last executing test programs: 10m18.610846765s ago: executing program 1 (id=1018): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000005000)={&(0x7f0000004e40)=[0x0], 0x0, r3, 0x0, '\x00', 0x1, 0x2}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdae, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6d88}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m17.739059151s ago: executing program 1 (id=1021): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000010080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000200)={0x6, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)=""/4096, 0x1000}], &(0x7f00000001c0)=[0xd, 0xff, 0x3, 0x3ff, 0xa, 0x8, 0x1000, 0x2000000000], 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000140)={0x500, 0x400, 0x7, 0xfffffffe, 0x5, 0x1}) getdents64(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000000000900000000ff0300000000000008000100ac"], 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f0000000100)={0x9, 0x100}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x400000001, 0x0, 0xf1, 0xd, 0x3fffd, 0x0, {0x0, 0x0, 0x2, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x10}}, {0x1, 0x0, 0x4, 0x0, '..^\''}}]}, 0x0, 0x0}) 10m17.510693087s ago: executing program 1 (id=1023): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fsname={'fsname', 0x3d, 'wyv\xe9\xcd\r\xcd\xe2\b.'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@dont_appraise}, {@audit}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x36, 0x37, 0x35, 0x64, 0x62, 0x63, 0x61], 0x2d, [0x30, 0x38, 0x65, 0x62], 0x2d, [0x37, 0x64, 0x38, 0x31], 0x2d, [0x34, 0x32, 0x62, 0x63], 0x2d, [0x31, 0x37, 0x39, 0x65, 0x65, 0x61, 0x38, 0x50]}}}, {@pcr={'pcr', 0x3d, 0x30}}]}) keyctl$clear(0x5, 0xffffffffffffffff) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='@^\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 10m15.726243812s ago: executing program 1 (id=1029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000008}) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x202002, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f00000002c0)={'macvlan0\x00', &(0x7f0000003d00)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "518000"}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000880)=0x101, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x510, 0x230, 0xf0, 0x438, 0x0, 0x738, 0x858, 0x858, 0x858, 0x858, 0x858, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4, 0x0, 0x48}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 10m13.475509022s ago: executing program 1 (id=1038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x9) r3 = eventfd(0x3) r4 = eventfd(0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r4, 0x10001, 0x2, r3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d7061d328b92d000000004c8537db9600f854c8a4487c752f7020847ff67dcae59ba172a685d0", 0x51}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r6]) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) ioctl$TCFLSH(r5, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x20a8, 0x2, r2}) 10m13.082546928s ago: executing program 1 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fsname={'fsname', 0x3d, 'wyv\xe9\xcd\r\xcd\xe2\b.'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@dont_appraise}, {@audit}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x36, 0x37, 0x35, 0x64, 0x62, 0x63, 0x61], 0x2d, [0x30, 0x38, 0x65, 0x62], 0x2d, [0x37, 0x64, 0x38, 0x31], 0x2d, [0x34, 0x32, 0x62, 0x63], 0x2d, [0x31, 0x37, 0x39, 0x65, 0x65, 0x61, 0x38, 0x50]}}}, {@pcr={'pcr', 0x3d, 0x30}}]}) keyctl$clear(0x5, 0xffffffffffffffff) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='@^\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 10m12.899329591s ago: executing program 32 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fsname={'fsname', 0x3d, 'wyv\xe9\xcd\r\xcd\xe2\b.'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@dont_appraise}, {@audit}, {@pcr={'pcr', 0x3d, 0x1b}}, {@appraise}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x36, 0x37, 0x35, 0x64, 0x62, 0x63, 0x61], 0x2d, [0x30, 0x38, 0x65, 0x62], 0x2d, [0x37, 0x64, 0x38, 0x31], 0x2d, [0x34, 0x32, 0x62, 0x63], 0x2d, [0x31, 0x37, 0x39, 0x65, 0x65, 0x61, 0x38, 0x50]}}}, {@pcr={'pcr', 0x3d, 0x30}}]}) keyctl$clear(0x5, 0xffffffffffffffff) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='@^\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 8m52.707985468s ago: executing program 2 (id=1281): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9, @local}, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, 0x0) sendfile(r0, r3, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x100, 0x0) 8m51.779288526s ago: executing program 2 (id=1283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xd}}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1b4, 0x2, [@TCA_ROUTE4_ACT={0x1a0, 0x6, [@m_vlan={0xc8, 0x8, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1a8}]}, {0x79, 0x6, "fe393046780fc0b9a04afd1cf1bacd6244fa765bb3658f46bbeae297438134ba976082924a6439961a38ab6dc487c7ce03cbe6d7aa8bb01e9ef7e8035280944e090ec29df32fd054804158ae1121f3a3e07e8201cdb4c8915f4cfd63ee91d436d5e5274cf2315f3b29b8d213540cd7f7d65f7d0ff8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xd4, 0x12, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x81, 0x5, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xc71, 0x2, 0x2, 0x5d}}, @TCA_GACT_PARMS={0x18, 0x2, {0x479, 0x7, 0x5, 0xc, 0x3b9}}]}, {0x5f, 0x6, "1f0e42743fd4de959d8095ee21c5b975848927401be89d8210a12412b051a3ee2b8d715a9ea0ae67026b470ccc5d77f30a84717dc2983d0cddae71b0ec050713f8c92117adde36f8aeaeeca8af1ded63f03f7678240268d8c2ed0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000076000d0b002c000000000002030000400000000408000a"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8m51.491938446s ago: executing program 2 (id=1285): bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d"}}}, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0x20, 0x3, {}, {0x3, 0x0, 0x3e, 0x4, 0xd, 0x10, "5c5105b8"}, 0x591, 0x4, {}, 0xfffffff7}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0x20, 0x3, {}, {0x3, 0x0, 0x3e, 0x4, 0xd, 0x10, "5c5105b8"}, 0x591, 0x4, {}, 0xfffffff7}) 8m51.378710976s ago: executing program 2 (id=1287): socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x8, 0x0, @thr={&(0x7f0000000040)="51574e04bf7dc0cec995fb01e67d3401f3ec72bc136cd1f712613405f6bd61b849e46f5c4b7b611b1ae7361d7850a29b1334575ded9efb", &(0x7f00000002c0)="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"}}, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 8m50.059454397s ago: executing program 2 (id=1289): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r4, 0x303, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) r5 = epoll_create1(0x0) epoll_create1(0x0) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa}}) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 8m49.573470002s ago: executing program 2 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="14002380060012000400000006000c0004000000"], 0x30}}, 0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket(0x2, 0x1, 0x106) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x0, 0x4001000, 0x2, 0x2}}) 8m48.600097706s ago: executing program 33 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="14002380060012000400000006000c0004000000"], 0x30}}, 0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket(0x2, 0x1, 0x106) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x0, 0x4001000, 0x2, 0x2}}) 6m39.61975071s ago: executing program 4 (id=1661): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='netpci0\x00') getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x101400, 0x0) r10 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(r4, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000600)="92c431946aaf818acbe6cc4a71a2c6e7d6d9e3f84deb49cba78a03ba92e44afdab97eb536e9e7c0151db836fbc8d6616c526b3b4fac32048676eb9d0f5e19b2a807b5919d9363b4ba09bd299e0a62ccd614fb0a957c265b90c3ead27e8fe8a1f123d5be56a2b4b6d7c193f48ae890b324375af135977a89f4bdee36ea3f2ae2e3eb8", 0x82}, {&(0x7f00000006c0)="b8b15231716778f238b6c9d51a6fb7f6e7344bc810692494a185fab399f866c327ec1e8cc2a868e06673965f8de1cf9b3004028e03393665d2a29915dae9073dffe1be20228897f4e389e25f038ef714c700aea0", 0x54}, {&(0x7f0000000440)="80cf4de1ed544ab6c41dcd0fe4413f310a9c26265b89b6775bb071bc5136b93083a00243e2941f0c3e9d7d5214a1ea0459a34dd30b14f404357a91", 0x3b}, {&(0x7f0000000780)="c2e5267249c6d0648a617a584b45364ccf681d04169639ea2cbbf7f081e87b5e945e261c4a51c7083a760814f5eb5c0cc3a69a381ccfa1841e1828761808350d14fe349b4dfa246192482b308a2badd5de9f2bc78738f70e34d860809f246ef554da452d4b0e6b9f8db21e718ecd86fe3a4e5422aff99d45fee45a761d34a04869a2e6384e93297ad41bec084c996e0e7bea3b1b06dfdd8f1613937e765804cb418f049a5a56e40619e1750a1fa9750043033a7577e41b032e2e38ed9650329b0d8f7800c2d02e501b1fca", 0xcb}, {&(0x7f0000000280)="d8154d9de8", 0x5}], 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYBLOB], 0xc8, 0x10}}], 0x1, 0x40000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0xdaf}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001040)=ANY=[@ANYBLOB='3G'], 0x248) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x20) 6m38.719999961s ago: executing program 4 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) syz_emit_ethernet(0x3ac, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd613d166003762f01fe8000000000000000000000000000bb0000000000"], 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="c0000000", @ANYRES16, @ANYBLOB="080029bd7000fcdbdf250d000000080006000000000008000400ff0100005400028008000900099d0000080008005a06000008000300040000aeec0001000000000000000000000000000000000105000d000000000006000e004e220000140001000000000000000000000000000000000008000400ffffffff0800040005000000280001800800090011000000060004004e23000014000300fe80000000000000000000000000003508000600060000000800050081000000"], 0xc0}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{}]}) 6m37.705560301s ago: executing program 4 (id=1664): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xd}}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1b4, 0x2, [@TCA_ROUTE4_ACT={0x1a0, 0x6, [@m_vlan={0xc8, 0x8, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1a8}]}, {0x79, 0x6, "fe393046780fc0b9a04afd1cf1bacd6244fa765bb3658f46bbeae297438134ba976082924a6439961a38ab6dc487c7ce03cbe6d7aa8bb01e9ef7e8035280944e090ec29df32fd054804158ae1121f3a3e07e8201cdb4c8915f4cfd63ee91d436d5e5274cf2315f3b29b8d213540cd7f7d65f7d0ff8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xd4, 0x12, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x81, 0x5, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xc71, 0x2, 0x2, 0x5d}}, @TCA_GACT_PARMS={0x18, 0x2, {0x479, 0x7, 0x5, 0xc, 0x3b9}}]}, {0x5f, 0x6, "1f0e42743fd4de959d8095ee21c5b975848927401be89d8210a12412b051a3ee2b8d715a9ea0ae67026b470ccc5d77f30a84717dc2983d0cddae71b0ec050713f8c92117adde36f8aeaeeca8af1ded63f03f7678240268d8c2ed0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000076000d0b002c00000000000203000040000000040800"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6m37.482312241s ago: executing program 4 (id=1666): socket$nl_audit(0x10, 0x3, 0x9) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x6e, 0x80800) connect$unix(r0, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r2, r1, &(0x7f0000002700)=0x1, 0x8) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'netdevsim'}, {0x20, '*'}], 0xa, "af14671bb8f4ed7b9e67664cf42dc464cbe902f274abaaec989f38"}, 0x33) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040), &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e289000002", 0x41) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xb8, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x4}]}]}, 0xb8}}, 0x4008010) socket$unix(0x1, 0x1, 0x0) 6m35.939225007s ago: executing program 4 (id=1670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2cc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x24c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1c4, 0x6, [@m_ctinfo={0x38, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x55, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd342"}, {0xc}, {0xc}}}, @m_connmark={0x84, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x36, 0x6, "984c8de4271b3990d6299d27298de61079d98fc9ca01dced68c813be4df100b510345fb96d6b00"/50}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2cc}}, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x6c, r4, 0x213, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) io_uring_setup(0x16a5, &(0x7f0000000700)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000bc0), 0x20000000}, 0x20) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x83b1, 0x0) syncfs(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020009006000000002000020d3"]) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x14}) 6m33.835936656s ago: executing program 4 (id=1677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xa, 0x0, &(0x7f0000000100)="e042c57ed387dbe9abe2", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x15, 0x6, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000a2a4c66221e73ce0389400cf99225c00", @ANYRES8=r0, @ANYRESDEC=r1, @ANYBLOB="000000008c8a73d1ddd9a087e01eaa98de19000000000000000000000000000000000000000000000000efeba5f73e0dcbddfefbef3e9766"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r2}, &(0x7f0000000b80), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getsig(0x4202, r4, 0x100, 0x0) fsopen(&(0x7f0000000000)='bpf\x00', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@broadcast, @broadcast, @empty}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4641, 0x0) setsockopt(r6, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000140)=ANY=[], 0x8) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000440)='devtmpfs\x00', 0x18642, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000000000000000000000000c741b29ef18f7c"], 0x20}}, 0x40041) 6m18.679334895s ago: executing program 34 (id=1677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xa, 0x0, &(0x7f0000000100)="e042c57ed387dbe9abe2", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x15, 0x6, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000a2a4c66221e73ce0389400cf99225c00", @ANYRES8=r0, @ANYRESDEC=r1, @ANYBLOB="000000008c8a73d1ddd9a087e01eaa98de19000000000000000000000000000000000000000000000000efeba5f73e0dcbddfefbef3e9766"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r2}, &(0x7f0000000b80), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getsig(0x4202, r4, 0x100, 0x0) fsopen(&(0x7f0000000000)='bpf\x00', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@broadcast, @broadcast, @empty}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4641, 0x0) setsockopt(r6, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000140)=ANY=[], 0x8) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000440)='devtmpfs\x00', 0x18642, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000000000000000000000000c741b29ef18f7c"], 0x20}}, 0x40041) 5m38.294865204s ago: executing program 7 (id=1812): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5m36.990911535s ago: executing program 7 (id=1815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x5e, 0x8, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x48) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1", 0x5, 0x1, 0x0, 0x0) 5m36.079936811s ago: executing program 7 (id=1818): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x600, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 5m34.73609086s ago: executing program 7 (id=1822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='netpci0\x00') getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x101400, 0x0) r10 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(r4, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000600)="92c431946aaf818acbe6cc4a71a2c6e7d6d9e3f84deb49cba78a03ba92e44afdab97eb536e9e7c0151db836fbc8d6616c526b3b4fac32048676eb9d0f5e19b2a807b5919d9363b4ba09bd299e0a62ccd614fb0a957c265b90c3ead27e8fe8a1f123d5be56a2b4b6d7c193f48ae890b324375af135977a89f4bdee36ea3f2ae2e3eb8", 0x82}, {&(0x7f00000006c0)="b8b15231716778f238b6c9d51a6fb7f6e7344bc810692494a185fab399f866c327ec1e8cc2a868e06673965f8de1cf9b3004028e03393665d2a29915dae9073dffe1be20228897f4e389e25f038ef714c700aea0", 0x54}, {&(0x7f0000000440)="80cf4de1ed544ab6c41dcd0fe4413f310a9c26265b89b6775bb071bc5136b93083a00243e2941f0c3e9d7d5214a1ea0459a34dd30b14f404357a91", 0x3b}, {&(0x7f0000000780)="c2e5267249c6d0648a617a584b45364ccf681d04169639ea2cbbf7f081e87b5e945e261c4a51c7083a760814f5eb5c0cc3a69a381ccfa1841e1828761808350d14fe349b4dfa246192482b308a2badd5de9f2bc78738f70e34d860809f246ef554da452d4b0e6b9f8db21e718ecd86fe3a4e5422aff99d45fee45a761d34a04869a2e6384e93297ad41bec084c996e0e7bea3b1b06dfdd8f1613937e765804cb418f049a5a56e40619e1750a1fa9750043033a7577e41b032e2e38ed9650329b0d8f7800c2d02e501b1fca", 0xcb}, {&(0x7f0000000280)="d8154d9de8", 0x5}], 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="000000001c0000000000", @ANYRES32=r2, @ANYRES32=r10, @ANYBLOB], 0xc8, 0x10}}], 0x1, 0x40000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0xdaf}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001040)=ANY=[@ANYBLOB='3G'], 0x248) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x20) 5m33.711100263s ago: executing program 7 (id=1823): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r0, 0xfffffffc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) semget$private(0x0, 0x2, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x8000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x0, 0xd90d}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x141081, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd6b, r8}) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r9, &(0x7f00000021c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x60}}, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d2b999ebb982bf0a60b3145e2afe0082544c8c6f4ef125f368323ae333bcf46d8e3b3043718d25407114f8d681998a1d9070c1c2e765358157ad9e7509b00dc4d1a42486b1a439aad8357d733384fd1c54a644529c01ea25c8830a95c1b4d0a1f6c2c20fb27d36602f9eab5fc4bd7d46f", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',\x00']) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x6, 0x2}) 5m32.532691788s ago: executing program 7 (id=1827): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000003, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000002c0)={0x0, 0x0, '\x00', {0x0, @bt={0x1, 0x3, 0x0, 0x1, 0x100000, 0x104, 0x3, 0x0, 0xc, 0x5, 0x25, 0x7, 0x0, 0xfb, 0xa, 0x0, {0xc000000, 0xe3a}, 0x3, 0x3}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x0, 0x1da, &(0x7f0000000180)={0x7, 0x80000000001}) mq_notify(0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5m17.205080843s ago: executing program 35 (id=1827): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000003, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000002c0)={0x0, 0x0, '\x00', {0x0, @bt={0x1, 0x3, 0x0, 0x1, 0x100000, 0x104, 0x3, 0x0, 0xc, 0x5, 0x25, 0x7, 0x0, 0xfb, 0xa, 0x0, {0xc000000, 0xe3a}, 0x3, 0x3}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x0, 0x1da, &(0x7f0000000180)={0x7, 0x80000000001}) mq_notify(0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2m33.882273949s ago: executing program 8 (id=2356): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) fcntl$setpipe(r3, 0x407, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x8}}, 0x50) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000140)=0x2e, 0x4) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000240000000000119078000000100000000000004e20001090780200000000000000"], 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1b5, 0x0, &(0x7f00000008c0)="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", 0x0}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000000)) 2m31.455602241s ago: executing program 8 (id=2364): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001680)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x0, 0x200, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@arp={@empty, @private=0xa010101, 0x0, 0xff, 0xf, 0x10, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x1, 0x3, 0x8, 0x4, 0x5, 0xfff, 'pimreg\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0xa}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x100) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="8f", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000180)=0x8) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) r5 = open(&(0x7f0000000280)='./file0\x00', 0x40140, 0x90) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x3ff, 0x1, 0xf2f, 0x5, 0x0, 0x0, 0x98}, &(0x7f0000000480)=0x9c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x9a77f177313713, r5, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={r8, 0xdd, "4eeecaa32499fd47350cbca980c39b991f177fdd2d56a1a213880682fdf0bdf7042eb7c8304abac0e9d7f4666b9cd46a9e4a724357997fa648d631370770749d553a9569698430ba1af2127c940147e1772ff466a93daf1c31699b79808db4e751c436d7e000c67ec476d5ccb96d0fd32337e3acff73927a6e5d6bff3df3318678f6e6bc45b6eb6260f87ccea61cc1860905dc21034890ffaebf3fb38914d7ce627d1822155e8d082c2fef3596f1aa28c707fd3347c9c088e08f63894f2c099da810f48585149161b53795dca71a96f1e57601aa006d4f1c9340325dbc"}, &(0x7f0000000040)=0xe5) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000001c0)={r9, 0xc}, &(0x7f0000000200)=0x8) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 2m29.964154634s ago: executing program 8 (id=2368): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [], 0x6b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xa8dfdcae2e397943, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getpriority(0x1, 0xe6) 2m29.711621251s ago: executing program 8 (id=2369): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = creat(&(0x7f0000000540)='./cgroup.cpu/cgroup.procs\x00', 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff00000000000000000200130002"], 0x70}, 0x1, 0x7}, 0x0) pwrite64(r7, &(0x7f0000000280)='+', 0xf4240, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000000180)={0x18, r10, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1ffffffffffe}, {0x2, 0x6}]}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r10, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000003c0)={0x18, r10}) 2m27.79145444s ago: executing program 8 (id=2375): sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=0x0, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=0x0, @ANYBLOB="050035000000000005003300fbff"], 0x34}}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20, 0x0) 2m26.028974176s ago: executing program 8 (id=2379): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [], 0x6b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xa8dfdcae2e397943, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getpriority(0x1, 0xe6) 2m10.243867366s ago: executing program 36 (id=2379): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [], 0x6b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xa8dfdcae2e397943, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getpriority(0x1, 0xe6) 13.900814338s ago: executing program 9 (id=2768): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5608, 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='k:::\x00', 0x0) r2 = gettid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x65, 0x4, r4, 0x0, &(0x7f00007e9000/0x1000)=nil, 0x1000, 0x10}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r4, 0x0, &(0x7f0000fef000/0x4000)=nil, 0x4000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) 13.492358216s ago: executing program 9 (id=2771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r5, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x48, 0x2, 0x0, "0ba7dfadd940d2c1aebd746fc04a0026d174932d4600000000000200"}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000400)=""/49, 0x31) 12.582763514s ago: executing program 6 (id=2773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x408000f}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000406e050c0100000000000109022400010000000009040000090b000000000010000001222900090581030900000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) (async, rerun: 64) r2 = socket$inet6(0xa, 0x3, 0xff) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @private}, &(0x7f0000000300)=0xc) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x21, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x75, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) (rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast1}, &(0x7f00000007c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'erspan0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x1, 0x100, {{0xb, 0x4, 0x1, 0x1, 0x2c, 0x67, 0x0, 0xf8, 0x2d, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}]}, @lsrr={0x83, 0xb, 0xb4, [@empty, @local]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f00000009c0)={0x730, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_WOL_MODES={0x26c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x6b, 0x5, "db3fa7151e4ae019b98306387aba99a70f06363020b16c89bdf5c2d6354e736e816e65dbbbc361c189e9cf0859de29e4ea286f2c4b7ed3b1c723c5c2c402d0309b974ef41a04b0a7a236c76dabc8a52018dfb2af2b939557fbfeab67871ead4414b55bb03b262e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "7ba8d3548d1bdb0e0e11b427271f4f09bdc6675db47a0c9c97a4e0b355a296ac594ab542c1358a0b5943620169fe822f8c8b169b5e8c8fb9058f1b68914e1d283e020a737e3541c88328"}, @ETHTOOL_A_BITSET_MASK={0x85, 0x5, "1d65baa597005bebd029df69926ab3c45f17df2a90529bbeb34fcec1f98b19e4fa27b304ce6d009005231dc977018640163d37fcf2cadaf3629318641ceb860031e76d0897748a31b207c4460eb96daa6196bad94f78187d97175cb1183e22afdccf6df03a8b166d64a06e5163d73ab3da9a28c7a6957b495d9bc491a6eee16a40"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'payload\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff17}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'inner\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\xb2^$\x9b,@))\\.\x00\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffb0e}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xafe}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '![\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_WOL_MODES={0x218, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "f0f193a5a002a325d3c0821f599270ffbfe2a76b3bdf5d0ae2c1"}, @ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "b125dabf8ad31a2759e5a9c0fa3ff82e04f48e054409976cc7705ccd704eacfc2ea70234ddd658b8da47ab016e06cb04778ba2ec4f40359f782d04f9a6363d2b35884dfdff209f47482950066fff4c4f688d00ef3048cfe8467229ea672083edd4dd1987433f0bdd5ef98a8d9e160ef5b0c6b4435ba7efb16bb88ad9e64ebe9cae0332c3a05ba7e2ffb2"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x23, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/:\xb2,}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xa9$^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa979d23b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd32}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '{j$],*&^\'$\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '[^@^\'@*)\\{$\x95&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '[/%$-*%a\\\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '^&#}&\x03(\'--\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\(-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_WOL_SOPASS={0xdc, 0x3, "cae09ebdcf2cb98ebdc4ac3c4f828254963a9d5c68d3f682feab23ac48866c3cd0f590b447d9b0e7375832cc7e36760ec0e79c9e6e9ff2a6a53e8e873f8b0806e0b1e5cf8c6cb85bb8c7e11d4996d378a4a6dd1e92a6ffc12928eb838eeb48c3c8d8eb2db10af1dcdb8242d3a0463f6427d0d3381a91b3e4be1f1c7b21df63e26407cc6dd244a1d7fa6e4a54bc94184757c3f1181dee767b7acfedb6f8d7fbfa29c0f6ec525680efdce9a221b3ea1995e8f19dd0503b865af3b46bc23fccf36a12f7cd6ae9417a4ae8c64ffce6bfc21ef927a4db4d90897b"}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_WOL_SOPASS={0x86, 0x3, "3db97d53114317bc9cc1be47a3e0745c1ae6e31cf13ee390515dc29762e6fcce2d7a82b040f81af1ded76830d351a541653104667b3f11fbf55a3c0f641667b85cce98cb16f23f15e771298fc284a5cad6f430521b8a170bcfc67ac12a1678e2ac8d6e59250f6863c0ea65c9457c4386a51e5b72780db259d3f756d3951109a19e2d"}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x730}, 0x1, 0x0, 0x0, 0xc004800}, 0x8010) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async, rerun: 32) r14 = msgget$private(0x0, 0x0) (rerun: 32) msgctl$IPC_SET(r14, 0x1, &(0x7f0000258f88)) (async) msgsnd(r14, &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x0, 0x0) (async) msgctl$IPC_SET(r14, 0x1, &(0x7f0000258f88)={{0x3, 0xee01}}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="400e2900ed35de084a090ba5846e6315bd8ceb828bdb1995db13e9778753fc52c69c72dc3b3428599243c5968c0e8a"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r15 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 11.567285659s ago: executing program 0 (id=2778): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, 0x0, 0x0) truncate(0x0, 0xfe0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11.173960805s ago: executing program 9 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000180)=@udp6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000000000000000000000000000ed428fe2c5d36023a0bb7fbf375554291f0fb958cf8fd0a4f6c052cf606a98228a042221dbd361253dabd4e6407597f04cff83a639016f8ad869a15017e5ceb4033d06303f6493e58b870cbbd544fdd1f3858025ab27396ad128f2db97d73d1501f33972983f53a4ae1bde8cbedeae27fa541925e7a19ca6e77c3014224e29e26d250e7fc4065da9f9a3f47c0665676a31c00687de856591af2dd048d75fd8f534e26f3645", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6(0xa, 0x3, 0x6) 10.140907134s ago: executing program 9 (id=2781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17400000000000ffe3000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) 9.459891199s ago: executing program 6 (id=2782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x4c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) 9.39527701s ago: executing program 6 (id=2783): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket(0x10, 0x7, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60460000907800001e041f40"], 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3a7}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1991}, 0x0, {0x0, r8}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) r9 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r9}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001140)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 9.340221959s ago: executing program 0 (id=2784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f203"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYRES8=r0, @ANYRES64=r0, @ANYRES16=r3, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4882c) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000040)={0x1, {0x0, 0x9, 0x5, 0x45de6d8c, 0x400, 0x3}}) 9.268939372s ago: executing program 5 (id=2785): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f00000e2000/0x4000)=nil, 0x4000, 0x3000005, 0x4010, 0xffffffffffffffff, 0xffffc000) (async) connect$vsock_stream(r0, &(0x7f0000000180), 0x10) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000e70000000000bbfe8000000000000000000000000000aa0402907800000000600008100000110000000000000000000000ffff00000000fc0200000000000000000000000000000001000000000000052f000000022559fb36eeca6fad50b375a22a584d16ca55"], 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000001, 0x8020, 0x0, 0x0, {0x401}}) (async) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) (async) syz_open_dev$video4linux(0x0, 0x40000000204, 0x4cd543) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001f80), 0x80, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000001fc0)) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000100)='gre0\x00') sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f00000004c0)="9e", 0x1}], 0x1}, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) 9.103766371s ago: executing program 5 (id=2786): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1000000000000024, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fsopen(&(0x7f0000000240)='selinuxfs\x00', 0x1) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xfff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x94d0}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) arch_prctl$ARCH_GET_GS(0x2002, 0x0) 8.483547084s ago: executing program 9 (id=2789): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r5, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x48, 0x2, 0x0, "0ba7dfadd940d2c1aebd746fc04a0026d174932d4600000000000200"}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000400)=""/49, 0x31) 7.493057548s ago: executing program 3 (id=2790): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee7f9af3dc029871384dcbed5f71f73e269eef4e7cc3151d"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = timerfd_create(0x9, 0x0) timerfd_gettime(r5, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) recvfrom$l2tp6(r2, &(0x7f0000000240)=""/156, 0x9c, 0x40000141, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x20) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) listen(r3, 0x0) 7.183265993s ago: executing program 0 (id=2791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000180)=@udp6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000000000000000000000000000ed428fe2c5d36023a0bb7fbf375554291f0fb958cf8fd0a4f6c052cf606a98228a042221dbd361253dabd4e6407597f04cff83a639016f8ad869a15017e5ceb4033d06303f6493e58b870cbbd544fdd1f3858025ab27396ad128f2db97d73d1501f33972983f53a4ae1bde8cbedeae27fa541925e7a19ca6e77c3014224e29e26d250e7fc4065da9f9a3f47c0665676a31c00687de856591af2dd048d75fd8f534e26f3645", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6(0xa, 0x3, 0x6) 7.151177215s ago: executing program 5 (id=2792): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xa}, 0x1c) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x1e, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9, 0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001000000018000180140002006e657464657673696d30000000004e000800040000000000"], 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10004a42000000000000003ea535ee5cd23e813634ab31b9ca00000000946d56af0800"], 0x20}}], 0x2, 0x40800) 6.311587264s ago: executing program 3 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x4c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) 6.072471503s ago: executing program 0 (id=2794): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') statx(r3, 0x0, 0x1000, 0x6000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000", 0x50}, {&(0x7f00000003c0)="f38d1f8ae9d1061afd8ab46a0363a49448d9e53c19ec", 0x16}], 0x2) 5.719866328s ago: executing program 3 (id=2795): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="040000000000000006000000ffffffff320800000000000001000000000000000200000005000000ff000000030000000300000000000000000000000080000000020000060000000000000000000000080000800600000003000000080000008f00000000000000"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000fe", 0x51}, {&(0x7f00000003c0)="f38d1f8ae9d1061afd8ab46a0363a49448d9e53c19eca3", 0x17}], 0x2) 5.272366128s ago: executing program 0 (id=2796): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x224c000, 0x0, 0xfffffffffffffccd, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) mkdir(0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b5090100000000852600000000000085180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) 4.342096424s ago: executing program 5 (id=2797): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 4.175217338s ago: executing program 6 (id=2798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x11, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() read$FUSE(r5, &(0x7f0000002d40)={0x2020}, 0x2020) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x10001, r7}) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.128541469s ago: executing program 3 (id=2799): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket(0x840000000002, 0x3, 0xfa) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, 0x0, 0x9}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') lseek(r6, 0xe, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 3.907133741s ago: executing program 5 (id=2800): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000", 0x50}, {&(0x7f00000003c0)="f38d1f8ae9d1061afd8ab46a0363a49448d9e53c19ec", 0x16}], 0x2) (fail_nth: 7) 2.951797541s ago: executing program 0 (id=2801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f203"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESDEC, @ANYRES8=r0, @ANYRES64=r0, @ANYRES16=r3, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4882c) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000040)={0x1, {0x0, 0x9, 0x5, 0x45de6d8c, 0x400, 0x3}}) 1.865661953s ago: executing program 5 (id=2802): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1000000000000024, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fsopen(&(0x7f0000000240)='selinuxfs\x00', 0x1) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xfff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x94d0}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020082797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a3000000000140000001000010000000000000000000000000a5cd5ef1cebb7df452e6958407cbb9c58883e572f85a769fd8ac8d0cc79cfafe23f51d0746170cbcd7b4114663b7bb4c23d4eef04104a9fcc197c3f4b14ce01f18354808a8401fe65d087cd123a7d69826964b0dbd7a0ae83906c1300251c6f060d41760e632aadd6122b6e50c15b06b0bbeb7a"], 0xe4}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) arch_prctl$ARCH_GET_GS(0x2002, 0x0) 1.812340701s ago: executing program 3 (id=2803): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee7f9af3dc029871384dcbed5f71f73e269eef4e7cc3151d"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = timerfd_create(0x9, 0x0) timerfd_gettime(r5, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) recvfrom$l2tp6(r2, &(0x7f0000000240)=""/156, 0x9c, 0x40000141, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x20) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) listen(r3, 0x0) 1.074691304s ago: executing program 6 (id=2804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000180)=@udp6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000000000000000000000000000ed428fe2c5d36023a0bb7fbf375554291f0fb958cf8fd0a4f6c052cf606a98228a042221dbd361253dabd4e6407597f04cff83a639016f8ad869a15017e5ceb4033d06303f6493e58b870cbbd544fdd1f3858025ab27396ad128f2db97d73d1501f33972983f53a4ae1bde8cbedeae27fa541925e7a19ca6e77c3014224e29e26d250e7fc4065da9f9a3f47c0665676a31c00687de856591af2dd048d75fd8f534e26f3645", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6(0xa, 0x3, 0x6) 1.074102668s ago: executing program 9 (id=2805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x4c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) 760.927667ms ago: executing program 3 (id=2806): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x5, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x2430, &(0x7f00000022c0)={[{0x95, 0x4e00, "d256ab5eae798a974a8c912e4f623ca94acc2c1f611cb22f26bd672a2b17f802330bebaa91d4a767fce0679eeaf710b5e9345bc487881279c0e90cb090a00acc32ca4f34b065ccfd7838f2d27976456787fe05e5b3701e9740e4527b8eecd1aa73dab78c8c08eac27feba5f13c05e01d475f6b99c8fb9efbb521a43be639e847afda29f7e477af83df46b1ac765f6f9c0fbd68f785"}, {0x9e, 0x4e00, "5675a2b55d87932b17179dfb8b6006f628dee71efdc06b7df407aab6f23dc1340b48c4fd78c3e1ca4efeb5b706db3883cf662d1662b3de3be1f87cb5442d9c7a0d9f43c94669bdbfe447fe6a53afa4506643b01b5b4d30a2863f8f3ea4affd546d3b2006d061cc2617e01beee7a9289298af26f535ac20260dd8c51889a133b4bc7403a853096f4d44e61d473d4e83082dd66679eb4aaa9e2ad9ad1bf91d"}, {0x1000, 0x4e00, "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"}, {0xd9, 0x4e00, "e9c51f527b56907e86c5f1b477dfb03cd8fbb84560e359f13ca23ed822a7b59f0fadbece2de27933d449c8d3fcf57f2a8becb8aca035bc7e3f48a238d0bca3a000f7886c6057361c0059bcd980d77deba894e29283ee043cdce6b0b1cb1c10b1d5f3f62c1a07883984a1635d17ba3fc706cee211b11e7d4b7e95963055dca25ce80135f50c5966b173ad63a22ab17d20e74f6c5952fa7ea53a6158250607635724f454da7e6cf7470de548abd233d35e0e43ad34613ab40a8871b605e6d8279bb9f9062b1be9129d5c03680c626a19389526eb9c0f377ec0d2"}, {0x20, 0x4e00, "f1ea2d270a63630edae26b0b53bfc129db16922073f0b8575e36fa6afe5aa1c7"}, {0xb5, 0x4e00, "864475f401ca3bf155841d9679e6a7f281ffeb11f6a8568dbed0db329a42aaa2664d3bfa6ed1af586ca750996ffe7015db4902aca7f8abef7b0e633b25137d324378217108b2146dd46418e69a4d0e523613014c43a9913300da33a1a4209c207c4fc3dad39970679ae32a2ca93ef534d6d4bc7f569c59b07b2fa8cd4206e56fb2fe0b215f2db489700bf3cc3b33dfbc64dbf21d083301378709fe898b705256d3008cb1e0382c604f9cfe2f87bb5272caa9070c5a"}, {0x1000, 0x4e00, "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"}, {0x99, 0x4e00, "2a2f244a324151a399301e834f49b62a6ffc69c49683c454553fb3a91b67372b68598949cf750fead2ab907e03a900022caaa442a27d228931547ea7fd958bc943b91438e74075e3228d1b7ff23048c18a579ecc19b09ad384afed59351e2a2aedff636bd02a1e8faba2841461beee37199068f6a22ec8741c3e93a60465f4f165b7c876de9b1925f34a620af70fd57e8c547dbccb060a77df"}, {0x82, 0x4e00, "5d2a1fe0c54526835c09c7aedf5414d6a4d6c8060d8ea8ad7473a59fd581c5c28deda17ff518b49b2d2c0166127c4427a2ca6c881af0dbb31e45309bd69e845e5febb0e0364c8c98ad440815ee16a7753f0fe95160df56561d23d3baf74693bf010ffb556fb1b306ecb65c3792bc26fd58d00f3ddf2054328827ba1e1a13a4cd2577"}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000580)=""/52, 0x34}], 0x1) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b00)=""/81, 0x51}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x2}}, {{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/104, 0x68}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f0000000740)=""/215, 0xd7}, {&(0x7f0000000140)=""/37, 0x25}], 0x7, &(0x7f00000012c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000940)=@ll, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1, &(0x7f00000006c0)=""/58, 0x3a}, 0x8}], 0x3, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000000280)) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) recvmmsg(r5, &(0x7f0000006ec0)=[{{&(0x7f0000000a80)=@ll, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/62, 0x3e}, {&(0x7f0000000c00)=""/34, 0x22}, {&(0x7f0000000c40)=""/229, 0xe5}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/4, 0x4}], 0x5, &(0x7f0000004700)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000e40)=@xdp, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/205, 0xcd}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=""/104, 0x68}], 0x3, &(0x7f00000010c0)=""/212, 0xd4}, 0x3}, {{&(0x7f0000005700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005780)=""/255, 0xff}, {&(0x7f0000005880)=""/33, 0x21}, {&(0x7f00000058c0)=""/250, 0xfa}], 0x3}, 0x10001}, {{&(0x7f0000005a00)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000005a80)=""/33, 0x21}, {&(0x7f0000005ac0)=""/91, 0x5b}, {&(0x7f0000005b40)=""/4096, 0x1000}], 0x3, &(0x7f0000006b80)=""/175, 0xaf}, 0x7fffffff}, {{&(0x7f0000006c40)=@hci, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006cc0)=""/178, 0xb2}, {&(0x7f0000006d80)=""/200, 0xc8}], 0x2}, 0x10001}], 0x5, 0x40, 0x0) 0s ago: executing program 6 (id=2807): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r5, 0x3, 0x6}, 0x10) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x400, @empty}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0xfff) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000000c0)={'syzkaller1\x00', 0x6}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 2][T15116] ? __kmalloc_node_noprof+0xb7/0x440 [ 812.708408][T15116] ? __pfx___might_resched+0x10/0x10 [ 812.713702][T15116] ? vsnprintf+0x1ccd/0x1da0 [ 812.718290][T15116] should_fail_ex+0x3b0/0x4e0 [ 812.722958][T15116] should_failslab+0xac/0x100 [ 812.727637][T15116] __kmalloc_node_noprof+0xdf/0x440 [ 812.732834][T15116] ? __kvmalloc_node_noprof+0x72/0x190 [ 812.738315][T15116] ? __pfx_vlan_setup+0x10/0x10 [ 812.743159][T15116] __kvmalloc_node_noprof+0x72/0x190 [ 812.748433][T15116] alloc_netdev_mqs+0x9b/0x1000 [ 812.753362][T15116] ? __pfx_vlan_setup+0x10/0x10 [ 812.758207][T15116] ? bpf_lsm_capable+0x9/0x10 [ 812.762875][T15116] rtnl_create_link+0x2f9/0xc20 [ 812.767740][T15116] rtnl_newlink+0x1423/0x20a0 [ 812.772438][T15116] ? rtnl_newlink+0xab1/0x20a0 [ 812.777210][T15116] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.782226][T15116] ? __pfx___mutex_trylock_common+0x10/0x10 [ 812.788121][T15116] ? rcu_is_watching+0x15/0xb0 [ 812.792875][T15116] ? trace_contention_end+0x3c/0x120 [ 812.798152][T15116] ? __mutex_lock+0x2ef/0xd70 [ 812.802827][T15116] ? __pfx_lock_release+0x10/0x10 [ 812.807878][T15116] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.812905][T15116] rtnetlink_rcv_msg+0x73f/0xcf0 [ 812.817831][T15116] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 812.822938][T15116] ? __lock_acquire+0x1384/0x2050 [ 812.827956][T15116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.833413][T15116] netlink_rcv_skb+0x1e3/0x430 [ 812.838174][T15116] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.843625][T15116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.848927][T15116] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.854127][T15116] netlink_unicast+0x7f6/0x990 [ 812.858897][T15116] ? __pfx_netlink_unicast+0x10/0x10 [ 812.864183][T15116] ? __virt_addr_valid+0x183/0x530 [ 812.869294][T15116] ? __check_object_size+0x48e/0x900 [ 812.874578][T15116] netlink_sendmsg+0x8e4/0xcb0 [ 812.879355][T15116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.884658][T15116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.889950][T15116] __sock_sendmsg+0x221/0x270 [ 812.894630][T15116] ____sys_sendmsg+0x52a/0x7e0 [ 812.899395][T15116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.904685][T15116] __sys_sendmsg+0x292/0x380 [ 812.909276][T15116] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.914390][T15116] ? __pfx_vfs_write+0x10/0x10 [ 812.919176][T15116] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 812.925499][T15116] ? do_syscall_64+0x100/0x230 [ 812.930266][T15116] ? do_syscall_64+0xb6/0x230 [ 812.934941][T15116] do_syscall_64+0xf3/0x230 [ 812.939442][T15116] ? clear_bhb_loop+0x35/0x90 [ 812.944113][T15116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.949998][T15116] RIP: 0033:0x7f2dcf97e719 [ 812.954407][T15116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.974006][T15116] RSP: 