000000000 R14: 00007fd9bd975fa0 R15: 00007ffd1b211528 [ 383.686511][ T9036] [ 383.818383][ T29] audit: type=1800 audit(1737045775.936:215): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.861" name="/" dev="9p" ino=2 res=0 errno=0 [ 383.873009][ T9041] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 383.929002][ T9048] IPVS: length: 163 != 24 [ 383.946204][ T9041] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 384.397158][ T9066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.593695][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.6.871'. [ 385.031112][ T5826] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 385.331849][ T5826] usb 5-1: string descriptor 0 read error: -22 [ 385.338850][ T5826] usb 5-1: New USB device found, idVendor=04b4, idProduct=8611, bcdDevice=95.8f [ 385.425935][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.502952][ T5826] usb 5-1: config 0 descriptor?? [ 386.206408][ T9092] xt_nat: multiple ranges no longer supported [ 386.215502][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.224124][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.136243][ T9103] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 387.146457][ T9103] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 388.196304][ T5918] usb 5-1: USB disconnect, device number 17 [ 388.263959][ T29] audit: type=1800 audit(1737045780.386:216): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.883" name="/" dev="9p" ino=2 res=0 errno=0 [ 388.306593][ T9113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 388.512301][ T9113] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 388.589435][ T9121] netlink: 277 bytes leftover after parsing attributes in process `syz.1.886'. [ 389.881398][ T9136] tmpfs: Unknown parameter 'usrquotaÿ' [ 390.397438][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 390.582686][ T9147] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 390.590593][ T9147] UDF-fs: Scanning with blocksize 512 failed [ 390.598906][ T9147] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 390.607166][ T9147] UDF-fs: Scanning with blocksize 1024 failed [ 390.654727][ T9147] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 390.662395][ T9147] UDF-fs: Scanning with blocksize 2048 failed [ 390.670722][ T9147] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 390.678403][ T9147] UDF-fs: Scanning with blocksize 4096 failed [ 391.425139][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 391.477365][ T9156] binder: BINDER_SET_CONTEXT_MGR already set [ 391.484044][ T9156] binder: 9155:9156 ioctl 4018620d 20000040 returned -16 [ 391.544609][ T5918] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 391.553122][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.563117][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.637055][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 391.646100][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 392.237442][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.248044][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.261682][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.270905][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.561862][ T5918] usb 6-1: usb_control_msg returned -32 [ 392.567640][ T5918] usbtmc 6-1:16.0: can't read capabilities [ 393.530806][ T29] audit: type=1800 audit(1737045785.636:217): pid=9166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.900" name="/" dev="9p" ino=2 res=0 errno=0 [ 393.604303][ T9166] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 393.606392][ T5918] usb 6-1: USB disconnect, device number 8 [ 393.640904][ T9166] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 394.028710][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 394.239398][ T8] usb 5-1: device descriptor read/64, error -71 [ 394.472176][ T5909] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 394.500842][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 394.681022][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 394.701823][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.712895][ T8] usb 5-1: device descriptor read/64, error -71 [ 394.759499][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.811656][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.821648][ T8] usb usb5-port1: attempt power cycle [ 394.860092][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.879939][ T5909] usb 2-1: Product: syz [ 394.898253][ T5909] usb 2-1: Manufacturer: syz [ 394.918932][ T5909] usb 2-1: SerialNumber: syz [ 394.943924][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.954588][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.963670][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.972483][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.982440][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 394.991837][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.188480][ T9177] netlink: 'syz.1.905': attribute type 32 has an invalid length. [ 395.200535][ T5909] usb 2-1: 0:2 : does not exist [ 395.205993][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 395.274196][ T5909] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 395.282988][ T8] usb 5-1: device descriptor read/8, error -71 [ 395.333057][ T5909] usb 2-1: USB disconnect, device number 33 [ 395.538098][ T9196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.541046][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 395.597252][ T8] usb 5-1: device descriptor read/8, error -71 [ 395.601854][ T9184] chnl_net:caif_netlink_parms(): no params data found [ 395.721412][ T8] usb usb5-port1: unable to enumerate USB device [ 395.933231][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.953901][ T9184] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.006965][ T9184] bridge_slave_0: entered allmulticast mode [ 396.476464][ T9184] bridge_slave_0: entered promiscuous mode [ 396.552256][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 396.561476][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 397.064076][ T5835] Bluetooth: hci0: command tx timeout [ 397.242695][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.250187][ T9184] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.271851][ T9184] bridge_slave_1: entered allmulticast mode [ 397.279273][ T9184] bridge_slave_1: entered promiscuous mode [ 397.459831][ T9184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.488352][ T9184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.598138][ T9184] team0: Port device team_slave_0 added [ 397.607612][ T9184] team0: Port device team_slave_1 added [ 397.676410][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.692146][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.719117][ T5876] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 397.751424][ T9184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.793474][ T9184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.800495][ T9184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.835326][ T9184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.908925][ T9184] hsr_slave_0: entered promiscuous mode [ 397.923835][ T5876] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.963052][ T5876] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 398.003273][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.024763][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 398.038263][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 398.057707][ T5876] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 398.069490][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.101415][ T9184] hsr_slave_1: entered promiscuous mode [ 398.129093][ T9184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.145784][ T5876] usb 2-1: Product: syz [ 398.159741][ T5876] usb 2-1: Manufacturer: syz [ 398.170803][ T9184] Cannot create hsr debugfs directory [ 398.256639][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 398.283085][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 398.321090][ T5876] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 398.348625][ T5876] cdc_wdm 2-1:1.0: Unknown control protocol [ 398.502685][ T5826] usb 2-1: USB disconnect, device number 34 [ 398.956425][ T9184] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 398.991376][ T9184] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 399.027921][ T9184] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 399.060234][ T9184] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 399.171282][ T5876] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 399.200611][ T9184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.253663][ T9184] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.261119][ T5835] Bluetooth: hci0: command tx timeout [ 399.272677][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.279885][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.305833][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.313090][ T6405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.343584][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 399.358962][ T5876] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 399.383376][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.438323][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.466356][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.806377][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.124471][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.138689][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.379087][ T5876] usb 5-1: usb_control_msg returned -32 [ 400.395813][ T5876] usbtmc 5-1:16.0: can't read capabilities [ 400.492110][ T9184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.790662][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.923'. [ 400.799760][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.7.923'. [ 401.403373][ T5835] Bluetooth: hci0: command tx timeout [ 401.853207][ T9184] veth0_vlan: entered promiscuous mode [ 401.866352][ T9184] veth1_vlan: entered promiscuous mode [ 401.919997][ T9184] veth0_macvtap: entered promiscuous mode [ 401.934473][ T9184] veth1_macvtap: entered promiscuous mode [ 401.950276][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.961048][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.971231][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.982088][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.992007][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.002771][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.013021][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.023829][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.035799][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.045781][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.056313][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.066387][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.077417][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.087817][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.098549][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.108758][ T9184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.119528][ T9184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.130685][ T9184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.140794][ T9184] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.149561][ T9184] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.158467][ T9184] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.167331][ T9184] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.239344][ T5876] usb 5-1: USB disconnect, device