002b:00007f2dd0755038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.982417][T15116] RAX: ffffffffffffffda RBX: 00007f2dcfb35f80 RCX: 00007f2dcf97e719 [ 812.990379][T15116] RDX: 0000000004004850 RSI: 0000000020000440 RDI: 0000000000000003 [ 812.998341][T15116] RBP: 00007f2dd0755090 R08: 0000000000000000 R09: 0000000000000000 [ 813.006306][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.014273][T15116] R13: 0000000000000000 R14: 00007f2dcfb35f80 R15: 00007fff65e09a68 [ 813.022246][T15116] [ 813.025411][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.593908][ T5829] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 813.634258][T15123] vlan2: entered promiscuous mode [ 813.890214][T15135] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 813.896834][T15135] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 813.945320][T15135] vhci_hcd vhci_hcd.0: Device attached [ 813.972407][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 814.165213][ T5877] vhci_hcd: vhci_device speed not set [ 814.312451][ T5877] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 814.596715][T15135] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 814.671874][T15135] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 814.678444][T15135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 814.721026][T15135] vhci_hcd vhci_hcd.0: Device attached [ 815.275320][T15152] vhci_hcd: connection closed [ 815.292335][ T11] vhci_hcd: stop threads [ 815.293753][T15138] vhci_hcd: connection reset by peer [ 815.297639][ T11] vhci_hcd: release socket [ 815.317757][ T11] vhci_hcd: disconnect device [ 815.414732][ T11] vhci_hcd: stop threads [ 815.433667][ T11] vhci_hcd: release socket [ 815.456186][ T11] vhci_hcd: disconnect device [ 815.918065][T15137] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2211'. [ 816.106503][T15165] random: crng reseeded on system resumption [ 818.111010][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2227'. [ 818.153053][T15192] netlink: 'syz.3.2227': attribute type 10 has an invalid length. [ 818.185804][T15192] team0: Port device netdevsim0 added [ 818.292310][T15196] input: syz1 as /devices/virtual/input/input67 [ 818.342288][ T5874] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 818.344116][T15196] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 818.499923][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 818.508915][ T5874] usb 6-1: config 8 has an invalid interface number: 2 but max is 0 [ 818.531120][ T5874] usb 6-1: config 8 has no interface number 0 [ 818.554694][ T5874] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 818.569899][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.592153][ T5874] usb 6-1: Product: syz [ 818.596357][ T5874] usb 6-1: Manufacturer: syz [ 818.600972][ T5874] usb 6-1: SerialNumber: syz [ 818.603222][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2230'. [ 818.893414][ T29] audit: type=1326 audit(1730855900.374:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.6.2231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6577e719 code=0x0 [ 819.667204][ T5877] vhci_hcd: vhci_device speed not set [ 820.000714][T15223] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 820.007369][T15223] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 820.015757][T15223] vhci_hcd vhci_hcd.0: Device attached [ 820.352252][ T25] vhci_hcd: vhci_device speed not set [ 820.376234][T15224] vhci_hcd: connection closed [ 820.378078][ T3490] vhci_hcd: stop threads [ 820.494706][ T5874] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 820.503069][ T5874] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 820.562170][ T25] usb 39-1: new full-speed USB device number 7 using vhci_hcd [ 820.624662][ T5874] usb 6-1: USB disconnect, device number 25 [ 820.733388][ T3490] vhci_hcd: release socket [ 820.737912][ T3490] vhci_hcd: disconnect device [ 821.736787][T15239] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.2238'. [ 821.748410][T15239] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.2238'. [ 822.302663][T15232] could not allocate digest TFM handle cbcmac-aes-ce [ 822.760045][ T5877] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 823.424218][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.447666][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.476714][ T5877] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 823.550341][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 823.572281][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.639910][T15267] Cannot find set identified by id 0 to match [ 823.653294][ T5877] usb 6-1: config 0 descriptor?? [ 823.730242][ T29] audit: type=1326 audit(1730855905.204:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15261 comm="syz.3.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x0 [ 824.157988][ T5877] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 824.168187][ T5877] hid-thrustmaster 0003:044F:B65D.0021: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 824.181668][ T5877] hid-thrustmaster 0003:044F:B65D.0021: Wrong number of endpoints? [ 824.396762][T15282] FAULT_INJECTION: forcing a failure. [ 824.396762][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 824.410457][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.3.2249 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 824.421262][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 824.431340][T15282] Call Trace: [ 824.434637][T15282] [ 824.437579][T15282] dump_stack_lvl+0x241/0x360 [ 824.442281][T15282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.447511][T15282] ? __pfx__printk+0x10/0x10 [ 824.452123][T15282] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 824.457603][T15282] ? __pfx___might_resched+0x10/0x10 [ 824.462914][T15282] should_fail_ex+0x3b0/0x4e0 [ 824.467610][T15282] should_failslab+0xac/0x100 [ 824.472295][T15282] ? rt_acct_proc_show+0x57/0x3d0 [ 824.477327][T15282] __kmalloc_cache_noprof+0x6c/0x2c0 [ 824.482615][T15282] rt_acct_proc_show+0x57/0x3d0 [ 824.487465][T15282] seq_read_iter+0x43f/0xd70 [ 824.492078][T15282] proc_reg_read_iter+0x1c2/0x290 [ 824.497107][T15282] copy_splice_read+0x663/0xb60 [ 824.501981][T15282] ? __pfx_copy_splice_read+0x10/0x10 [ 824.507382][T15282] ? alloc_pipe_info+0x370/0x4d0 [ 824.512341][T15282] ? __pfx_copy_splice_read+0x10/0x10 [ 824.517731][T15282] splice_direct_to_actor+0x4af/0xc80 [ 824.523120][T15282] ? __pfx_direct_splice_actor+0x10/0x10 [ 824.528755][T15282] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 824.534649][T15282] ? __fget_files+0x29/0x470 [ 824.539244][T15282] ? __pfx_lock_release+0x10/0x10 [ 824.544281][T15282] do_splice_direct+0x289/0x3e0 [ 824.549131][T15282] ? __pfx_do_splice_direct+0x10/0x10 [ 824.554499][T15282] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 824.560402][T15282] ? rw_verify_area+0x1c3/0x6f0 [ 824.565264][T15282] do_sendfile+0x561/0xe10 [ 824.569681][T15282] ? __pfx_vfs_write+0x10/0x10 [ 824.574445][T15282] ? __pfx_do_sendfile+0x10/0x10 [ 824.579388][T15282] __se_sys_sendfile64+0x17c/0x1e0 [ 824.584501][T15282] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 824.590133][T15282] ? do_syscall_64+0x100/0x230 [ 824.594898][T15282] ? do_syscall_64+0xb6/0x230 [ 824.599572][T15282] do_syscall_64+0xf3/0x230 [ 824.604076][T15282] ? clear_bhb_loop+0x35/0x90 [ 824.608753][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.614649][T15282] RIP: 0033:0x7fb03ef7e719 [ 824.619063][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.638683][T15282] RSP: 002b:00007fb03fdc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 824.647101][T15282] RAX: ffffffffffffffda RBX: 00007fb03f135f80 RCX: 00007fb03ef7e719 [ 824.655068][T15282] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 824.663040][T15282] RBP: 00007fb03fdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 824.671007][T15282] R10: 0000000000400007 R11: 0000000000000246 R12: 0000000000000001 [ 824.678974][T15282] R13: 0000000000000000 R14: 00007fb03f135f80 R15: 00007fff350a4ff8 [ 824.686956][T15282] [ 824.708443][ C1] hid-thrustmaster 0003:044F:B65D.0021: URB to get model id failed with error -71 [ 824.712585][ T8] usb 6-1: USB disconnect, device number 26 [ 825.152631][T15286] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 825.159295][T15286] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 825.167164][T15286] vhci_hcd vhci_hcd.0: Device attached [ 825.170338][T15288] could not allocate digest TFM handle cbcmac-aes-ce [ 825.372713][ T5877] vhci_hcd: vhci_device speed not set [ 825.442726][ T5877] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 825.580315][T15301] could not allocate digest TFM handle cbcmac-aes-ce [ 825.699626][T15298] vhci_hcd: connection reset by peer [ 825.705770][ T25] vhci_hcd: vhci_device speed not set [ 825.711847][ T3490] vhci_hcd: stop threads [ 825.717971][ T3490] vhci_hcd: release socket [ 825.735655][ T3490] vhci_hcd: disconnect device [ 825.886487][ T5829] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 826.378102][T15330] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.2261'. [ 826.397426][T15330] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.2261'. [ 830.045667][T15339] sctp: [Deprecated]: syz.8.2264 (pid 15339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 830.045667][T15339] Use struct sctp_sack_info instead [ 830.514936][ T5842] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 831.257023][T15346] mac80211_hwsim hwsim16 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 831.279698][T15346] tmpfs: Bad value for 'size' [ 831.341562][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.360734][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 831.371464][T15348] tmpfs: Bad value for 'size' [ 831.380689][ T5877] vhci_hcd: vhci_device speed not set [ 831.404933][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.464003][ T5842] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 831.502120][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.556849][ T5842] usb 1-1: config 0 descriptor?? [ 831.758687][T15367] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2268'. [ 831.768798][T15367] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 832.139825][ T5842] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 832.170733][ T5842] hid-thrustmaster 0003:044F:B65D.0022: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 832.191620][ T5842] hid-thrustmaster 0003:044F:B65D.0022: Wrong number of endpoints? [ 832.496838][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.512956][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.676793][ C0] hid-thrustmaster 0003:044F:B65D.0022: URB to get model id failed with error -71 [ 832.688105][ T5842] usb 1-1: USB disconnect, device number 57 [ 833.573037][ T12] wlan0: Trigger new scan to find an IBSS to join [ 833.658571][T15386] Process accounting paused [ 833.712712][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 833.752659][T15391] FAULT_INJECTION: forcing a failure. [ 833.752659][T15391] name failslab, interval 1, probability 0, space 0, times 0 [ 833.782123][T15391] CPU: 1 UID: 0 PID: 15391 Comm: syz.3.2279 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 833.792951][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 833.803036][T15391] Call Trace: [ 833.806342][T15391] [ 833.809403][T15391] dump_stack_lvl+0x241/0x360 [ 833.814119][T15391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.819352][T15391] ? __pfx__printk+0x10/0x10 [ 833.823974][T15391] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 833.829969][T15391] ? __pfx___might_resched+0x10/0x10 [ 833.835294][T15391] should_fail_ex+0x3b0/0x4e0 [ 833.839986][T15391] should_failslab+0xac/0x100 [ 833.844675][T15391] ? __alloc_skb+0x1c3/0x440 [ 833.849288][T15391] kmem_cache_alloc_node_noprof+0x71/0x320 [ 833.855097][T15391] __alloc_skb+0x1c3/0x440 [ 833.859514][T15391] ? __pfx___alloc_skb+0x10/0x10 [ 833.864456][T15391] ? netlink_ack_tlv_len+0x6e/0x200 [ 833.869655][T15391] netlink_ack+0x13f/0xa30 [ 833.874074][T15391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 833.879539][T15391] netlink_rcv_skb+0x262/0x430 [ 833.884301][T15391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 833.889755][T15391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 833.895051][T15391] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.900251][T15391] netlink_unicast+0x7f6/0x990 [ 833.905026][T15391] ? __pfx_netlink_unicast+0x10/0x10 [ 833.910306][T15391] ? __virt_addr_valid+0x183/0x530 [ 833.915501][T15391] ? __check_object_size+0x48e/0x900 [ 833.920787][T15391] netlink_sendmsg+0x8e4/0xcb0 [ 833.925556][T15391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.930846][T15391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.936128][T15391] __sock_sendmsg+0x221/0x270 [ 833.940805][T15391] ____sys_sendmsg+0x52a/0x7e0 [ 833.945573][T15391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.950871][T15391] __sys_sendmsg+0x292/0x380 [ 833.955549][T15391] ? __pfx___sys_sendmsg+0x10/0x10 [ 833.960667][T15391] ? __pfx_vfs_write+0x10/0x10 [ 833.965448][T15391] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 833.971777][T15391] ? do_syscall_64+0x100/0x230 [ 833.976540][T15391] ? do_syscall_64+0xb6/0x230 [ 833.981217][T15391] do_syscall_64+0xf3/0x230 [ 833.985717][T15391] ? clear_bhb_loop+0x35/0x90 [ 833.990404][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.996293][T15391] RIP: 0033:0x7fb03ef7e719 [ 834.000725][T15391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.020331][T15391] RSP: 002b:00007fb03fdc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.028749][T15391] RAX: ffffffffffffffda RBX: 00007fb03f135f80 RCX: 00007fb03ef7e719 [ 834.036722][T15391] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 834.044784][T15391] RBP: 00007fb03fdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 834.052935][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.060902][T15391] R13: 0000000000000000 R14: 00007fb03f135f80 R15: 00007fff350a4ff8 [ 834.068882][T15391] [ 834.418276][T15401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.957846][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2287'. [ 837.292884][T15427] netlink: 'syz.5.2289': attribute type 28 has an invalid length. [ 837.305173][T15427] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2289'. [ 837.473058][ T3490] wlan0: Trigger new scan to find an IBSS to join [ 839.551696][ T5877] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 839.586525][T15463] syz_tun: entered promiscuous mode [ 839.631668][T15463] syz_tun: left promiscuous mode [ 839.688983][T15467] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 839.699527][T15469] random: crng reseeded on system resumption [ 839.784105][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.796516][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.807938][ T6013] wlan0: Creating new IBSS network, BSSID 5e:b1:4f:46:8e:94 [ 839.817203][ T5877] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 839.831656][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.859710][ T5877] usb 4-1: config 0 descriptor?? [ 840.484756][ T5877] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 840.492660][ T5877] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 840.500028][ T5877] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 840.516279][ T5877] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 