number 22 [ 402.397730][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.409635][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.519820][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.527932][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.650926][ T5826] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 402.801318][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 402.815754][ T5826] usb 6-1: config 2 interface 0 has no altsetting 0 [ 402.838307][ T5826] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 402.863710][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.964028][ T5826] usb 6-1: Product: syz [ 402.986575][ T5826] usb 6-1: Manufacturer: syz [ 403.005522][ T5826] usb 6-1: SerialNumber: syz [ 403.276359][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.311966][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.386867][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.425067][ T5835] Bluetooth: hci0: command tx timeout [ 403.461916][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.565542][ T5826] usb 6-1: USB disconnect, device number 9 [ 403.690999][ T9187] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 403.984708][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 404.579504][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.935'. [ 404.622334][ T9300] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 404.640686][ T9300] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 404.658167][ T9299] netlink: 16 bytes leftover after parsing attributes in process `syz.8.935'. [ 404.720935][ T9187] usb 5-1: Using ep0 maxpacket: 8 [ 404.732383][ T9187] usb 5-1: config index 0 descriptor too short (expected 1821, got 853) [ 404.750855][ T9187] usb 5-1: config 0 has an invalid interface number: 103 but max is 2 [ 404.759095][ T9187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.770366][ T9187] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 404.779789][ T9187] usb 5-1: config 0 has no interface number 1 [ 404.786218][ T9187] usb 5-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 404.797482][ T9187] usb 5-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 404.808602][ T9187] usb 5-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 404.819632][ T9187] usb 5-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 404.830557][ T9187] usb 5-1: config 0 interface 103 has no altsetting 0 [ 404.840513][ T9187] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 404.849873][ T9187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.859017][ T9187] usb 5-1: Product: syz [ 404.863353][ T9187] usb 5-1: Manufacturer: syz [ 404.868003][ T9187] usb 5-1: SerialNumber: syz [ 404.903787][ T9187] usb 5-1: config 0 descriptor?? [ 404.961774][ T9306] FAULT_INJECTION: forcing a failure. [ 404.961774][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 404.974652][ T9306] CPU: 1 UID: 0 PID: 9306 Comm: syz.5.938 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 404.985382][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 404.995475][ T9306] Call Trace: [ 404.998783][ T9306] [ 405.001778][ T9306] dump_stack_lvl+0x241/0x360 [ 405.006498][ T9306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.011731][ T9306] ? __pfx__printk+0x10/0x10 [ 405.016390][ T9306] ? __kmalloc_cache_noprof+0x48/0x390 [ 405.021885][ T9306] ? __pfx___might_resched+0x10/0x10 [ 405.027239][ T9306] should_fail_ex+0x3b0/0x4e0 [ 405.031973][ T9306] should_failslab+0xac/0x100 [ 405.036763][ T9306] __kmalloc_cache_noprof+0x70/0x390 [ 405.042100][ T9306] ? fib_insert_alias+0x861/0x1280 [ 405.047298][ T9306] fib_insert_alias+0x861/0x1280 [ 405.052330][ T9306] fib_trie_unmerge+0x41e/0xed0 [ 405.057342][ T9306] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 405.062752][ T9306] ? trace_kmalloc+0x1f/0xd0 [ 405.067399][ T9306] ? fib_nl2rule+0x371/0x1b50 [ 405.072125][ T9306] ? fib_nl2rule+0x126e/0x1b50 [ 405.076932][ T9306] fib_unmerge+0xc5/0x370 [ 405.081324][ T9306] fib4_rule_configure+0x2a0/0xc30 [ 405.086529][ T9306] ? __pfx_fib4_rule_configure+0x10/0x10 [ 405.092220][ T9306] fib_nl_newrule+0x11f2/0x1d30 [ 405.097151][ T9306] ? __pfx_fib_nl_newrule+0x10/0x10 [ 405.102397][ T9306] ? rcu_is_watching+0x15/0xb0 [ 405.107223][ T9306] ? __mutex_lock+0xaf9/0xee0 [ 405.111990][ T9306] ? __pfx_fib_nl_newrule+0x10/0x10 [ 405.117238][ T9306] rtnetlink_rcv_msg+0x73f/0xcf0 [ 405.122224][ T9306] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 405.127395][ T9306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.132917][ T9306] ? ref_tracker_free+0x643/0x7e0 [ 405.138003][ T9306] netlink_rcv_skb+0x1e3/0x430 [ 405.142850][ T9306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.148371][ T9306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.153731][ T9306] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.158981][ T9306] netlink_unicast+0x7f6/0x990 [ 405.163780][ T9306] ? __pfx_netlink_unicast+0x10/0x10 [ 405.169116][ T9306] ? __virt_addr_valid+0x45f/0x530 [ 405.174267][ T9306] ? __phys_addr_symbol+0x2f/0x70 [ 405.179365][ T9306] ? __check_object_size+0x47a/0x730 [ 405.184709][ T9306] netlink_sendmsg+0x8e4/0xcb0 [ 405.189518][ T9306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.194861][ T9306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.200190][ T9306] __sock_sendmsg+0x221/0x270 [ 405.204912][ T9306] ____sys_sendmsg+0x52a/0x7e0 [ 405.209737][ T9306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.215065][ T9306] ? __fget_files+0x2a/0x410 [ 405.219711][ T9306] ? __fget_files+0x2a/0x410 [ 405.224364][ T9306] __sys_sendmsg+0x269/0x350 [ 405.229014][ T9306] ? __pfx_lock_release+0x10/0x10 [ 405.234078][ T9306] ? __pfx___sys_sendmsg+0x10/0x10 [ 405.239243][ T9306] ? __pfx_vfs_write+0x10/0x10 [ 405.244066][ T9306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 405.250444][ T9306] ? do_syscall_64+0x100/0x230 [ 405.255266][ T9306] ? do_syscall_64+0xb6/0x230 [ 405.259985][ T9306] do_syscall_64+0xf3/0x230 [ 405.264529][ T9306] ? clear_bhb_loop+0x35/0x90 [ 405.269242][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.275170][ T9306] RIP: 0033:0x7fceab385d29 [ 405.279608][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.299346][ T9306] RSP: 002b:00007fceac205038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.307804][ T9306] RAX: ffffffffffffffda RBX: 00007fceab575fa0 RCX: 00007fceab385d29 [ 405.315799][ T9306] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 405.323803][ T9306] RBP: 00007fceac205090 R08: 0000000000000000 R09: 0000000000000000 [ 405.331813][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.339796][ T9306] R13: 0000000000000000 R14: 00007fceab575fa0 R15: 00007ffc860e4548 [ 405.347798][ T9306] [ 405.433582][ T3698] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 405.538157][ T9187] videodev: could not get a free minor [ 405.548950][ T9187] dsbr100 5-1:0.0: couldn't register video device [ 405.556196][ T9187] dsbr100 5-1:0.0: probe with driver dsbr100 failed with error -23 [ 405.566600][ T9187] usb 5-1: USB disconnect, device number 23 [ 405.596651][ T3698] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 405.605645][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.942'. [ 405.614399][ T3698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.615446][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.942'. [ 405.626936][ T3698] usb 9-1: Product: syz [ 405.639851][ T3698] usb 9-1: Manufacturer: syz [ 405.649668][ T3698] usb 9-1: SerialNumber: syz [ 405.665861][ T3698] usb 9-1: config 0 descriptor?? [ 405.868752][ T9325] FAULT_INJECTION: forcing a failure. [ 405.868752][ T9325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.882386][ T9325] CPU: 1 UID: 0 PID: 9325 Comm: syz.1.944 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 405.893047][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 405.903160][ T9325] Call Trace: [ 405.906453][ T9325] [ 405.909409][ T9325] dump_stack_lvl+0x241/0x360 [ 405.914119][ T9325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.919391][ T9325] ? __pfx__printk+0x10/0x10 [ 405.924038][ T9325] ? snprintf+0xda/0x120 [ 405.928299][ T9325] should_fail_ex+0x3b0/0x4e0 [ 405.932995][ T9325] _copy_to_user+0x31/0xb0 [ 405.937462][ T9325] simple_read_from_buffer+0xca/0x150 [ 405.942874][ T9325] proc_fail_nth_read+0x1e9/0x250 [ 405.947964][ T9325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.953569][ T9325] ? rw_verify_area+0x55e/0x6f0 [ 405.958460][ T9325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.964057][ T9325] vfs_read+0x1fc/0xb70 [ 405.968237][ T9325] ? __pfx___mutex_lock+0x10/0x10 [ 405.973286][ T9325] ? __pfx_vfs_read+0x10/0x10 [ 405.977985][ T9325] ? __fget_files+0x2a/0x410 [ 405.982587][ T9325] ? __fget_files+0x395/0x410 [ 405.987275][ T9325] ? __fget_files+0x2a/0x410 [ 405.991899][ T9325] ksys_read+0x18f/0x2b0 [ 405.996192][ T9325] ? __pfx_ksys_read+0x10/0x10 [ 406.001003][ T9325] ? do_syscall_64+0x100/0x230 [ 406.005827][ T9325] ? do_syscall_64+0xb6/0x230 [ 406.010550][ T9325] do_syscall_64+0xf3/0x230 [ 406.015077][ T9325] ? clear_bhb_loop+0x35/0x90 [ 406.019767][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.025681][ T9325] RIP: 0033:0x7fbf86f8473c [ 406.030107][ T9325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 406.049831][ T9325] RSP: 002b:00007fbf87dec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.058305][ T9325] RAX: ffffffffffffffda RBX: 00007fbf87175fa0 RCX: 00007fbf86f8473c [ 406.066338][ T9325] RDX: 000000000000000f RSI: 00007fbf87dec0a0 RDI: 0000000000000003 [ 406.074367][ T9325] RBP: 00007fbf87dec090 R08: 0000000000000000 R09: 0000000000000000 [ 406.082417][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.090438][ T9325] R13: 0000000000000000 R14: 00007fbf87175fa0 R15: 00007ffe95756618 [ 406.098477][ T9325] [ 406.101555][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.243854][ T3698] usb 9-1: Firmware: major: 3, minor: 0, hardware type: ATUSB (0) [ 406.454140][ T3698] usb 9-1: failed to fetch extended address, random address set [ 406.524706][ T3698] usb 9-1: USB disconnect, device number 2 [ 406.601026][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 406.626798][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 407.390368][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.950'. [ 407.415101][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.950'. [ 407.463684][ T9351] program syz.1.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.586389][ T54] Bluetooth: hci2: sending frame failed (-49) [ 407.604086][ T5835] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 407.831255][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 407.950954][ T5918] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 407.994344][ T8] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 408.005257][ T8] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 408.015474][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.023773][ T8] usb 6-1: Product: syz [ 408.028205][ T8] usb 6-1: Manufacturer: syz [ 408.032997][ T8] usb 6-1: SerialNumber: syz [ 408.040111][ T8] usb 6-1: config 0 descriptor?? [ 408.061287][ T3698] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 408.120976][ T5918] usb 9-1: Using ep0 maxpacket: 8 [ 408.128874][ T5918] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 408.147459][ T5918] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 408.158268][ T5918] usb 9-1: can't read configurations, error -61 [ 408.218249][ T3698] usb 2-1: not running at top speed; connect to a high speed hub [ 408.241036][ T3698] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.263205][ T3698] usb 2-1: config 1 interface 0 has no altsetting 0 [ 408.275159][ T3698] usb 2-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 408.284409][ T3698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.292690][ T3698] usb 2-1: Product: Д [ 408.296823][ T3698] usb 2-1: Manufacturer: І [ 408.301906][ T3698] usb 2-1: SerialNumber: à  [ 408.315920][ T5918] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 408.420093][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 408.470983][ T5918] usb 9-1: Using ep0 maxpacket: 8 [ 408.480512][ T5918] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 408.490883][ T5918] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 408.498563][ T5918] usb 9-1: can't read configurations, error -61 [ 408.508866][ T9371] program syz.4.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.514611][ T5918] usb usb9-port1: attempt power cycle [ 408.788967][ T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 408.821099][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 409.031595][ T5918] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 409.073104][ T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 409.080188][ T5918] usb 9-1: Using ep0 maxpacket: 8 [ 409.091880][ T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 409.102836][ T8] asix 6-1:0.0: probe with driver asix failed with error -71 [ 409.124197][ T8] usb 6-1: USB disconnect, device number 10 [ 409.837794][ T5918] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 409.849539][ T5918] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 409.858481][ T5918] usb 9-1: can't read configurations, error -61 [ 409.865036][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 409.873174][ T46] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.886451][ T46] usb 5-1: config 1 interface 0 has no altsetting 0 [ 409.936567][ T8] IPVS: starting estimator thread 0... [ 409.961968][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 409.971526][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.051100][ T9382] IPVS: using max 20 ests per chain, 48000 per kthread [ 410.273337][ T46] usb 5-1: Product: syz [ 410.277678][ T46] usb 5-1: Manufacturer: 禖᳛ㆪîᢃ튟洔㽌籆﫦ڇܩ⠔쳒뇘玳줃׷ꙟꋯ㘓ᒋ餠覽ꌃ⇼Ȏ綞ﮰစꊯ虸촓ç©ë‚žæŸ¡ë†¢é¹¢æ§”à§£á·â¾–ﮪ㿟鯊ᬊ㠚굜ಲ⒗軎ç€ê—¢äƒ¼ã¶£ï»€ë¦î¬›î³‰á³¤îºšè•܃鳦藌孮雭ᦷ둘켨鎾㤳赲塸趙䇱༺泀奡젶⅀⊫춚暈縴î£ã½¿ì­â£’ [ 410.306300][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.312665][ T46] usb 5-1: SerialNumber: syz [ 410.370991][ T5918] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 410.411777][ T5918] usb 9-1: Using ep0 maxpacket: 8 [ 410.418275][ T5918] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 410.437851][ T5918] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 410.445741][ T5918] usb 9-1: can't read configurations, error -61 [ 410.456623][ T5918] usb usb9-port1: unable to enumerate USB device [ 410.525403][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 411.246289][ T9390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.422833][ T46] usbhid 5-1:1.0: can't add hid device: -71 [ 411.429870][ T46] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 411.458485][ T46] usb 5-1: USB disconnect, device number 24 [ 411.626826][ T3698] usbhid 2-1:1.0: can't add hid device: -71 [ 411.632946][ T3698] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 411.652781][ T3698] usb 2-1: USB disconnect, device number 35 [ 411.910944][ T46] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 412.051054][ T46] usb 5-1: device descriptor read/64, error -71 [ 412.239192][ T29] audit: type=1800 audit(1737045804.356:218): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.968" name="bus" dev="overlay" ino=1116 res=0 errno=0 [ 412.322329][ T46] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 412.521043][ T46] usb 5-1: device descriptor read/64, error -71 [ 412.631355][ T46] usb usb5-port1: attempt power cycle [ 412.970968][ T46] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 413.039347][ T46] usb 5-1: device descriptor read/8, error -71 [ 413.233317][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.5.973'. [ 413.678310][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.976'. [ 414.627710][ T46] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 414.809046][ T9433] tipc: Enabled bearer , priority 0 [ 414.810912][ T46] usb 5-1: device descriptor read/8, error -71 [ 415.075961][ T46] usb usb5-port1: unable to enumerate USB device [ 415.283016][ T9449] ISOFS: Unable to identify CD-ROM format. [ 415.462817][ T9446] 9pnet_fd: Insufficient options for proto=fd [ 417.083582][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.988'. [ 417.882735][ T9477] syz.8.991[9477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.882849][ T9477] syz.8.991[9477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.894330][ T9477] syz.8.991[9477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.955005][ T29] audit: type=1326 audit(1737045810.066:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 418.069277][ T29] audit: type=1326 audit(1737045810.066:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 418.099048][ T29] audit: type=1326 audit(1737045810.066:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 418.166195][ T29] audit: type=1326 audit(1737045810.066:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 418.239582][ T29] audit: type=1326 audit(1737045810.066:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 418.261067][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.286246][ T29] audit: type=1326 audit(1737045810.066:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf86f87c47 code=0x7ffc0000 [ 418.314955][ T29] audit: type=1326 audit(1737045810.066:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbf86f87bbc code=0x7ffc0000 [ 418.337947][ T29] audit: type=1326 audit(1737045810.066:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbf86f87af4 code=0x7ffc0000 [ 418.359348][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.386136][ T29] audit: type=1326 audit(1737045810.066:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbf86f87af4 code=0x7ffc0000 [ 418.426528][ T29] audit: type=1326 audit(1737045810.066:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbf86f8498a code=0x7ffc0000 [ 418.740915][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 418.872891][ T9502] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 418.892013][ T9502] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 419.091035][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 419.127865][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1002'. [ 419.579918][ T8] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 419.588748][ T8] usb 2-1: config 0 has no interface number 0 [ 419.601489][ T8] usb 2-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 419.730652][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 419.741913][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.749959][ T8] usb 2-1: Product: syz [ 419.779830][ T8] usb 2-1: Manufacturer: syz [ 419.798873][ T8] usb 2-1: SerialNumber: syz [ 419.872519][ T8] usb 2-1: config 0 descriptor?? [ 420.200277][ T9521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 421.533978][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 421.841353][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 421.950818][ T8] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 422.130321][ T8] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 422.170367][ T8] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 422.198446][ T8] usb 9-1: Product: syz [ 422.214220][ T8] usb 9-1: Manufacturer: syz [ 422.228883][ T8] usb 9-1: SerialNumber: syz [ 422.253726][ T8] usb 9-1: config 0 descriptor?? [ 422.278116][ T9520] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 422.883666][ T5918] usb 9-1: USB disconnect, device number 7 [ 423.204523][ T9452] usb 2-1: USB disconnect, device number 36 [ 423.212544][ T9452] f81534a_ctrl 2-1:0.88: failed to set register 0x116: -19 [ 423.219816][ T9452] f81534a_ctrl 2-1:0.88: failed to enable ports: -19 [ 424.342126][ T9551] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1018'. [ 424.680889][ T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 424.881144][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 424.892807][ T46] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 424.920968][ T46] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.137739][ T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.148139][ T46] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65312, setting to 1024 [ 425.166237][ T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 425.176522][ T46] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.190003][ T46] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.199254][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.371196][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 425.561136][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 425.813062][ T46] usb 6-1: usb_control_msg returned -32 [ 425.844001][ T46] usbtmc 6-1:16.0: can't read capabilities [ 426.001486][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 426.026204][ T8] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 426.043036][ T8] usb 2-1: config 11 has no interface number 0 [ 426.060288][ T8] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 426.086136][ T8] usb 2-1: config 11 interface 244 altsetting 5 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 426.289723][ T8] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.329668][ T9573] macvlan0: entered allmulticast mode [ 426.335972][ T9573] veth1_vlan: entered allmulticast mode [ 426.558776][ T9573] veth1_vlan: left allmulticast mode [ 426.679159][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.741874][ T9573] macvlan0 (unregistering): left allmulticast mode [ 426.767516][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.994366][ T8] usb 2-1: config 11 interface 244 has no altsetting 0 [ 427.121854][ T8] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 427.131037][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.139082][ T8] usb 2-1: Product: syz [ 427.143644][ T8] usb 2-1: Manufacturer: syz [ 427.148293][ T8] usb 2-1: SerialNumber: syz [ 427.271830][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 427.271880][ T29] audit: type=1800 audit(1737045819.386:234): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1025" name="/" dev="9p" ino=2 res=0 errno=0 [ 427.299639][ T9582] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.316886][ T9582] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 427.396132][ T8] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 427.412290][ T8] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 427.441215][ T9586] input: syz1 as /devices/virtual/input/input9 [ 427.491664][ T8] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71 [ 427.529394][ T8] usb 2-1: USB disconnect, device number 37 [ 427.846910][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.856188][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.267223][ T46] usb 6-1: USB disconnect, device number 11 [ 431.302475][ T9621] overlay: Unknown parameter 'pcr' [ 431.711394][ T9634] 9pnet_fd: Insufficient options for proto=fd [ 432.221329][ T9452] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 432.371076][ T9452] usb 9-1: Using ep0 maxpacket: 8 [ 432.389661][ T9452] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 432.397787][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 432.422643][ T9452] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.451177][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.505980][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.542437][ T9452] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 432.555204][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 432.571853][ T9452] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.609588][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.631230][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.653516][ T9452] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 432.673758][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 432.721401][ T9452] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.761031][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.782058][ T9452] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.811069][ T29] audit: type=1800 audit(1737045824.916:235): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1040" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 432.839092][ T9452] usb 9-1: string descriptor 0 read error: -22 [ 432.861405][ T9452] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 432.901697][ T9452] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.975896][ T9452] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 433.044976][ T29] audit: type=1800 audit(1737045825.166:236): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1044" name="/" dev="9p" ino=2 res=0 errno=0 [ 433.083985][ T9650] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 433.094526][ T9650] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 433.152876][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1045'. [ 433.180504][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.218774][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.842399][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.907498][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.926554][ T9662] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 434.158570][ T9452] usb 9-1: USB disconnect, device number 8 [ 434.642085][ T9661] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 434.654588][ T9661] syz.7.1048: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 434.670476][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.7.1048 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 434.681217][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 434.691327][ T9661] Call Trace: [ 434.694648][ T9661] [ 434.697620][ T9661] dump_stack_lvl+0x241/0x360 [ 434.702368][ T9661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.707633][ T9661] ? __pfx__printk+0x10/0x10 [ 434.712285][ T9661] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 434.718768][ T9661] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 434.725340][ T9661] warn_alloc+0x278/0x410 [ 434.729737][ T9661] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 434.735864][ T9661] ? __pfx_warn_alloc+0x10/0x10 [ 434.740771][ T9661] ? kasan_save_track+0x3f/0x80 [ 434.745675][ T9661] ? __kasan_kmalloc+0x98/0xb0 [ 434.750496][ T9661] ? xsk_setsockopt+0x598/0x950 [ 434.755404][ T9661] ? do_sock_setsockopt+0x3af/0x720 [ 434.760659][ T9661] ? __x64_sys_setsockopt+0x1ee/0x280 [ 434.766088][ T9661] ? do_syscall_64+0xf3/0x230 [ 434.770824][ T9661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.776971][ T9661] __vmalloc_node_range_noprof+0x126/0x1380 [ 434.782969][ T9661] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 434.789358][ T9661] ? __kasan_kmalloc+0x98/0xb0 [ 434.794174][ T9661] vmalloc_user_noprof+0x74/0x80 [ 434.799162][ T9661] ? xskq_create+0xb6/0x170 [ 434.803720][ T9661] xskq_create+0xb6/0x170 [ 434.808105][ T9661] xsk_init_queue+0xa1/0x100 [ 434.812757][ T9661] xsk_setsockopt+0x598/0x950 [ 434.817512][ T9661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 434.822866][ T9661] ? __pfx_lock_acquire+0x10/0x10 [ 434.827997][ T9661] ? __fget_files+0x2a/0x410 [ 434.832653][ T9661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 434.837913][ T9661] do_sock_setsockopt+0x3af/0x720 [ 434.843019][ T9661] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 434.848640][ T9661] ? __fget_files+0x395/0x410 [ 434.853375][ T9661] ? __fget_files+0x2a/0x410 [ 434.858038][ T9661] __x64_sys_setsockopt+0x1ee/0x280 [ 434.863303][ T9661] do_syscall_64+0xf3/0x230 [ 434.867876][ T9661] ? clear_bhb_loop+0x35/0x90 [ 434.872611][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.878581][ T9661] RIP: 0033:0x7f8442185d29 [ 434.883052][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.902720][ T9661] RSP: 002b:00007f8442fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 434.911209][ T9661] RAX: ffffffffffffffda RBX: 00007f8442375fa0 RCX: 00007f8442185d29 [ 434.919243][ T9661] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 434.927266][ T9661] RBP: 00007f8442201b08 R08: 0000000000000020 R09: 0000000000000000 [ 434.935291][ T9661] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 434.943320][ T9661] R13: 0000000000000000 R14: 00007f8442375fa0 R15: 00007ffebde8a9e8 [ 434.951365][ T9661] [ 434.969945][ T9661] Mem-Info: [ 434.979552][ T9661] active_anon:312 inactive_anon:41658 isolated_anon:0 [ 434.979552][ T9661] active_file:19092 inactive_file:38740 isolated_file:0 [ 434.979552][ T9661] unevictable:768 dirty:116 writeback:0 [ 434.979552][ T9661] slab_reclaimable:10770 slab_unreclaimable:102962 [ 434.979552][ T9661] mapped:38860 shmem:39543 pagetables:725 [ 434.979552][ T9661] sec_pagetables:0 bounce:0 [ 434.979552][ T9661] kernel_misc_reclaimable:0 [ 434.979552][ T9661] free:1281791 free_pcp:517 free_cma:0 [ 435.025851][ T9661] Node 0 active_anon:1248kB inactive_anon:168632kB active_file:76292kB inactive_file:154960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157440kB dirty:460kB writeback:0kB shmem:158736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11044kB pagetables:2900kB sec_pagetables:0kB all_unreclaimable? no [ 435.339190][ T9661] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 435.930585][ T9661] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.008048][ T9661] lowmem_reserve[]: 0 2465 2466 0 0 [ 436.110833][ T9661] Node 0 DMA32 free:1172204kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:6952kB inactive_anon:177624kB active_file:83540kB inactive_file:146876kB unevictable:1536kB writepending:460kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:19140kB local_pcp:7164kB free_cma:0kB [ 436.285395][ T9661] lowmem_reserve[]: 0 0 0 0 0 [ 436.290314][ T9661] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:784kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 436.385014][ T9661] lowmem_reserve[]: 0 0 0 0 0 [ 436.394932][ T9661] Node 1 Normal free:3906040kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.450865][ T9661] lowmem_reserve[]: 0 0 0 0 0 [ 436.470957][ T9661] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 436.520914][ T9661] Node 0 DMA32: 256*4kB (UME) 67*8kB (UME) 173*16kB (UME) 160*32kB (UME) 635*64kB (UME) 666*128kB (UM) 353*256kB (UM) 158*512kB (UM) 49*1024kB (UME) 8*2048kB (UM) 200*4096kB (UM) = 1192360kB [ 436.558828][ T9661] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 436.574782][ T9661] Node 1 Normal: 240*4kB (UME) 69*8kB (UME) 49*16kB (UME) 198*32kB (UME) 97*64kB (UME) 38*128kB (UME) 13*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 1*2048kB (E) 945*4096kB (UM) = 3906040kB [ 436.595507][ T9661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.605256][ T9661] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 436.614766][ T5877] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 436.623181][ T9661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.640902][ T9661] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.658989][ T9661] 89551 total pagecache pages [ 436.664202][ T9661] 0 pages in swap cache [ 436.669114][ T9661] Free swap = 124804kB [ 436.679235][ T9661] Total swap = 124996kB [ 436.686248][ T9661] 2097051 pages RAM [ 436.690265][ T9661] 0 pages HighMem/MovableOnly [ 436.699925][ T9661] 427006 pages reserved [ 436.707515][ T9661] 0 pages cma reserved [ 436.781507][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 436.809562][ T5877] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 436.833285][ T5877] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 436.862143][ T5877] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 437.686919][ T5877] usb 2-1: config 250 has no interface number 0 [ 437.695617][ T5877] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 437.711334][ T5877] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 437.723058][ T5877] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 437.733778][ T5877] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 437.744458][ T5877] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 437.758249][ T5877] usb 2-1: config 250 interface 228 has no altsetting 0 [ 437.768283][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 437.775963][ T9683] binder: 9680:9683 ioctl 540f 20003c80 returned -22 [ 437.777616][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 437.800988][ T5877] usb 2-1: Product: syz [ 437.805953][ T5877] usb 2-1: SerialNumber: syz [ 437.820915][ T5877] hub 2-1:250.228: bad descriptor, ignoring hub [ 437.827360][ T5877] hub 2-1:250.228: probe with driver hub failed with error -5 [ 437.879406][ T9688] netlink: 'syz.7.1057': attribute type 2 has an invalid length. [ 437.891281][ T9688] netlink: 'syz.7.1057': attribute type 8 has an invalid length. [ 437.899236][ T9688] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1057'. [ 438.076843][ T5877] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 438.133325][ T5877] usb 2-1: USB disconnect, device number 38 [ 438.162032][ T9452] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 438.176787][ T5877] usblp0: removed [ 438.301260][ T9452] usb 9-1: device descriptor read/64, error -71 [ 438.308451][ T9697] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 438.395388][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.404990][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.491048][ T9187] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 438.541192][ T9452] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 438.690897][ T9452] usb 9-1: device descriptor read/64, error -71 [ 438.837511][ T9452] usb usb9-port1: attempt power cycle [ 439.170843][ T5877] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 439.220920][ T9452] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 439.251651][ T9452] usb 9-1: device descriptor read/8, error -71 [ 439.310116][ T9718] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 439.351194][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 439.360641][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.375445][ T5877] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 439.390864][ T5877] usb 2-1: config 1 has no interface number 1 [ 439.405234][ T5877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 439.453360][ T5877] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.467130][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.485740][ T5877] usb 2-1: Product: syz [ 439.502019][ T5877] usb 2-1: Manufacturer: syz [ 439.525810][ T5877] usb 2-1: SerialNumber: syz [ 439.542324][ T9452] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 439.581594][ T9452] usb 9-1: device descriptor read/8, error -71 [ 439.691118][ T9452] usb usb9-port1: unable to enumerate USB device [ 439.768896][ T5877] usb 2-1: 2:1 : sample bitwidth 128 in over sample bytes 1 [ 439.783703][ T5877] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 439.800407][ T5877] usb 2-1: USB disconnect, device number 39 [ 440.301680][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 