840.524018][ T5877] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 840.539203][ T5877] hid-led 0003:1D34:000A.0023: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 840.590624][ T5877] hid-led 0003:1D34:000A.0023: Dream Cheeky Webmail Notifier initialized [ 840.728107][T15484] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2304'. [ 840.756598][T15484] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 840.769048][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2305'. [ 840.772832][ T8] usb 4-1: USB disconnect, device number 37 [ 842.162899][T15492] FAULT_INJECTION: forcing a failure. [ 842.162899][T15492] name failslab, interval 1, probability 0, space 0, times 0 [ 842.202235][T15492] CPU: 1 UID: 0 PID: 15492 Comm: syz.0.2308 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 842.213055][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 842.223128][T15492] Call Trace: [ 842.226424][T15492] [ 842.229373][T15492] dump_stack_lvl+0x241/0x360 [ 842.234080][T15492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.239299][T15492] ? __pfx__printk+0x10/0x10 [ 842.243913][T15492] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 842.249479][T15492] ? __pfx___might_resched+0x10/0x10 [ 842.254791][T15492] should_fail_ex+0x3b0/0x4e0 [ 842.259490][T15492] ? skb_clone+0x20c/0x390 [ 842.263928][T15492] should_failslab+0xac/0x100 [ 842.268647][T15492] ? skb_clone+0x20c/0x390 [ 842.273085][T15492] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 842.278490][T15492] skb_clone+0x20c/0x390 [ 842.282759][T15492] nfnetlink_rcv+0x575/0x2ab0 [ 842.287458][T15492] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 842.293209][T15492] ? __dev_queue_xmit+0x171d/0x3ed0 [ 842.298431][T15492] ? kasan_save_track+0x51/0x80 [ 842.303306][T15492] ? do_syscall_64+0xf3/0x230 [ 842.308002][T15492] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 842.313157][T15492] ? ref_tracker_free+0x643/0x7e0 [ 842.318200][T15492] ? __asan_memcpy+0x40/0x70 [ 842.322808][T15492] ? __pfx_ref_tracker_free+0x10/0x10 [ 842.328214][T15492] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.333434][T15492] ? skb_clone+0x240/0x390 [ 842.337872][T15492] ? __pfx_lock_release+0x10/0x10 [ 842.342923][T15492] ? __netlink_deliver_tap+0x77e/0x7c0 [ 842.348410][T15492] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.353628][T15492] netlink_unicast+0x7f6/0x990 [ 842.358439][T15492] ? __pfx_netlink_unicast+0x10/0x10 [ 842.363752][T15492] ? __virt_addr_valid+0x183/0x530 [ 842.368873][T15492] ? __check_object_size+0x48e/0x900 [ 842.374174][T15492] netlink_sendmsg+0x8e4/0xcb0 [ 842.378955][T15492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.384261][T15492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.389548][T15492] __sock_sendmsg+0x221/0x270 [ 842.394227][T15492] ____sys_sendmsg+0x52a/0x7e0 [ 842.399005][T15492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.404300][T15492] __sys_sendmsg+0x292/0x380 [ 842.408890][T15492] ? __pfx___sys_sendmsg+0x10/0x10 [ 842.414010][T15492] ? __pfx_vfs_write+0x10/0x10 [ 842.418793][T15492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 842.425133][T15492] ? do_syscall_64+0x100/0x230 [ 842.429900][T15492] ? do_syscall_64+0xb6/0x230 [ 842.434582][T15492] do_syscall_64+0xf3/0x230 [ 842.439089][T15492] ? clear_bhb_loop+0x35/0x90 [ 842.443775][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.449669][T15492] RIP: 0033:0x7fbd8677e719 [ 842.454089][T15492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.473702][T15492] RSP: 002b:00007fbd874f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.482123][T15492] RAX: ffffffffffffffda RBX: 00007fbd86935f80 RCX: 00007fbd8677e719 [ 842.490116][T15492] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 842.498101][T15492] RBP: 00007fbd874f9090 R08: 0000000000000000 R09: 0000000000000000 [ 842.506075][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.514047][T15492] R13: 0000000000000000 R14: 00007fbd86935f80 R15: 00007ffe61d5b1b8 [ 842.522035][T15492] [ 842.556483][T15497] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 842.639499][T15500] FAULT_INJECTION: forcing a failure. [ 842.639499][T15500] name failslab, interval 1, probability 0, space 0, times 0 [ 842.652772][T15500] CPU: 0 UID: 0 PID: 15500 Comm: syz.5.2310 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 842.663557][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 842.673734][T15500] Call Trace: [ 842.677030][T15500] [ 842.679970][T15500] dump_stack_lvl+0x241/0x360 [ 842.684769][T15500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.689981][T15500] ? __pfx__printk+0x10/0x10 [ 842.694589][T15500] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 842.700061][T15500] ? __pfx___might_resched+0x10/0x10 [ 842.705370][T15500] should_fail_ex+0x3b0/0x4e0 [ 842.710069][T15500] should_failslab+0xac/0x100 [ 842.714767][T15500] ? nf_tables_newtable+0x52c/0x1e10 [ 842.720067][T15500] __kmalloc_cache_noprof+0x6c/0x2c0 [ 842.725369][T15500] ? nft_pernet+0x23/0x240 [ 842.729805][T15500] nf_tables_newtable+0x52c/0x1e10 [ 842.734946][T15500] ? nfnl_pernet+0x23/0x240 [ 842.739478][T15500] ? __pfx_nf_tables_newtable+0x10/0x10 [ 842.745050][T15500] ? __nla_parse+0x40/0x60 [ 842.749488][T15500] nfnetlink_rcv+0x14dc/0x2ab0 [ 842.754268][T15500] ? __pfx_validate_chain+0x10/0x10 [ 842.759514][T15500] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 842.764653][T15500] ? __lock_acquire+0x1384/0x2050 [ 842.769731][T15500] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.774951][T15500] ? __pfx_lock_release+0x10/0x10 [ 842.780008][T15500] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.785225][T15500] netlink_unicast+0x7f6/0x990 [ 842.790013][T15500] ? __pfx_netlink_unicast+0x10/0x10 [ 842.795313][T15500] ? __check_object_size+0x14d/0x900 [ 842.800884][T15500] ? __check_object_size+0x48e/0x900 [ 842.806200][T15500] netlink_sendmsg+0x8e4/0xcb0 [ 842.810994][T15500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.816296][T15500] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 842.822747][T15500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.828043][T15500] __sock_sendmsg+0x221/0x270 [ 842.832742][T15500] ____sys_sendmsg+0x52a/0x7e0 [ 842.837534][T15500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.842852][T15500] __sys_sendmsg+0x292/0x380 [ 842.847467][T15500] ? __pfx___sys_sendmsg+0x10/0x10 [ 842.852621][T15500] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 842.858996][T15500] do_syscall_64+0xf3/0x230 [ 842.863516][T15500] ? clear_bhb_loop+0x35/0x90 [ 842.868209][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.874117][T15500] RIP: 0033:0x7f2dcf97e719 [ 842.878541][T15500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.898167][T15500] RSP: 002b:00007f2dd0713038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.906605][T15500] RAX: ffffffffffffffda RBX: 00007f2dcfb36130 RCX: 00007f2dcf97e719 [ 842.914591][T15500] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 842.922598][T15500] RBP: 00007f2dd0713090 R08: 0000000000000000 R09: 0000000000000000 [ 842.930589][T15500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.938574][T15500] R13: 0000000000000000 R14: 00007f2dcfb36130 R15: 00007fff65e09a68 [ 842.946584][T15500] [ 844.409142][T15507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.855991][ T5842] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 845.094321][ T5842] usb 7-1: unable to get BOS descriptor or descriptor too short [ 845.124341][ T5842] usb 7-1: config 8 has an invalid interface number: 2 but max is 0 [ 845.139404][ T5842] usb 7-1: config 8 has no interface number 0 [ 845.152856][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 845.179786][ T5842] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 845.189221][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.198091][ T5842] usb 7-1: Product: syz [ 845.202487][ T5842] usb 7-1: Manufacturer: syz [ 845.207113][ T5842] usb 7-1: SerialNumber: syz [ 845.336868][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 845.352081][ T9] usb 6-1: config 8 has an invalid interface number: 2 but max is 0 [ 845.361264][ T9] usb 6-1: config 8 has no interface number 0 [ 845.404219][ T9] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 845.448021][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.505892][ T9] usb 6-1: Product: syz [ 845.518990][ T9] usb 6-1: Manufacturer: syz [ 845.528426][ T9] usb 6-1: SerialNumber: syz [ 846.589793][ T5842] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 846.599644][ T5842] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input71 [ 847.304937][ T5842] usb 7-1: USB disconnect, device number 20 [ 847.953395][T15550] hub 9-0:1.0: USB hub found [ 848.003262][T15550] hub 9-0:1.0: 1 port detected [ 848.081377][T15549] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2321'. [ 848.182757][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 848.192431][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72 [ 848.322201][ T9] usb 6-1: USB disconnect, device number 27 [ 848.422499][T15555] random: crng reseeded on system resumption [ 848.448665][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2329'. [ 848.459797][T15563] netlink: 'syz.8.2329': attribute type 10 has an invalid length. [ 848.507903][T15563] team0: Failed to send options change via netlink (err -105) [ 848.517543][T15563] team0: Port device netdevsim0 added [ 848.601754][ T6012] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 848.761142][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 848.824202][T15568] tmpfs: Bad value for 'size' [ 849.471320][T15583] fuse: Bad value for 'fd' [ 849.781706][T15585] hub 9-0:1.0: USB hub found [ 849.790820][T15585] hub 9-0:1.0: 1 port detected [ 850.000443][T15584] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2334'. [ 850.681428][T15599] FAULT_INJECTION: forcing a failure. [ 850.681428][T15599] name failslab, interval 1, probability 0, space 0, times 0 [ 850.772333][T15599] CPU: 1 UID: 0 PID: 15599 Comm: syz.8.2338 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 850.783164][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 850.793233][T15599] Call Trace: [ 850.796512][T15599] [ 850.799439][T15599] dump_stack_lvl+0x241/0x360 [ 850.804119][T15599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.809313][T15599] ? __pfx__printk+0x10/0x10 [ 850.814162][T15599] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 850.819705][T15599] ? __pfx___might_resched+0x10/0x10 [ 850.824993][T15599] should_fail_ex+0x3b0/0x4e0 [ 850.829672][T15599] ? __kernfs_new_node+0xd8/0x870 [ 850.834704][T15599] should_failslab+0xac/0x100 [ 850.839392][T15599] ? __kernfs_new_node+0xd8/0x870 [ 850.844412][T15599] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 850.849781][T15599] __kernfs_new_node+0xd8/0x870 [ 850.854629][T15599] ? mark_lock+0x9a/0x360 [ 850.858955][T15599] ? __lock_acquire+0x1384/0x2050 [ 850.863977][T15599] ? __pfx___kernfs_new_node+0x10/0x10 [ 850.869446][T15599] kernfs_new_node+0x137/0x240 [ 850.874213][T15599] kernfs_create_dir_ns+0x43/0x120 [ 850.879323][T15599] sysfs_create_dir_ns+0x189/0x3a0 [ 850.884438][T15599] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 850.890071][T15599] kobject_add_internal+0x435/0x8d0 [ 850.895277][T15599] kobject_add+0x152/0x220 [ 850.899693][T15599] ? kobject_put+0x43d/0x480 [ 850.904281][T15599] ? __pfx_kobject_add+0x10/0x10 [ 850.909225][T15599] ? get_device_parent+0x25d/0x410 [ 850.914332][T15599] ? device_add+0x318/0xbf0 [ 850.918835][T15599] device_add+0x4e5/0xbf0 [ 850.923164][T15599] input_register_device+0xa53/0x1110 [ 850.928540][T15599] uinput_create_device+0x40e/0x630 [ 850.933747][T15599] uinput_ioctl_handler+0x488/0x1770 [ 850.939035][T15599] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 850.944759][T15599] ? __fget_files+0x3f3/0x470 [ 850.949440][T15599] ? __pfx_uinput_ioctl+0x10/0x10 [ 850.954464][T15599] __se_sys_ioctl+0xf9/0x170 [ 850.959055][T15599] do_syscall_64+0xf3/0x230 [ 850.963557][T15599] ? clear_bhb_loop+0x35/0x90 [ 850.968232][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.974122][T15599] RIP: 0033:0x7ffa68f7e719 [ 850.978530][T15599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.998129][T15599] RSP: 002b:00007ffa69dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.006556][T15599] RAX: ffffffffffffffda RBX: 00007ffa69135f80 RCX: 00007ffa68f7e719 [ 851.014522][T15599] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 851.022485][T15599] RBP: 00007ffa69dce090 R08: 0000000000000000 R09: 0000000000000000 [ 851.030455][T15599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.038428][T15599] R13: 0000000000000000 R14: 00007ffa69135f80 R15: 00007fffe525a918 [ 851.046411][T15599] [ 851.077314][T15599] kobject: kobject_add_internal failed for input73 (error: -12 parent: input) [ 851.856144][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2341'. [ 851.867608][T15613] netlink: 'syz.8.2341': attribute type 10 has an invalid length. [ 852.966334][T15628] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2342'. [ 852.976176][T15628] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 853.012805][ T5829] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 853.409483][T15637] tmpfs: Bad value for 'mpol' [ 854.652170][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 854.748751][T15662] syz_tun: entered promiscuous mode [ 854.813749][T15662] syz_tun: left promiscuous mode [ 854.883840][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.929971][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.968426][ T9] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 854.988147][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.082218][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2353'. [ 855.153179][ T9] usb 7-1: config 0 descriptor?? [ 856.774508][ T9] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 856.784427][ T9] hid-thrustmaster 0003:044F:B65D.0024: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 856.805395][ T9] hid-thrustmaster 0003:044F:B65D.0024: Wrong number of endpoints? [ 857.056008][T15683] hub 9-0:1.0: USB hub found [ 857.067646][T15683] hub 9-0:1.0: 1 port detected [ 857.166270][T15683] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2358'. [ 858.010007][T15693] hub 9-0:1.0: USB hub found [ 858.019106][T15693] hub 9-0:1.0: 1 port detected [ 858.268659][T15693] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2359'. [ 858.717825][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 858.779720][T15703] 9pnet_fd: Insufficient options for proto=fd [ 858.786283][ C0] hid-thrustmaster 0003:044F:B65D.0024: URB to get model id failed with error -108 [ 859.270570][T15717] FAULT_INJECTION: forcing a failure. [ 859.270570][T15717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.283984][T15717] CPU: 1 UID: 0 PID: 15717 Comm: syz.0.2363 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 859.294782][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 859.304861][T15717] Call Trace: [ 859.308164][T15717] [ 859.311117][T15717] dump_stack_lvl+0x241/0x360 [ 859.315833][T15717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.321068][T15717] ? __pfx__printk+0x10/0x10 [ 859.325691][T15717] ? snprintf+0xda/0x120 [ 859.329969][T15717] should_fail_ex+0x3b0/0x4e0 [ 859.334669][T15717] _copy_to_user+0x31/0xb0 [ 859.339090][T15717] simple_read_from_buffer+0xca/0x150 [ 859.344468][T15717] proc_fail_nth_read+0x1e9/0x250 [ 859.349547][T15717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.355098][T15717] ? rw_verify_area+0x55e/0x6f0 [ 859.359947][T15717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.365493][T15717] vfs_read+0x1fc/0xb70 [ 859.369656][T15717] ? fdget_pos+0x24e/0x320 [ 859.374080][T15717] ? __pfx_vfs_read+0x10/0x10 [ 859.378763][T15717] ? __fget_files+0x3f3/0x470 [ 859.383451][T15717] ? fdget_pos+0x24e/0x320 [ 859.387877][T15717] ksys_read+0x183/0x2b0 [ 859.392120][T15717] ? __pfx_ksys_read+0x10/0x10 [ 859.396881][T15717] ? do_syscall_64+0x100/0x230 [ 859.401643][T15717] ? do_syscall_64+0xb6/0x230 [ 859.406322][T15717] do_syscall_64+0xf3/0x230 [ 859.410826][T15717] ? clear_bhb_loop+0x35/0x90 [ 859.415506][T15717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.421393][T15717] RIP: 0033:0x7fbd8677d15c [ 859.425803][T15717] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 859.445410][T15717] RSP: 002b:00007fbd874d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 859.453826][T15717] RAX: ffffffffffffffda RBX: 00007fbd86936058 RCX: 00007fbd8677d15c [ 859.461792][T15717] RDX: 000000000000000f RSI: 00007fbd874d80a0 RDI: 0000000000000006 [ 859.469756][T15717] RBP: 00007fbd874d8090 R08: 0000000000000000 R09: 0000000000000000 [ 859.477727][T15717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.485695][T15717] R13: 0000000000000000 R14: 00007fbd86936058 R15: 00007ffe61d5b1b8 [ 859.493676][T15717] [ 860.202546][T15714] block nbd8: shutting down sockets [ 860.375558][ T5842] usb 7-1: USB disconnect, device number 21 [ 860.536801][T15727] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2366'. [ 860.546940][T15727] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 862.400416][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2371'. [ 862.410790][T15738] tmpfs: Bad value for 'size' [ 862.751817][T15751] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.2370'. [ 862.820718][T15751] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.2370'. [ 863.347970][T15757] netlink: 'syz.5.2374': attribute type 10 has an invalid length. [ 864.374708][ T29] audit: type=1800 audit(1730855945.834:148): pid=15761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2375" name="/" dev="9p" ino=2 res=0 errno=0 [ 864.452328][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'. [ 864.789510][T15778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.470478][T15707] Process accounting resumed [ 865.733429][T15782] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2381'. [ 865.781281][T15782] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 866.222266][ T5827] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 866.340958][T15801] netlink: 'syz.6.2388': attribute type 10 has an invalid length. [ 866.391169][T15801] team0: Failed to send options change via netlink (err -105) [ 866.405746][T15801] team0: Port device netdevsim0 added [ 866.420879][ T5827] usb 4-1: config 5 has an invalid interface number: 178 but max is 1 [ 866.455873][ T5827] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 866.476041][ T5827] usb 4-1: config 5 has an invalid interface descriptor of length 8, skipping [ 866.493719][ T5827] usb 4-1: config 5 has an invalid descriptor of length 124, skipping remainder of the config [ 866.504470][ T5827] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 866.535112][T15803] netlink: 'syz.5.2391': attribute type 7 has an invalid length. [ 866.543226][T15803] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2391'. [ 866.558745][ T5827] usb 4-1: config 5 has no interface number 0 [ 866.568188][ T5827] usb 4-1: config 5 interface 178 altsetting 11 endpoint 0x5 has invalid maxpacket 9224, setting to 1024 [ 866.581188][ T5827] usb 4-1: config 5 interface 178 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 866.753758][ T5827] usb 4-1: config 5 interface 178 has no altsetting 0 [ 866.756448][ T29] audit: type=1326 audit(1730855948.234:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15806 comm="syz.0.2389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd8677e719 code=0x0 [ 866.783860][ T5827] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=49.ce [ 866.793034][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.801233][ T5827] usb 4-1: Product: ℚ㜒씪溙Ც잒簭㮇äžè§‡à¡°ÕƒäŒæ£­å¡‘ᖱꭇ㻑鵇ㅩ棱哗ꑴ崞絉䓴캑é™ä™î«¸ïŒ‰î¨¦ë„±à¬¸êƒží“䜷昕Ԭꌗ嫻ࢼꔣæ†ç¨Šå¼ƒï—‹åŸ·æŠ¯îŸœì¸à¦¯á¡§ë¸µîŠ‡ì…²åŸ³ï°Žå¡‚僉ݦ绹帙骶⮸ᶌ逛矄뺢飀ã¢Ð–é°íŸ¦â«Ÿ [ 866.826206][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.924318][ T5827] usb 4-1: Manufacturer: 촚晇쟳ﭯ⠠櫛ಧã™ë’•æ—¸áŒ‚á¼£îµâŽ§ã­·â¨±ç¬€ç‡‚⮣峣ç‚軸魶ߛè¬á² æ¡‘뿹螘赾쥮楣柌붎猲섀㯣麤嬦䶾뺕ã”ꦆ鎊㰜ᾫ鶋Ⳉ⤂䶊焾䖚냟핡詬禽î¢æŽ­ë¬¸ï€¬è°™ï˜ºî´œá…”팵å§á “ⳉﯷ囻旆죌禃뚤驵ꅩŤ憹éµÙ·È꣎떆嘕ˇ㣂뺛Ꚉ௣ᶱê‚覒눠 [ 867.252380][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 867.380334][ T5827] usb 4-1: SerialNumber: î±èˆî•¦ì¼à¦ƒá–œà¼•ç²ªá‘›ï¢…î«‘æ …ê…ॴ옣å¬å±€å˜„८醄鮡閽ì‚஽박椸쟇í”䬬䨱뛻ï†æˆˆæ¼°èˆ¬æˆâ™²ãŸì °ì°ï…¶âµ¨âµ‡å¹‹äŠì«†â³‚疴ጪ᱀䧜һíŸí–¡ê½Šïº”é雷왤ê£å…Žï¶“ﻰ᪘䔪俢äéˆè¯³î™ˆâžƒä†‘㭜周ì¼é¬¢â©»é  äŠŽ [ 867.407241][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.432245][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 867.471281][ T9] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 867.480842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.507185][ T9] usb 1-1: Product: syz [ 867.540583][ T9] usb 1-1: Manufacturer: syz [ 867.565960][ T9] usb 1-1: SerialNumber: syz [ 867.603504][ T9] usb 1-1: config 0 descriptor?? [ 867.634870][ T9] as10x_usb: device has been detected [ 867.641183][ T9] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 867.682018][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 867.781056][ T5827] usb 4-1: unsupported MDLM descriptors [ 867.850739][ T5827] usb 4-1: USB disconnect, device number 38 [ 868.789658][T15822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.309112][ T9] as10x_usb: error during firmware upload part1 [ 869.315902][ T9] Registered device PCTV Systems picoStick (74e) [ 869.490472][T15829] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2395'. [ 869.515103][T15829] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 869.581727][T15832] netlink: 'syz.5.2397': attribute type 3 has an invalid length. [ 869.598193][T15832] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2397'. [ 869.657923][ T5827] usb 1-1: USB disconnect, device number 58 [ 869.740302][ T5827] Unregistered device PCTV Systems picoStick (74e) [ 869.743279][ T5827] as10x_usb: device has been disconnected [ 870.094095][T15846] could not allocate digest TFM handle cbcmac-aes-ce [ 870.130459][ T5829] block nbd6: Receive control failed (result -32) [ 870.138806][T15849] block nbd6: shutting down sockets [ 870.275372][ T5829] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 870.621111][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 870.754477][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.760818][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.841201][T15861] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2405'. [ 870.862402][T15861] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 871.789331][ T29] audit: type=1326 audit(1730855953.214:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 871.820179][ T29] audit: type=1326 audit(1730855953.214:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 871.852662][ T29] audit: type=1326 audit(1730855953.214:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 871.897735][ T29] audit: type=1326 audit(1730855953.214:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 872.162803][ T29] audit: type=1326 audit(1730855953.214:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 872.262273][ T5874] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 872.486132][ T29] audit: type=1326 audit(1730855953.214:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 872.514518][ T29] audit: type=1326 audit(1730855953.214:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 872.536608][ T29] audit: type=1326 audit(1730855953.224:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x7ffc0000 [ 872.558458][ T29] audit: type=1326 audit(1730855953.224:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb03ef7d0b0 code=0x7ffc0000 [ 872.580308][ T29] audit: type=1326 audit(1730855953.224:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15867 comm="syz.3.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb03ef7e31b code=0x7ffc0000 [ 872.629759][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short [ 872.639720][ T5874] usb 1-1: config 8 has an invalid interface number: 2 but max is 0 [ 872.650772][ T5874] usb 1-1: config 8 has no interface number 0 [ 872.674251][ T5874] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 872.684861][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 872.702178][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.730830][ T5874] usb 1-1: Product: syz [ 872.739555][ T5874] usb 1-1: Manufacturer: syz [ 872.764734][ T5874] usb 1-1: SerialNumber: syz [ 872.794888][ T5827] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 872.819211][T15880] could not allocate digest TFM handle cbcmac-aes-ce [ 873.683151][ T5829] block nbd6: Receive control failed (result -32) [ 873.700560][T15880] block nbd6: shutting down sockets [ 873.729820][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.740210][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.750635][ T5827] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 873.775340][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 873.783891][ T5827] usb 4-1: SerialNumber: syz [ 873.962271][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 874.010439][ T5827] usb 4-1: 0:2 : does not exist [ 874.024393][ T5827] usb 4-1: unit 5: unexpected type 0x0b [ 874.038855][ T5827] usb 4-1: USB disconnect, device number 39 [ 874.126798][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 874.139303][ T9] usb 6-1: config 8 has an invalid interface number: 2 but max is 0 [ 874.147897][ T9] usb 6-1: config 8 has no interface number 0 [ 874.156454][ T9] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 874.165834][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.174350][ T9] usb 6-1: Product: syz [ 874.178673][ T9] usb 6-1: Manufacturer: syz [ 874.183927][ T9] usb 6-1: SerialNumber: syz [ 874.223435][ T9860] udevd[9860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.719928][ T5874] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 874.727908][ T5874] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input77 [ 874.743534][ T5874] usb 1-1: USB disconnect, device number 59 [ 875.360980][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2418'. [ 875.715846][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 875.724114][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input79 [ 875.746993][ T9] usb 6-1: USB disconnect, device number 28 [ 876.363948][T15921] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2420'. [ 876.373492][T15921] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 877.707604][T15937] hub 9-0:1.0: USB hub found [ 877.720755][T15937] hub 9-0:1.0: 1 port detected [ 878.003439][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2421'. [ 878.550982][T15942] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 878.576800][T15942] netlink: 'syz.3.2425': attribute type 4 has an invalid length. [ 878.597273][T15942] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2425'. [ 878.620464][T15942] NCSI netlink: No device for ifindex 458760 [ 880.133459][T15961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.448028][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2430'. [ 880.494470][T15965] tmpfs: Bad value for 'size' [ 880.963401][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2433'. [ 881.952227][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 881.983113][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 882.002970][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 882.618663][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 882.633534][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 882.641045][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 883.197937][T15995] hub 9-0:1.0: USB hub found [ 883.207952][T15995] hub 9-0:1.0: 1 port detected [ 883.507105][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 883.801406][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 883.840318][ T9] usb 6-1: config 8 has an invalid interface number: 2 but max is 0 [ 883.910277][ T9] usb 6-1: config 8 has no interface number 0 [ 884.022489][ T9] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 884.145012][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.173912][ T9] usb 6-1: Product: syz [ 884.184040][ T9] usb 6-1: Manufacturer: syz [ 884.225215][ T9] usb 6-1: SerialNumber: syz [ 884.441286][T15981] chnl_net:caif_netlink_parms(): no params data found [ 884.455939][T16001] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 884.462591][T16001] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 884.470373][T16001] vhci_hcd vhci_hcd.0: Device attached [ 884.477574][T16007] vhci_hcd: connection closed [ 884.479283][ T12] vhci_hcd: stop threads [ 884.533543][ T12] vhci_hcd: release socket [ 884.541309][ T12] vhci_hcd: disconnect device [ 884.625048][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.637395][T15981] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.654615][T15981] bridge_slave_0: entered allmulticast mode [ 884.662651][T15981] bridge_slave_0: entered promiscuous mode [ 884.671284][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.678814][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.692322][T15981] bridge_slave_1: entered allmulticast mode [ 884.705484][T15981] bridge_slave_1: entered promiscuous mode [ 884.738370][T15981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.750751][T15981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.760333][ T5837] Bluetooth: hci5: command tx timeout [ 884.834887][T15981] team0: Port device team_slave_0 added [ 884.845168][T15981] team0: Port device team_slave_1 added [ 884.888030][T15981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.895218][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.925937][T15981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.939823][T15981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.950604][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.983978][T15981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.160554][T15981] hsr_slave_0: entered promiscuous mode [ 885.178663][T15981] hsr_slave_1: entered promiscuous mode [ 885.185711][T15981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.194756][T15981] Cannot create hsr debugfs directory [ 885.469667][T16016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.391461][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 886.399663][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 886.412921][ T9] usb 6-1: USB disconnect, device number 29 [ 886.841893][ T5837] Bluetooth: hci5: command tx timeout [ 887.008759][T15981] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 887.141837][T15981] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 887.153578][T15981] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 887.172858][T15981] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 888.389975][T15981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.571892][T16042] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 888.578526][T16042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 888.586353][T16042] vhci_hcd vhci_hcd.0: Device attached [ 888.597247][T16044] vhci_hcd: connection closed [ 888.597723][T15977] vhci_hcd: stop threads [ 888.612775][ T46] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 888.630771][T15977] vhci_hcd: release socket [ 888.640048][T15977] vhci_hcd: disconnect device [ 888.674979][T15981] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.721814][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.729056][T15977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.819289][T15981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 888.823145][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 888.830055][T15981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.851794][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.858939][ T9978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.972230][ T5837] Bluetooth: hci5: command tx timeout [ 889.042544][ T46] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 889.050891][ T46] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.061954][ T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.073091][ T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.088676][ T46] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.102975][ T46] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 889.113327][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.930113][T16040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.286617][T15981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.803711][T15981] veth0_vlan: entered promiscuous mode [ 890.820436][T15981] veth1_vlan: entered promiscuous mode [ 890.860497][T15981] veth0_macvtap: entered promiscuous mode [ 890.871799][T15981] veth1_macvtap: entered promiscuous mode [ 890.889697][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.900792][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.919124][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.929758][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.940275][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.951115][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.961349][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.972576][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.991111][T15981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.998452][ T5837] Bluetooth: hci5: command tx timeout [ 891.023994][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.034763][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.046033][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.052376][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 891.057265][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.077582][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.088336][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.098591][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.109339][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.128684][T15981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.150254][T15981] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.159404][T15981] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.220499][ T9] usb 7-1: device descriptor read/64, error -71 [ 891.221918][T15981] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.290707][T15981] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.303130][ T5905] usb 6-1: USB disconnect, device number 30 [ 891.445326][T15977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.445468][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 891.445483][ T29] audit: type=1326 audit(1730855972.924:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16076 comm="syz.3.2456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x0 [ 891.464880][T15977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.492541][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 891.577817][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.500324][T16085] hub 9-0:1.0: USB hub found [ 892.517123][T16085] hub 9-0:1.0: 1 port detected [ 892.537156][ T9] usb 7-1: device descriptor read/64, error -71 [ 892.552833][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.684223][ T9] usb usb7-port1: attempt power cycle [ 893.678934][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 894.622248][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 894.787524][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 894.985587][ T25] usb 10-1: config 8 has an invalid interface number: 2 but max is 0 [ 895.142256][ T25] usb 10-1: config 8 has no interface number 0 [ 895.154756][ T25] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 895.166345][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.202805][ T9] usb 7-1: device descriptor read/8, error -71 [ 895.220979][ T25] usb 10-1: Product: syz [ 895.225765][ T25] usb 10-1: Manufacturer: syz [ 895.230665][ T25] usb 10-1: SerialNumber: syz [ 895.495402][T16107] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 895.502047][T16107] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 895.512392][T16107] vhci_hcd vhci_hcd.0: Device attached [ 895.519220][T16109] vhci_hcd: connection closed [ 895.522630][T14968] vhci_hcd: stop threads [ 895.541571][T14968] vhci_hcd: release socket [ 895.549468][T14968] vhci_hcd: disconnect device [ 895.939960][ T29] audit: type=1326 audit(1730855977.414:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16116 comm="syz.0.2464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd8677e719 code=0x0 [ 896.356349][T16110] Process accounting paused [ 896.398990][T16131] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2465'. [ 896.411183][T16131] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 896.454803][T16133] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.462454][T16126] could not allocate digest TFM handle cbcmac-aes-ce [ 896.463045][T16133] bridge0: entered allmulticast mode [ 896.504239][T16133] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.511332][T16133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.560879][ T25] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 896.578827][T16133] bridge0: entered promiscuous mode [ 896.580494][ T25] input: xirlink-cit as /devices/platform/dummy_hcd.9/usb10/10-1/input/input81 [ 896.632284][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 896.643275][ T25] usb 10-1: USB disconnect, device number 2 [ 896.690428][ T9] usb 7-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 896.708847][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.772654][ T9] usb 7-1: Product: syz [ 896.776833][ T9] usb 7-1: Manufacturer: syz [ 896.812826][ T9] usb 7-1: SerialNumber: syz [ 896.825624][ T9] usb 7-1: config 0 descriptor?? [ 897.748508][ T5842] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 897.757410][ T9] kaweth 7-1:0.0: Firmware present in device. [ 897.767900][ T9] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 897.776957][ T9] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 897.787870][ T9] usb 7-1: USB disconnect, device number 25 [ 897.934305][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 897.964307][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 897.980665][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 898.013426][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 898.178111][T16146] netdevsim netdevsim9: Direct firmware load for WÙ«Zê¤Û failed with error -2 [ 898.912000][T16146] netdevsim netdevsim9: Falling back to sysfs fallback for: WÙ«Zê¤Û [ 899.240304][ T5842] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 899.290770][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.397072][ T5842] usb 4-1: Product: syz [ 899.401289][ T5842] usb 4-1: Manufacturer: syz [ 899.412101][ T5842] usb 4-1: SerialNumber: syz [ 899.429824][ T5842] usb 4-1: config 0 descriptor?? [ 899.716204][ T5842] usb 4-1: can't set config #0, error -71 [ 899.733750][ T5842] usb 4-1: USB disconnect, device number 40 [ 899.741503][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2471'. [ 899.942208][T16162] tmpfs: Bad value for 'size' [ 900.001753][T16157] tmpfs: Bad value for 'size' [ 900.065186][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 900.151818][T16167] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 900.158472][T16167] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 900.166538][T16167] vhci_hcd vhci_hcd.0: Device attached [ 900.174173][T16169] vhci_hcd: connection closed [ 900.174411][ T12] vhci_hcd: stop threads [ 900.219112][ T12] vhci_hcd: release socket [ 900.227278][T16144] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2470'. [ 900.266947][ T29] audit: type=1326 audit(1730855981.734:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16164 comm="syz.9.2475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b51b7e719 code=0x0 [ 900.291054][ T12] vhci_hcd: disconnect device [ 900.352426][ T5877] vhci_hcd: vhci_device speed not set [ 900.520818][T16183] IPVS: Unknown mcast interface: hsr0 [ 900.855888][T16197] hub 9-0:1.0: USB hub found [ 900.861479][T16197] hub 9-0:1.0: 1 port detected [ 901.558200][T16184] 9pnet_fd: Insufficient options for proto=fd [ 902.363048][ T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 902.919786][T16221] bridge_slave_1: entered promiscuous mode [ 902.932000][T16221] team0: Device bridge_slave_1 is up. Set it down before adding it as a team port [ 902.952360][T16221] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 903.159814][ T8] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 903.169096][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.177223][ T8] usb 4-1: Product: syz [ 903.181927][ T8] usb 4-1: Manufacturer: syz [ 903.187076][ T8] usb 4-1: SerialNumber: syz [ 903.194120][ T8] usb 4-1: config 0 descriptor?? [ 903.425957][ T8] kaweth 4-1:0.0: Firmware present in device. [ 903.433634][ T8] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 903.443512][ T8] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 903.456652][ T8] usb 4-1: USB disconnect, device number 41 [ 903.524775][ T29] audit: type=1326 audit(1730855985.004:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16225 comm="syz.0.2489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd8677e719 code=0x0 [ 903.690556][T16233] random: crng reseeded on system resumption [ 903.987821][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2491'. [ 904.036166][T16237] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 904.042816][T16237] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 904.051785][T16237] vhci_hcd vhci_hcd.0: Device attached [ 904.058812][T16239] vhci_hcd: connection closed [ 904.061436][T14968] vhci_hcd: stop threads [ 904.112171][T14968] vhci_hcd: release socket [ 904.116780][T14968] vhci_hcd: disconnect device [ 904.292837][T16244] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2494'. [ 904.672368][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 904.905916][T16254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.822231][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 906.409728][T16258] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.2498'. [ 906.463453][T16258] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.2498'. [ 907.152002][ T8] usb 10-1: config index 0 descriptor too short (expected 65535, got 9) [ 907.160606][ T8] usb 10-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 907.175815][ T8] usb 10-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 907.196030][ T8] usb 10-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 907.205330][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.213577][ T8] usb 10-1: Product: syz [ 907.217844][ T8] usb 10-1: Manufacturer: syz [ 907.224502][ T8] usb 10-1: SerialNumber: syz [ 907.404734][ T8] usb 10-1: USB disconnect, device number 3 [ 907.516453][T16280] hub 9-0:1.0: USB hub found [ 907.523454][T16280] hub 9-0:1.0: 1 port detected [ 908.065065][ T29] audit: type=1326 audit(1730855988.894:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16269 comm="syz.5.2501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dcf97e719 code=0x0 [ 908.735918][T16293] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 908.742581][T16293] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 908.750741][T16293] vhci_hcd vhci_hcd.0: Device attached [ 908.952916][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 909.042357][ T5877] vhci_hcd: vhci_device speed not set [ 909.172315][T16294] vhci_hcd: connection closed [ 909.232107][T14968] vhci_hcd: stop threads [ 909.283606][ T5877] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 909.472349][T14968] vhci_hcd: release socket [ 909.546934][T14968] vhci_hcd: disconnect device [ 909.598439][ T8] usb 10-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 909.609003][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.624823][ T8] usb 10-1: Product: syz [ 909.634810][ T8] usb 10-1: Manufacturer: syz [ 909.651800][ T8] usb 10-1: SerialNumber: syz [ 909.689320][ T8] usb 10-1: config 0 descriptor?? [ 909.886273][T16303] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2510'. [ 909.898144][T16303] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 909.961604][ T8] kaweth 10-1:0.0: Firmware present in device. [ 910.005613][ T8] kaweth 10-1:0.0: Error reading configuration (-71), no net device created [ 910.030297][ T8] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 910.085855][ T8] usb 10-1: USB disconnect, device number 4 [ 910.739861][T16309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.816668][T16313] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2513'. [ 910.831008][T16313] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 912.035207][ T29] audit: type=1326 audit(1730855993.514:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16326 comm="syz.9.2517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b51b7e719 code=0x0 [ 912.623268][T16325] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2516'. [ 913.803433][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 914.136894][T16350] FAULT_INJECTION: forcing a failure. [ 914.136894][T16350] name failslab, interval 1, probability 0, space 0, times 0 [ 914.232883][T16350] CPU: 0 UID: 0 PID: 16350 Comm: syz.5.2522 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 914.243708][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 914.253811][T16350] Call Trace: [ 914.257113][T16350] [ 914.260068][T16350] dump_stack_lvl+0x241/0x360 [ 914.264777][T16350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.270003][T16350] ? __pfx__printk+0x10/0x10 [ 914.274637][T16350] ? __kmalloc_noprof+0xb0/0x400 [ 914.279607][T16350] ? __pfx___might_resched+0x10/0x10 [ 914.284924][T16350] should_fail_ex+0x3b0/0x4e0 [ 914.289632][T16350] ? tcf_idr_create+0x63/0x6c0 [ 914.294417][T16350] should_failslab+0xac/0x100 [ 914.299104][T16350] ? tcf_idr_create+0x63/0x6c0 [ 914.303870][T16350] __kmalloc_noprof+0xd8/0x400 [ 914.308640][T16350] tcf_idr_create+0x63/0x6c0 [ 914.313238][T16350] tcf_idr_create_from_flags+0x63/0x80 [ 914.318702][T16350] tcf_pedit_init+0x369/0x1150 [ 914.323480][T16350] ? __pfx_tcf_pedit_init+0x10/0x10 [ 914.328706][T16350] ? nla_memcpy+0x5d/0xc0 [ 914.333049][T16350] ? __asan_memcpy+0x40/0x70 [ 914.337641][T16350] ? __pfx_tcf_pedit_init+0x10/0x10 [ 914.342839][T16350] tcf_action_init_1+0x5d7/0x890 [ 914.347770][T16350] ? nla_strscpy+0x100/0x180 [ 