440.314387][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.603991][ T9732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.613903][ T9732] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 442.283075][ T9759] FAULT_INJECTION: forcing a failure. [ 442.283075][ T9759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.301912][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.4.1081 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 442.312677][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 442.322814][ T9759] Call Trace: [ 442.326106][ T9759] [ 442.329045][ T9759] dump_stack_lvl+0x241/0x360 [ 442.333829][ T9759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.339115][ T9759] ? __pfx__printk+0x10/0x10 [ 442.343719][ T9759] ? __pfx_lock_release+0x10/0x10 [ 442.348899][ T9759] ? __drm_mode_object_find+0x448/0x5d0 [ 442.355456][ T9759] should_fail_ex+0x3b0/0x4e0 [ 442.360177][ T9759] _copy_from_user+0x2f/0xc0 [ 442.364803][ T9759] drm_mode_atomic_ioctl+0x786/0x1410 [ 442.370215][ T9759] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 442.376108][ T9759] ? do_raw_spin_unlock+0x13c/0x8b0 [ 442.381396][ T9759] ? _raw_spin_unlock+0x28/0x50 [ 442.386380][ T9759] drm_ioctl_kernel+0x337/0x440 [ 442.391287][ T9759] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 442.397136][ T9759] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 442.402527][ T9759] ? __might_fault+0xc6/0x120 [ 442.407222][ T9759] drm_ioctl+0x60e/0xad0 [ 442.409848][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.411468][ T9759] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 442.411556][ T9759] ? __pfx_drm_ioctl+0x10/0x10 [ 442.411594][ T9759] ? __fget_files+0x2a/0x410 [ 442.411624][ T9759] ? __pfx_drm_ioctl+0x10/0x10 [ 442.421657][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.425873][ T9759] __se_sys_ioctl+0xf5/0x170 [ 442.452447][ T9759] do_syscall_64+0xf3/0x230 [ 442.456994][ T9759] ? clear_bhb_loop+0x35/0x90 [ 442.461743][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.467943][ T9759] RIP: 0033:0x7fd9bd785d29 [ 442.472415][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.492087][ T9759] RSP: 002b:00007fd9be640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.500574][ T9759] RAX: ffffffffffffffda RBX: 00007fd9bd975fa0 RCX: 00007fd9bd785d29 [ 442.508586][ T9759] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 442.516595][ T9759] RBP: 00007fd9be640090 R08: 0000000000000000 R09: 0000000000000000 [ 442.525171][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.533538][ T9759] R13: 0000000000000000 R14: 00007fd9bd975fa0 R15: 00007ffd1b211528 [ 442.542002][ T9759] [ 442.663688][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1074'. [ 442.673801][ T9745] netlink: 272 bytes leftover after parsing attributes in process `syz.7.1074'. [ 442.683931][ T9745] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1074'. [ 442.696623][ T9745] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1074'. [ 445.104918][ T9789] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.114862][ T9789] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 448.280933][ T46] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 448.351405][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 448.421266][ T46] usb 9-1: device descriptor read/64, error -71 [ 448.491088][ T9828] binder: 9825:9828 ioctl c0306201 20000480 returned -14 [ 448.662077][ T46] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 449.011122][ T46] usb 9-1: device descriptor read/64, error -71 [ 449.138729][ T46] usb usb9-port1: attempt power cycle [ 449.217675][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.226828][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.361486][ T9836] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.371443][ T9836] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 449.480869][ T46] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 449.501603][ T46] usb 9-1: device descriptor read/8, error -71 [ 449.741971][ T46] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 449.761627][ T46] usb 9-1: device descriptor read/8, error -71 [ 449.871164][ T46] usb usb9-port1: unable to enumerate USB device [ 450.233855][ T9858] delete_channel: no stack [ 450.310036][ T9863] FAULT_INJECTION: forcing a failure. [ 450.310036][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 450.355332][ T9863] CPU: 0 UID: 0 PID: 9863 Comm: syz.5.1111 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 450.366110][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.376213][ T9863] Call Trace: [ 450.379531][ T9863] [ 450.382502][ T9863] dump_stack_lvl+0x241/0x360 [ 450.387237][ T9863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.392491][ T9863] ? __pfx__printk+0x10/0x10 [ 450.397142][ T9863] ? __kmalloc_cache_noprof+0x48/0x390 [ 450.402667][ T9863] ? __pfx___might_resched+0x10/0x10 [ 450.408023][ T9863] ? lockdep_init_map_type+0xa1/0x910 [ 450.413455][ T9863] should_fail_ex+0x3b0/0x4e0 [ 450.418243][ T9863] should_failslab+0xac/0x100 [ 450.422987][ T9863] __kmalloc_cache_noprof+0x70/0x390 [ 450.428757][ T9863] ? binder_transaction+0x19fd/0x7570 [ 450.434203][ T9863] binder_transaction+0x19fd/0x7570 [ 450.439479][ T9863] ? __pfx_validate_chain+0x10/0x10 [ 450.444756][ T9863] ? __lock_acquire+0x1397/0x2100 [ 450.449929][ T9863] ? __pfx_binder_transaction+0x10/0x10 [ 450.455562][ T9863] ? __pfx___might_resched+0x10/0x10 [ 450.460927][ T9863] ? __might_fault+0xaa/0x120 [ 450.465661][ T9863] ? __pfx_lock_release+0x10/0x10 [ 450.470741][ T9863] ? __might_fault+0xc6/0x120 [ 450.475477][ T9863] binder_ioctl_write_read+0x1045/0xb620 [ 450.481172][ T9863] ? preempt_count_add+0x93/0x190 [ 450.486265][ T9863] ? __kernel_text_address+0xd/0x40 [ 450.491545][ T9863] ? unwind_get_return_address+0x4d/0x90 [ 450.497247][ T9863] ? stack_trace_save+0x118/0x1d0 [ 450.502331][ T9863] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 450.508370][ T9863] ? __pfx_stack_trace_save+0x10/0x10 [ 450.513811][ T9863] ? mark_lock+0x9a/0x360 [ 450.518412][ T9863] ? __lock_acquire+0x1397/0x2100 [ 450.523498][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.529649][ T9863] ? binder_get_thread+0x16e/0x6c0 [ 450.534821][ T9863] ? __pfx_lock_release+0x10/0x10 [ 450.540126][ T9863] ? do_raw_spin_unlock+0x13c/0x8b0 [ 450.545394][ T9863] ? _raw_spin_unlock+0x28/0x50 [ 450.550294][ T9863] ? binder_get_thread+0x178/0x6c0 [ 450.555459][ T9863] binder_ioctl+0x436/0x1cb0 [ 450.560109][ T9863] ? tomoyo_path_number_perm+0x6f9/0x860 [ 450.565783][ T9863] ? __lock_acquire+0x1397/0x2100 [ 450.570852][ T9863] ? tomoyo_path_number_perm+0x206/0x860 [ 450.576528][ T9863] ? smack_log+0x123/0x540 [ 450.580990][ T9863] ? __pfx_binder_ioctl+0x10/0x10 [ 450.586068][ T9863] ? __pfx_smack_log+0x10/0x10 [ 450.590878][ T9863] ? smk_access+0x4ab/0x4e0 [ 450.595432][ T9863] ? smk_tskacc+0x300/0x370 [ 450.599984][ T9863] ? smack_file_ioctl+0x2f7/0x3a0 [ 450.605046][ T9863] ? __pfx_smack_file_ioctl+0x10/0x10 [ 450.610551][ T9863] ? __fget_files+0x2a/0x410 [ 450.615194][ T9863] ? __fget_files+0x2a/0x410 [ 450.619830][ T9863] ? __pfx_binder_ioctl+0x10/0x10 [ 450.624934][ T9863] __se_sys_ioctl+0xf5/0x170 [ 450.629578][ T9863] do_syscall_64+0xf3/0x230 [ 450.634143][ T9863] ? clear_bhb_loop+0x35/0x90 [ 450.638863][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.644826][ T9863] RIP: 0033:0x7fceab385d29 [ 450.649393][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.669025][ T9863] RSP: 002b:00007fceac205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.677488][ T9863] RAX: ffffffffffffffda RBX: 00007fceab575fa0 RCX: 00007fceab385d29 [ 450.685541][ T9863] RDX: 0000000020000500 RSI: 00000000c0306201 RDI: 0000000000000004 [ 450.693660][ T9863] RBP: 00007fceac205090 R08: 0000000000000000 R09: 0000000000000000 [ 450.701693][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.709714][ T9863] R13: 0000000000000000 R14: 00007fceab575fa0 R15: 00007ffc860e4548 [ 450.717853][ T9863] [ 450.721042][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.734146][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 452.433289][ T9887] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 452.499624][ T9887] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 452.792198][ T29] audit: type=1800 audit(1737045844.916:237): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1120" name="/" dev="9p" ino=2 res=0 errno=0 [ 452.812845][ T5909] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 452.892492][ T9899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.901478][ T9899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.990831][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 453.001533][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 453.017049][ T5909] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 453.030913][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.042611][ T5909] usb 2-1: Product: syz [ 453.054268][ T5909] usb 2-1: Manufacturer: syz [ 453.061046][ T5909] usb 2-1: SerialNumber: syz [ 453.074060][ T5909] usb 2-1: config 0 descriptor?? [ 453.090485][ T5909] hub 2-1:0.0: bad descriptor, ignoring hub [ 453.096782][ T5909] hub 2-1:0.0: probe with driver hub failed with error -5 [ 453.105852][ T5909] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 453.294260][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.306198][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.797160][ T5909] gspca_vc032x: reg_r err -71 [ 453.802637][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 453.809718][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 453.819796][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 453.825458][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 453.834703][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 453.840682][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.297260][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.310867][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.316275][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.328541][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.334072][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.339400][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.344963][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.350394][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.356078][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.361779][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.367283][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.372661][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.378098][ T5909] gspca_vc032x: I2c Bus Busy Wait 00 [ 454.383802][ T5909] gspca_vc032x: Unknown sensor... [ 454.388923][ T5909] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 454.429180][ T5909] usb 2-1: USB disconnect, device number 41 [ 454.457666][ T9924] ufs: You didn't specify the type of your ufs filesystem [ 454.457666][ T9924] [ 454.457666][ T9924] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 454.457666][ T9924] [ 454.457666][ T9924] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 454.488885][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.595368][ T9924] ufs: ufstype=old is supported read-only [ 454.604901][ T9924] syz.5.1128: attempt to access beyond end of device [ 454.604901][ T9924] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 454.728438][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 455.831521][ T29] audit: type=1800 audit(1737045847.916:238): pid=9941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1136" name="/" dev="9p" ino=2 res=0 errno=0 [ 455.852825][ T9941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.897926][ T9941] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 457.752486][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 459.052507][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.070947][ T5909] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 459.087069][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.343250][T10015] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 460.356929][T10015] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 462.570902][ T9187] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 462.740928][ T9187] usb 2-1: Using ep0 maxpacket: 16 [ 462.752302][ T9187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 462.761661][ T9187] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 462.770113][ T9187] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 462.783930][ T9187] usb 2-1: config 8 has no interface number 0 [ 462.790123][ T9187] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.804756][ T9187] usb 2-1: config 8 interface 132 has no altsetting 0 [ 462.814780][ T9187] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 462.824263][ T9187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.832729][ T9187] usb 2-1: Product: syz [ 462.837050][ T9187] usb 2-1: Manufacturer: syz [ 462.842054][ T9187] usb 2-1: SerialNumber: syz [ 462.916318][T10059] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1170'. [ 463.093183][ T9187] usb-storage 2-1:8.132: USB Mass Storage device detected [ 463.212006][ T9187] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 464.064787][ T9187] usb 2-1: USB disconnect, device number 42 [ 464.260526][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.269409][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.155254][T10079] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 465.325609][T10079] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 465.532991][T10096] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 474.462396][T10186] fuse: Unknown parameter 'use00000000000000000000' [ 474.550245][T10186] netfs: Couldn't get user pages (rc=-14) [ 475.831640][ T29] audit: type=1800 audit(1737045867.946:239): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1206" name="/" dev="9p" ino=2 res=0 errno=0 [ 477.085859][ T29] audit: type=1800 audit(1737045869.206:240): pid=10221 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1214" name="/" dev="9p" ino=2 res=0 errno=0 [ 477.096649][T10221] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 477.128027][T10221] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 477.419423][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.428535][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.510944][ T5918] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 478.370882][ T5826] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 479.581066][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.594496][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.610972][ T5888] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 479.639638][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.681042][ T5826] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.711084][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.742943][ T5826] usb 5-1: config 0 descriptor?? [ 479.840931][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 479.917095][ T5888] usb 9-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 479.932831][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.010818][ T5888] usb 9-1: Product: syz [ 480.025421][ T5888] usb 9-1: Manufacturer: syz [ 480.030242][ T5888] usb 9-1: SerialNumber: syz [ 480.075907][ T5888] usb 9-1: config 0 descriptor?? [ 480.161936][ T5826] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 480.205973][ T5826] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 480.461151][ T5826] usb 9-1: USB disconnect, device number 18 [ 480.912038][T10247] bond0: entered promiscuous mode [ 480.957926][T10247] bond_slave_0: entered promiscuous mode [ 480.987839][T10247] bond_slave_1: entered promiscuous mode [ 481.861378][T10285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 481.946375][T10285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 483.370304][ T9187] usb 5-1: USB disconnect, device number 32 [ 484.131002][T10311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1233'. [ 484.518549][T10316] FAULT_INJECTION: forcing a failure. [ 484.518549][T10316] name failslab, interval 1, probability 0, space 0, times 0 [ 484.532880][T10316] CPU: 0 UID: 0 PID: 10316 Comm: syz.1.1238 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 484.543684][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.553769][T10316] Call Trace: [ 484.557075][T10316] [ 484.560013][T10316] dump_stack_lvl+0x241/0x360 [ 484.564712][T10316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.569955][T10316] ? __pfx__printk+0x10/0x10 [ 484.574558][T10316] ? fs_reclaim_acquire+0x93/0x130 [ 484.579701][T10316] ? __pfx___might_resched+0x10/0x10 [ 484.585033][T10316] should_fail_ex+0x3b0/0x4e0 [ 484.589821][T10316] should_failslab+0xac/0x100 [ 484.594531][T10316] __kmalloc_noprof+0xdd/0x4c0 [ 484.599302][T10316] ? tomoyo_encode+0x26f/0x540 [ 484.604079][T10316] tomoyo_encode+0x26f/0x540 [ 484.608863][T10316] tomoyo_realpath_from_path+0x59e/0x5e0 [ 484.614522][T10316] tomoyo_path_number_perm+0x236/0x860 [ 484.620158][T10316] ? __lock_acquire+0x1397/0x2100 [ 484.625767][T10316] ? tomoyo_path_number_perm+0x206/0x860 [ 484.631783][T10316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 484.638077][T10316] ? __fget_files+0x2a/0x410 [ 484.642780][T10316] ? __fget_files+0x2a/0x410 [ 484.647557][T10316] security_file_ioctl+0xc6/0x2a0 [ 484.652600][T10316] __se_sys_ioctl+0x46/0x170 [ 484.657203][T10316] do_syscall_64+0xf3/0x230 [ 484.661722][T10316] ? clear_bhb_loop+0x35/0x90 [ 484.666436][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.672397][T10316] RIP: 0033:0x7fbf86f85d29 [ 484.676934][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.696782][T10316] RSP: 002b:00007fbf87dcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.705711][T10316] RAX: ffffffffffffffda RBX: 00007fbf87176080 RCX: 00007fbf86f85d29 [ 484.713833][T10316] RDX: 0000000020000540 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 484.721921][T10316] RBP: 00007fbf87dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 484.730022][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.738123][T10316] R13: 0000000000000000 R14: 00007fbf87176080 R15: 00007ffe95756618 [ 484.746146][T10316] [ 484.792389][T10316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.353553][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.363100][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.547924][ T29] audit: type=1800 audit(1737045877.646:241): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1243" name="/" dev="9p" ino=2 res=0 errno=0 [ 485.550281][T10336] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 485.576315][T10336] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 486.000877][ T9187] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 486.162233][ T9187] usb 5-1: Using ep0 maxpacket: 8 [ 486.194485][ T9187] usb 5-1: no configurations [ 486.199178][ T9187] usb 5-1: can't read configurations, error -22 [ 486.371787][ T9187] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 486.521114][ T9187] usb 5-1: Using ep0 maxpacket: 8 [ 487.493781][ T9187] usb 5-1: no configurations [ 487.498464][ T9187] usb 5-1: can't read configurations, error -22 [ 487.537852][ T9187] usb usb5-port1: attempt power cycle [ 487.661827][T10362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1249'. [ 488.453673][T10358] uprobe: syz.8.1247:10358 failed to unregister, leaking uprobe [ 488.665398][T10371] usb usb4: usbfs: process 10371 (syz.1.1254) did not claim interface 0 before use [ 488.730465][ T29] audit: type=1326 audit(1737045880.846:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.753313][ T5918] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 488.762296][ T29] audit: type=1326 audit(1737045880.866:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.788854][ T29] audit: type=1326 audit(1737045880.876:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.816492][ T29] audit: type=1326 audit(1737045880.876:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.838575][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.856610][ T29] audit: type=1326 audit(1737045880.876:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.878828][ T29] audit: type=1326 audit(1737045880.886:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.915518][T10382] fuse: Unknown parameter 'use00000000000000000000' [ 488.922577][ T29] audit: type=1326 audit(1737045880.886:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.951042][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 488.954307][T10382] netfs: Couldn't get user pages (rc=-14) [ 488.962523][ T8] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 488.963122][ T5918] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 488.980136][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.990354][ T29] audit: type=1326 audit(1737045880.886:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 488.990404][ T29] audit: type=1326 audit(1737045880.906:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10369 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbf86f85d29 code=0x7ffc0000 [ 489.036331][ T5918] usb 6-1: Product: syz [ 489.040685][ T5918] usb 6-1: Manufacturer: syz [ 489.045575][ T5918] usb 6-1: SerialNumber: syz [ 489.057834][ T5918] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 489.126668][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 489.151022][ T8] usb 9-1: no configurations [ 489.160822][ T8] usb 9-1: can't read configurations, error -22 [ 489.239019][T10386] fuse: Unknown parameter 'user_i00000000000000000000' [ 489.254546][T10386] netfs: Couldn't get user pages (rc=-14) [ 489.301127][ T8] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 489.429374][T10390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 489.439347][T10390] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 489.452334][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 489.458239][ T8] usb 9-1: no configurations [ 489.463058][ T8] usb 9-1: can't read configurations, error -22 [ 489.470022][ T8] usb usb9-port1: attempt power cycle [ 490.467414][ T5918] gspca_stk1135: reg_w 0x7 err -110 [ 490.474218][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.480765][ T5918] gspca_stk1135: Sensor write failed [ 490.486184][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.492699][ T5918] gspca_stk1135: Sensor write failed [ 490.498188][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.504886][ T5918] gspca_stk1135: Sensor read failed [ 490.510247][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.517901][ T5918] gspca_stk1135: Sensor read failed [ 490.523307][ T5918] gspca_stk1135: Detected sensor type unknown (0x0) [ 490.530112][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.536680][ T5918] gspca_stk1135: Sensor read failed [ 490.542056][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.549479][ T5918] gspca_stk1135: Sensor read failed [ 490.620539][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 490.627707][ T29] audit: type=1326 audit(1737045882.586:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.7.1260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8442185d29 code=0x0 [ 490.655208][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.750869][ T8] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 490.771527][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 490.777352][ T8] usb 9-1: no configurations [ 490.848983][ T5918] gspca_stk1135: Sensor write failed [ 490.855615][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 490.862516][ T5918] gspca_stk1135: Sensor write failed [ 490.868159][ T5918] stk1135 6-1:64.0: probe with driver stk1135 failed with error -110 [ 491.145027][ T8] usb 9-1: can't read configurations, error -22 [ 491.990923][ T8] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 492.050223][T10407] netlink: 'syz.8.1264': attribute type 10 has an invalid length. [ 492.092854][T10407] vlan0: entered allmulticast mode [ 492.119232][T10410] virtio-fs: tag <(null)> not found [ 492.150148][T10407] veth0_vlan: entered allmulticast mode [ 492.211345][ T8] usb 9-1: device not accepting address 22, error -71 [ 492.223615][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1264'. [ 492.240895][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1262'. [ 492.493156][T10407] team0: Port device vlan0 added [ 492.547499][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1264'. [ 492.673182][ T8] usb usb9-port1: unable to enumerate USB device [ 493.091969][ T8] usb 6-1: USB disconnect, device number 13 [ 493.430839][ T5877] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 493.450160][ T29] audit: type=1800 audit(1737045885.566:273): pid=10438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1271" name="/" dev="9p" ino=2 res=0 errno=0 [ 493.595290][ T5877] usb 5-1: config 0 has no interfaces? [ 493.607699][ T5877] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 493.631377][ T5877] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 493.639463][ T5877] usb 5-1: Manufacturer: syz [ 493.663629][ T5877] usb 5-1: config 0 descriptor?? [ 493.754978][T10446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 493.779530][T10446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 494.025045][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.034768][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.141178][ T5826] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 494.155117][T10456] syzkaller1: entered promiscuous mode [ 494.171929][T10456] syzkaller1: entered allmulticast mode [ 494.544567][ T8] usb 5-1: USB disconnect, device number 36 [ 495.498814][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1277'. [ 497.097970][T10497] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1284'. [ 497.945966][T10501] fuse: Unknown parameter 'user_i00000000000000000000' [ 497.960317][T10501] netfs: Couldn't get user pages (rc=-14) [ 499.619153][T10527] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1289'. [ 499.642003][ T5918] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 499.930032][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 500.381931][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 500.420815][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 500.463317][ T5918] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 500.487076][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.508970][ T5918] usb 5-1: config 0 descriptor?? [ 500.655193][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 500.681239][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 500.762821][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 500.774233][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 500.855106][T10537] ceph: No mds server is up or the cluster is laggy [ 501.316844][ T5888] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 501.793820][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.953834][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.062334][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.106086][T10558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 502.131662][T10560] trusted_key: syz.8.1300 sent an empty control message without MSG_MORE. [ 502.141338][T10558] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 502.440933][ T8] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 502.600858][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 502.617604][ T8] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 502.636720][ T8] usb 9-1: config 0 has no interface number 0 [ 502.648053][ T8] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.672321][ T8] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 502.689959][ T8] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 502.699496][ T8] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 502.707821][ T8] usb 9-1: Product: syz [ 502.712135][ T8] usb 9-1: SerialNumber: syz [ 502.718784][ T8] usb 9-1: config 0 descriptor?? [ 502.727503][ T8] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 502.737957][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input11 [ 502.875726][ T5918] appletouch 5-1:0.0: Failed to request geyser raw mode [ 502.883298][ T5918] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 502.897167][ T5918] usb 5-1: USB disconnect, device number 37 [ 503.023147][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.034503][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.043660][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.051235][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.058513][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.065815][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.073070][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.080233][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.087409][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.094640][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 503.109878][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 503.134741][ T8] usb 9-1: USB disconnect, device number 24 [ 503.461391][ T8] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 503.525645][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1301'. [ 503.718880][ T29] audit: type=1800 audit(1737045895.836:274): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1303" name="/" dev="9p" ino=2 res=0 errno=0 [ 504.904728][T10592] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1304'. [ 506.012015][T10603] bond0: entered promiscuous mode [ 506.017142][T10603] bond_slave_0: entered promiscuous mode [ 506.037600][T10603] bond_slave_1: entered promiscuous mode [ 507.063999][T10615] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 507.118333][T10615] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 508.480884][ T5877] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 508.683677][ T29] audit: type=1800 audit(1737045900.696:275): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1317" name="/" dev="9p" ino=2 res=0 errno=0 [ 508.739408][T10642] overlayfs: failed to resolve './file1': -2 [ 508.900923][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 508.950846][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 509.053287][ T5877] usb 5-1: config 12 has an invalid interface number: 184 but max is 0 [ 509.061968][ T5877] usb 5-1: config 12 has no interface number 0 [ 509.068268][ T5877] usb 5-1: config 12 interface 184 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 509.119858][ T5877] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 509.141696][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.150199][ T5877] usb 5-1: Product: syz [ 509.158658][ T5877] usb 5-1: Manufacturer: syz [ 509.163666][ T5877] usb 5-1: SerialNumber: syz [ 509.174134][T10632] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 509.462955][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1320'. [ 510.272893][T10653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 510.275833][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.282632][T10653] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 510.466637][ T5877] usb 5-1: USB disconnect, device number 38 [ 511.029879][T10666] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 548.983294][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 579.336265][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.080681][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 630.087747][ C1] rcu: (detected by 1, t=10502 jiffies, g=37313, q=1536714 ncpus=2) [ 630.095866][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 8947 (4295000099-4294991152), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 630.109208][ C1] rcu: rcu_preempt kthread starved for 8948 jiffies! g37313 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 630.120367][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 630.130386][ C1] rcu: RCU grace-period kthread stack dump: [ 630.136321][ C1] task:rcu_preempt state:R running task stack:26064 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 630.148147][ C1] Call Trace: [ 630.151472][ C1] [ 630.154446][ C1] __schedule+0x17fb/0x4be0 [ 630.159080][ C1] ? __pfx___schedule+0x10/0x10 [ 630.163992][ C1] ? __pfx_lock_release+0x10/0x10 [ 630.169075][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 630.175459][ C1] ? schedule+0x90/0x320 [ 630.179755][ C1] schedule+0x14b/0x320 [ 630.183970][ C1] schedule_timeout+0x15a/0x290 [ 630.188876][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 630.194300][ C1] ? __pfx_process_timeout+0x10/0x10 [ 630.199659][ C1] ? prepare_to_swait_event+0x330/0x350 [ 630.205427][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 630.210332][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 630.215605][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 630.221814][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 630.227292][ C1] ? finish_swait+0xd4/0x1e0 [ 630.232030][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 630.236676][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.241927][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 630.247883][ C1] ? __kthread_parkme+0x169/0x1d0 [ 630.252960][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.258210][ C1] kthread+0x2f0/0x390 [ 630.262327][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.267570][ C1] ? __pfx_kthread+0x10/0x10 [ 630.272220][ C1] ret_from_fork+0x4b/0x80 [ 630.276767][ C1] ? __pfx_kthread+0x10/0x10 [ 630.281404][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.286245][ C1] [ 630.289304][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 630.295683][ C1] Sending NMI from CPU 1 to CPUs 0: [ 630.300956][ C0] NMI backtrace for cpu 0 [ 630.300973][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 630.300995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 630.301006][ C0] RIP: 0010:preempt_count_sub+0x5d/0x170 [ 630.301040][ C0] Code: 22 65 8b 05 0d 51 96 7e 89 c1 81 e1 ff ff ff 7f 39 d9 7c 27 81 fb fe 00 00 00 77 07 0f b6 c0 85 c0 74 5f 65 8b 05 eb 50 96 7e db 65 01 1d e2 50 96 7e 5b 41 5e c3 cc cc cc cc 90 e8 fc 6a 49 [ 630.301055][ C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00000002 [ 630.301072][ C0] RAX: 0000000000010102 RBX: 0000000000000001 RCX: 0000000000010102 [ 630.301085][ C0] RDX: dffffc0000000000 RSI: ffffc90000150000 RDI: 0000000000000001 [ 630.301098][ C0] RBP: ffffc900000076c0 R08: ffffc90000156ea0 R09: 0000000000000000 [ 630.301111][ C0] R10: ffffc90000007710 R11: fffff52000000ee4 R12: dffffc0000000000 [ 630.301125][ C0] R13: ffffc900000076c0 R14: dffffc0000000000 R15: ffffc90000156eb0 [ 630.301139][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 630.301160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.301173][ C0] CR2: 00007fbf87148ef8 CR3: 0000000032fda000 CR4: 00000000003526f0 [ 630.301189][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 630.301201][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 630.301213][ C0] Call Trace: [ 630.301219][ C0] [ 630.301228][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 630.301257][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 630.301283][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 630.301310][ C0] ? nmi_handle+0x2a/0x5a0 [ 630.301347][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 630.301378][ C0] ? nmi_handle+0x14f/0x5a0 [ 630.301398][ C0] ? nmi_handle+0x2a/0x5a0 [ 630.301418][ C0] ? preempt_count_sub+0x5d/0x170 [ 630.301448][ C0] ? default_do_nmi+0x63/0x160 [ 630.301469][ C0] ? exc_nmi+0x123/0x1f0 [ 630.301489][ C0] ? end_repeat_nmi+0xf/0x53 [ 630.301513][ C0] ? preempt_count_sub+0x5d/0x170 [ 630.301538][ C0] ? preempt_count_sub+0x5d/0x170 [ 630.301565][ C0] ? preempt_count_sub+0x5d/0x170 [ 630.301591][ C0] [ 630.301597][ C0] [ 630.301603][ C0] unwind_next_frame+0x18e6/0x22d0 [ 630.301628][ C0] ? call_rcu+0x97/0xa70 [ 630.301653][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.301681][ C0] arch_stack_walk+0x11c/0x150 [ 630.301706][ C0] ? skb_release_head_state+0x73/0x250 [ 630.301730][ C0] stack_trace_save+0x118/0x1d0 [ 630.301758][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 630.301791][ C0] ? fill_pool+0x260/0x680 [ 630.301820][ C0] ? stack_depot_save_flags+0x37/0x940 [ 630.301839][ C0] ? __lock_acquire+0x1397/0x2100 [ 630.301859][ C0] ? fill_pool+0x260/0x680 [ 630.301885][ C0] kasan_save_track+0x3f/0x80 [ 630.301914][ C0] ? kasan_save_track+0x3f/0x80 [ 630.301935][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 630.301963][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380 [ 630.301990][ C0] ? fill_pool+0x260/0x680 [ 630.302015][ C0] ? debug_object_activate+0x493/0x580 [ 630.302040][ C0] ? enqueue_hrtimer+0x30/0x3c0 [ 630.302063][ C0] ? __hrtimer_run_queues+0x6cb/0xd30 [ 630.302085][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 630.302112][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 630.302137][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 630.302165][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.302187][ C0] ? unwind_next_frame+0x99/0x22d0 [ 630.302209][ C0] ? arch_stack_walk+0x11c/0x150 [ 630.302228][ C0] ? stack_trace_save+0x118/0x1d0 [ 630.302257][ C0] ? kasan_save_track+0x3f/0x80 [ 630.302283][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 630.302306][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380 [ 630.302333][ C0] ? fill_pool+0x260/0x680 [ 630.302357][ C0] ? debug_object_activate+0x493/0x580 [ 630.302383][ C0] ? call_rcu+0x97/0xa70 [ 630.302424][ C0] __kasan_slab_alloc+0x66/0x80 [ 630.302448][ C0] ? fill_pool+0x241/0x680 [ 630.302473][ C0] kmem_cache_alloc_noprof+0x1d9/0x380 [ 630.302503][ C0] fill_pool+0x260/0x680 [ 630.302530][ C0] ? __pfx_fill_pool_from_freelist+0x10/0x10 [ 630.302559][ C0] ? __pfx_fill_pool+0x10/0x10 [ 630.302588][ C0] ? debug_object_activate+0x46b/0x580 [ 630.302613][ C0] ? debug_object_activate+0x46b/0x580 [ 630.302641][ C0] debug_object_activate+0x493/0x580 [ 630.302669][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 630.302696][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 630.302727][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 630.302751][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 630.302777][ C0] enqueue_hrtimer+0x30/0x3c0 [ 630.302802][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 630.302835][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 630.302858][ C0] ? sched_clock+0x4a/0x70 [ 630.302884][ C0] ? read_tsc+0x9/0x20 [ 630.302915][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 630.302957][ C0] hrtimer_interrupt+0x403/0xa40 [ 630.302996][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 630.303018][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 630.303042][ C0] [ 630.303048][ C0] [ 630.303055][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.303071][ C0] RIP: 0010:unwind_next_frame+0x99/0x22d0 [ 630.303091][ C0] Code: eb 48 c1 eb 03 42 0f b6 04 23 84 c0 0f 85 e1 19 00 00 41 8b 45 00 85 c0 0f 84 d7 18 00 00 89 84 24 84 00 00 00 48 89 6c 24 78 <48> 89 8c 24 90 00 00 00 48 89 5c 24 20 bf 01 00 00 00 e8 30 d8 21 [ 630.303106][ C0] RSP: 0018:ffffc90000156670 EFLAGS: 00000202 [ 630.303121][ C0] RAX: 0000000000000001 RBX: 1ffff9200002ace8 RCX: ffffc90000157f58 [ 630.303133][ C0] RDX: dffffc0000000000 RSI: ffffffff8109e67a RDI: ffffc90000156740 [ 630.303147][ C0] RBP: ffffc90000156778 R08: 0000000000000018 R09: ffffc90000156830 [ 630.303159][ C0] R10: ffffc90000156790 R11: ffffffff818b3aa0 R12: dffffc0000000000 [ 630.303172][ C0] R13: ffffc90000156740 R14: ffffffff8109e67a R15: 0000000000000000 [ 630.303191][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 630.303218][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.303247][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 630.303283][ C0] ? ret_from_fork+0x4b/0x80 [ 630.303302][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.303329][ C0] arch_stack_walk+0x11c/0x150 [ 630.303352][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 630.303379][ C0] stack_trace_save+0x118/0x1d0 [ 630.303407][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 630.303433][ C0] ? fill_pool+0x260/0x680 [ 630.303459][ C0] ? stack_depot_save_flags+0x37/0x940 [ 630.303483][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 630.303524][ C0] ? fill_pool+0x260/0x680 [ 630.303565][ C0] kasan_save_track+0x3f/0x80 [ 630.303598][ C0] ? kasan_save_track+0x3f/0x80 [ 630.303624][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 630.303647][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380 [ 630.303674][ C0] ? fill_pool+0x260/0x680 [ 630.303700][ C0] ? debug_object_activate+0x493/0x580 [ 630.303726][ C0] ? call_rcu+0x97/0xa70 [ 630.303748][ C0] ? skb_release_head_state+0x73/0x250 [ 630.303767][ C0] ? consume_skb+0x60/0xf0 [ 630.303785][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 630.303804][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 630.303822][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 630.303841][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 630.303858][ C0] ? nf_hook_slow+0xc3/0x220 [ 630.303884][ C0] ? NF_HOOK+0x29e/0x450 [ 630.303907][ C0] ? NF_HOOK+0x3a4/0x450 [ 630.303929][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 630.303959][ C0] ? process_backlog+0x662/0x15b0 [ 630.303984][ C0] ? __napi_poll+0xcb/0x490 [ 630.304006][ C0] ? net_rx_action+0x89b/0x1240 [ 630.304030][ C0] ? handle_softirqs+0x2d4/0x9b0 [ 630.304054][ C0] ? run_ksoftirqd+0xca/0x130 [ 630.304070][ C0] ? smpboot_thread_fn+0x544/0xa30 [ 630.304097][ C0] ? kthread+0x2f0/0x390 [ 630.304116][ C0] ? ret_from_fork+0x4b/0x80 [ 630.304131][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 630.304174][ C0] __kasan_slab_alloc+0x66/0x80 [ 630.304198][ C0] ? fill_pool+0x241/0x680 [ 630.304224][ C0] kmem_cache_alloc_noprof+0x1d9/0x380 [ 630.304255][ C0] fill_pool+0x260/0x680 [ 630.304283][ C0] ? __pfx_fill_pool_from_freelist+0x10/0x10 [ 630.304310][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 630.304330][ C0] ? __pfx_fill_pool+0x10/0x10 [ 630.304359][ C0] ? debug_object_activate+0x46b/0x580 [ 630.304385][ C0] ? debug_object_activate+0x46b/0x580 [ 630.304413][ C0] debug_object_activate+0x493/0x580 [ 630.304439][ C0] ? ip_finish_output2+0x45f/0x1390 [ 630.304462][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 630.304493][ C0] ? rcuref_put_slowpath+0x138/0x340 [ 630.304520][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 630.304540][ C0] call_rcu+0x97/0xa70 [ 630.304566][ C0] ? rcuref_put+0x1e3/0x240 [ 630.304585][ C0] ? __pfx_call_rcu+0x10/0x10 [ 630.304609][ C0] ? percpu_counter_add_batch+0xff/0x1f0 [ 630.304642][ C0] skb_release_head_state+0x73/0x250 [ 630.304663][ C0] consume_skb+0x60/0xf0 [ 630.304682][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 630.304705][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 630.304726][ C0] ? nf_ip_checksum+0x13a/0x500 [ 630.304748][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 630.304770][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 630.304793][ C0] ? __pfx_validate_chain+0x10/0x10 [ 630.304815][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 630.304839][ C0] nft_do_chain+0x4ad/0x1da0 [ 630.304866][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 630.304884][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 630.304924][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 630.304954][ C0] nft_do_chain_inet+0x418/0x6b0 [ 630.304974][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 630.304992][ C0] ? ipt_do_table+0x312/0x1860 [ 630.305020][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 630.305038][ C0] nf_hook_slow+0xc3/0x220 [ 630.305065][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 630.305089][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 630.305113][ C0] NF_HOOK+0x29e/0x450 [ 630.305137][ C0] ? NF_HOOK+0x9a/0x450 [ 630.305160][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 630.305184][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 630.305212][ C0] ? ip_rcv_finish+0x406/0x560 [ 630.305237][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 630.305260][ C0] NF_HOOK+0x3a4/0x450 [ 630.305285][ C0] ? NF_HOOK+0x9a/0x450 [ 630.305307][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 630.305329][ C0] ? ip_rcv_core+0x801/0xd10 [ 630.305353][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 630.305381][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 630.305404][ C0] __netif_receive_skb+0x2bf/0x650 [ 630.305430][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 630.305449][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 630.305472][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 630.305491][ C0] ? __pfx_lock_release+0x10/0x10 [ 630.305510][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 630.305540][ C0] process_backlog+0x662/0x15b0 [ 630.305567][ C0] ? process_backlog+0x33b/0x15b0 [ 630.305597][ C0] ? __pfx_process_backlog+0x10/0x10 [ 630.305622][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 630.305642][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 630.305663][ C0] __napi_poll+0xcb/0x490 [ 630.305688][ C0] net_rx_action+0x89b/0x1240 [ 630.305726][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 630.305754][ C0] ? sched_clock+0x4a/0x70 [ 630.305785][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 630.305810][ C0] handle_softirqs+0x2d4/0x9b0 [ 630.305840][ C0] ? run_ksoftirqd+0xca/0x130 [ 630.305858][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 630.305883][ C0] ? preempt_schedule+0xe1/0xf0 [ 630.305912][ C0] run_ksoftirqd+0xca/0x130 [ 630.305928][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 630.305952][ C0] ? kthread_should_park+0x5c/0xf0 [ 630.305971][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 630.305988][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 630.306014][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 630.306040][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 630.306067][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 630.306083][ C0] smpboot_thread_fn+0x544/0xa30 [ 630.306110][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 630.306140][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 630.306167][ C0] kthread+0x2f0/0x390 [ 630.306186][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 630.306213][ C0] ? __pfx_kthread+0x10/0x10 [ 630.306233][ C0] ret_from_fork+0x4b/0x80 [ 630.306248][ C0] ? __pfx_kthread+0x10/0x10 [ 630.306269][ C0] ret_from_fork_asm+0x1a/0x30 [ 630.306302][ C0] [ 638.826722][ T1295] ieee802154 phy0 wpan0: encryption failed: -22