914.352497][T16350] ? __pfx_tcf_action_init_1+0x10/0x10 [ 914.357972][T16350] ? _raw_read_unlock+0x28/0x50 [ 914.362837][T16350] ? tc_action_load_ops+0x26d/0x590 [ 914.368055][T16350] ? __nla_parse+0x40/0x60 [ 914.372499][T16350] tcf_action_init+0x2e8/0xae0 [ 914.377290][T16350] ? __pfx_tcf_action_init+0x10/0x10 [ 914.382614][T16350] ? cap_capable+0x1b4/0x250 [ 914.387204][T16350] ? cap_capable+0x1b4/0x250 [ 914.391789][T16350] ? safesetid_security_capable+0xb2/0x1d0 [ 914.397608][T16350] tc_ctl_action+0x47d/0xcf0 [ 914.402205][T16350] ? __pfx_tc_ctl_action+0x10/0x10 [ 914.407333][T16350] ? trace_contention_end+0x3c/0x120 [ 914.412620][T16350] ? __mutex_lock+0x2ef/0xd70 [ 914.417392][T16350] ? __pfx___mutex_lock+0x10/0x10 [ 914.422431][T16350] ? __pfx_tc_ctl_action+0x10/0x10 [ 914.427548][T16350] rtnetlink_rcv_msg+0x73f/0xcf0 [ 914.432487][T16350] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 914.437591][T16350] ? __lock_acquire+0x1384/0x2050 [ 914.442630][T16350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 914.448093][T16350] netlink_rcv_skb+0x1e3/0x430 [ 914.452857][T16350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 914.458311][T16350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 914.463614][T16350] ? netlink_deliver_tap+0x2e/0x1b0 [ 914.468813][T16350] netlink_unicast+0x7f6/0x990 [ 914.473581][T16350] ? __pfx_netlink_unicast+0x10/0x10 [ 914.478877][T16350] ? __virt_addr_valid+0x183/0x530 [ 914.484002][T16350] ? __check_object_size+0x48e/0x900 [ 914.489305][T16350] netlink_sendmsg+0x8e4/0xcb0 [ 914.494095][T16350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.499400][T16350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.504703][T16350] __sock_sendmsg+0x221/0x270 [ 914.509380][T16350] ____sys_sendmsg+0x52a/0x7e0 [ 914.514151][T16350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.519448][T16350] __sys_sendmsg+0x292/0x380 [ 914.524044][T16350] ? __pfx___sys_sendmsg+0x10/0x10 [ 914.529163][T16350] ? __pfx_vfs_write+0x10/0x10 [ 914.533946][T16350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 914.540273][T16350] ? do_syscall_64+0x100/0x230 [ 914.545038][T16350] ? do_syscall_64+0xb6/0x230 [ 914.549712][T16350] do_syscall_64+0xf3/0x230 [ 914.554219][T16350] ? clear_bhb_loop+0x35/0x90 [ 914.558893][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.564838][T16350] RIP: 0033:0x7f2dcf97e719 [ 914.569251][T16350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.588855][T16350] RSP: 002b:00007f2dd0755038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.597268][T16350] RAX: ffffffffffffffda RBX: 00007f2dcfb35f80 RCX: 00007f2dcf97e719 [ 914.605237][T16350] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 914.613203][T16350] RBP: 00007f2dd0755090 R08: 0000000000000000 R09: 0000000000000000 [ 914.621169][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.629139][T16350] R13: 0000000000000000 R14: 00007f2dcfb35f80 R15: 00007fff65e09a68 [ 914.637123][T16350] [ 914.702202][ T5877] vhci_hcd: vhci_device speed not set [ 914.746457][T16356] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2523'. [ 914.750800][ T5837] block nbd0: Receive control failed (result -32) [ 914.889506][T16347] could not allocate digest TFM handle cbcmac-aes-ce [ 915.012717][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 915.106777][T16348] block nbd0: shutting down sockets [ 915.219683][ T25] usb 10-1: device descriptor read/64, error -71 [ 915.615703][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 916.269081][ T25] usb 10-1: device descriptor read/64, error -71 [ 916.392544][ T25] usb usb10-port1: attempt power cycle [ 917.102933][ T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 917.297062][ T25] usb 10-1: device descriptor read/8, error -71 [ 917.584627][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'. [ 917.627980][T16372] tmpfs: Bad value for 'size' [ 919.600203][T16397] netlink: 'syz.5.2532': attribute type 10 has an invalid length. [ 920.926057][T16415] netlink: 8280 bytes leftover after parsing attributes in process `syz.9.2535'. [ 920.938492][T16415] netlink: 8280 bytes leftover after parsing attributes in process `syz.9.2535'. [ 921.737488][T16414] could not allocate digest TFM handle cbcmac-aes-ce [ 921.753863][ T5837] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 922.561645][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 922.582897][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 924.552223][T16440] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 924.558882][T16440] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 924.567173][T16440] vhci_hcd vhci_hcd.0: Device attached [ 924.791579][ T46] vhci_hcd: vhci_device speed not set [ 924.952162][T16441] vhci_hcd: connection closed [ 924.972305][ T1136] vhci_hcd: stop threads [ 924.990695][ T1136] vhci_hcd: release socket [ 925.030426][ T1136] vhci_hcd: disconnect device [ 925.199324][ T46] usb 39-1: new full-speed USB device number 9 using vhci_hcd [ 925.207078][ T46] usb 39-1: enqueue for inactive port 0 [ 925.207411][T16447] netlink: 4083 bytes leftover after parsing attributes in process `syz.9.2544'. [ 925.299708][T16449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.182756][T16447] netlink: 'syz.9.2544': attribute type 3 has an invalid length. [ 926.190748][T16447] netlink: 130968 bytes leftover after parsing attributes in process `syz.9.2544'. [ 926.443039][ T46] vhci_hcd: vhci_device speed not set [ 926.843353][T16456] could not allocate digest TFM handle cbcmac-aes-ce [ 926.909202][T16469] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.2548'. [ 926.921203][T16469] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.2548'. [ 927.520967][T16456] Process accounting resumed [ 927.608977][T16471] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2550'. [ 927.719783][T16471] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 927.905253][T16482] vlan2: entered promiscuous mode [ 927.916704][T16482] bond_slave_1: entered promiscuous mode [ 927.925053][T16475] could not allocate digest TFM handle cbcmac-aes-ce [ 928.139501][T16482] bond_slave_1: left promiscuous mode [ 930.937065][T16560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.624071][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2588'. [ 931.892673][T16571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2584'. [ 931.992523][ T29] audit: type=1326 audit(1730856013.441:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.6.2587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6577e719 code=0x0 [ 932.102177][ T46] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 932.196609][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.203104][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.317524][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.585162][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.595599][ T46] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 932.596657][T16591] Cannot find set identified by id 0 to match [ 932.739957][ T5837] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 932.759904][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.777779][ T46] usb 1-1: config 0 descriptor?? [ 934.263725][ T46] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 934.274083][ T46] hid-thrustmaster 0003:044F:B65D.0025: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 934.277875][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.288733][ T46] hid-thrustmaster 0003:044F:B65D.0025: Wrong number of endpoints? [ 934.318088][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.513257][T16615] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2599'. [ 934.628287][T16615] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 937.112964][ C1] hid-thrustmaster 0003:044F:B65D.0025: URB to get model id failed with error -71 [ 937.149008][ T46] usb 1-1: USB disconnect, device number 60 [ 937.618329][ T5837] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 937.680029][ T5837] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 938.048026][ T29] audit: type=1326 audit(1730856019.381:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.6.2602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6577e719 code=0x0 [ 938.147293][T16653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.863203][ T29] audit: type=1326 audit(1730856020.201:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16642 comm="syz.3.2611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x0 [ 939.052180][ T25] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 939.280764][T16649] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2606'. [ 939.342316][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 939.350649][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.925761][ T25] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 939.945733][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.955850][ T25] usb 1-1: Product: syz [ 939.960048][ T25] usb 1-1: Manufacturer: syz [ 939.977391][ T25] usb 1-1: SerialNumber: syz [ 939.989475][ T25] usb 1-1: config 0 descriptor?? [ 940.020991][ T5837] block nbd5: Receive control failed (result -32) [ 940.033411][ T25] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 940.041546][T16670] block nbd5: shutting down sockets [ 940.063629][ T25] usb 1-1: selecting invalid altsetting 1 [ 940.180545][T16662] could not allocate digest TFM handle cbcmac-aes-ce [ 940.361958][T16678] hub 9-0:1.0: USB hub found [ 940.371806][T16678] hub 9-0:1.0: 1 port detected [ 940.599836][ T25] gspca_stk014: init reg: 0x00 [ 940.605162][ T25] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 941.558300][ T5837] block nbd6: Receive control failed (result -32) [ 941.567077][T16692] block nbd6: shutting down sockets [ 941.584002][T16697] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2620'. [ 941.595410][T16697] bridge: RTM_NEWNEIGH with invalid ether address [ 941.602682][T16697] FAULT_INJECTION: forcing a failure. [ 941.602682][T16697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.616516][T16697] CPU: 0 UID: 0 PID: 16697 Comm: syz.3.2620 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 941.627313][T16697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 941.637389][T16697] Call Trace: [ 941.640689][T16697] [ 941.643648][T16697] dump_stack_lvl+0x241/0x360 [ 941.648360][T16697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.653586][T16697] ? __pfx__printk+0x10/0x10 [ 941.658210][T16697] ? __pfx_lock_release+0x10/0x10 [ 941.663271][T16697] should_fail_ex+0x3b0/0x4e0 [ 941.667978][T16697] _copy_from_iter+0x21f/0x1e70 [ 941.672862][T16697] ? __virt_addr_valid+0x183/0x530 [ 941.678001][T16697] ? __pfx_lock_release+0x10/0x10 [ 941.683057][T16697] ? __alloc_skb+0x28f/0x440 [ 941.684607][T16689] could not allocate digest TFM handle cbcmac-aes-ce [ 941.687650][T16697] ? __pfx__copy_from_iter+0x10/0x10 [ 941.687684][T16697] ? __virt_addr_valid+0x183/0x530 [ 941.704733][T16697] ? __virt_addr_valid+0x183/0x530 [ 941.709840][T16697] ? __virt_addr_valid+0x45f/0x530 [ 941.714950][T16697] ? __check_object_size+0x48e/0x900 [ 941.720237][T16697] netlink_sendmsg+0x73d/0xcb0 [ 941.725007][T16697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.730297][T16697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.735579][T16697] __sock_sendmsg+0x221/0x270 [ 941.740260][T16697] ____sys_sendmsg+0x52a/0x7e0 [ 941.745029][T16697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 941.750321][T16697] __sys_sendmmsg+0x3ab/0x730 [ 941.755004][T16697] ? __pfx___sys_sendmmsg+0x10/0x10 [ 941.760209][T16697] ? __pfx_lock_release+0x10/0x10 [ 941.765238][T16697] ? kstrtouint_from_user+0x128/0x190 [ 941.770633][T16697] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 941.776528][T16697] ? ksys_write+0x229/0x2b0 [ 941.781029][T16697] ? __pfx_lock_release+0x10/0x10 [ 941.786055][T16697] ? vfs_write+0x730/0xd30 [ 941.790474][T16697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 941.796111][T16697] ? __fget_files+0x3f3/0x470 [ 941.800794][T16697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 941.806774][T16697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 941.813104][T16697] ? do_syscall_64+0x100/0x230 [ 941.817865][T16697] __x64_sys_sendmmsg+0xa0/0xb0 [ 941.822716][T16697] do_syscall_64+0xf3/0x230 [ 941.827215][T16697] ? clear_bhb_loop+0x35/0x90 [ 941.831887][T16697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.837772][T16697] RIP: 0033:0x7fb03ef7e719 [ 941.842180][T16697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.861786][T16697] RSP: 002b:00007fb03fdc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 941.870206][T16697] RAX: ffffffffffffffda RBX: 00007fb03f135f80 RCX: 00007fb03ef7e719 [ 941.878179][T16697] RDX: 0492492492492627 RSI: 00000000200000c0 RDI: 0000000000000003 [ 941.886144][T16697] RBP: 00007fb03fdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 941.894110][T16697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.902074][T16697] R13: 0000000000000000 R14: 00007fb03f135f80 R15: 00007fff350a4ff8 [ 941.910049][T16697] [ 942.075543][ T5876] usb 1-1: USB disconnect, device number 61 [ 942.965012][T16713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 946.334831][T16719] libceph: resolve 'k' (ret=-3): failed [ 947.482577][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 948.313014][T16726] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 948.319664][T16726] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 948.327498][T16726] vhci_hcd vhci_hcd.0: Device attached [ 948.334591][T16729] vhci_hcd: connection closed [ 948.335003][T14968] vhci_hcd: stop threads [ 948.344399][T14968] vhci_hcd: release socket [ 948.349052][T14968] vhci_hcd: disconnect device [ 949.366848][ T29] audit: type=1326 audit(1730856030.801:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16734 comm="syz.6.2630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6577e719 code=0x0 [ 950.972234][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2636'. [ 951.351640][ T25] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 951.518222][T16769] libceph: resolve 'k' (ret=-3): failed [ 953.240705][ T25] usb 10-1: device descriptor read/all, error -71 [ 953.247649][T16775] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 953.254246][T16775] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 953.261910][T16775] vhci_hcd vhci_hcd.0: Device attached [ 953.267516][T16776] vhci_hcd: connection closed [ 953.300697][ T9978] vhci_hcd: stop threads [ 953.320705][ T9978] vhci_hcd: release socket [ 953.326138][ T9978] vhci_hcd: disconnect device [ 953.562860][T16783] netlink: 'syz.9.2641': attribute type 9 has an invalid length. [ 953.570680][T16783] netlink: 134660 bytes leftover after parsing attributes in process `syz.9.2641'. [ 953.580178][T16783] FAULT_INJECTION: forcing a failure. [ 953.580178][T16783] name failslab, interval 1, probability 0, space 0, times 0 [ 953.592925][T16783] CPU: 1 UID: 0 PID: 16783 Comm: syz.9.2641 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 953.603703][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 953.613766][T16783] Call Trace: [ 953.617059][T16783] [ 953.620000][T16783] dump_stack_lvl+0x241/0x360 [ 953.624711][T16783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.629923][T16783] ? __pfx__printk+0x10/0x10 [ 953.634528][T16783] ? irqentry_exit+0x63/0x90 [ 953.639142][T16783] should_fail_ex+0x3b0/0x4e0 [ 953.643840][T16783] should_failslab+0xac/0x100 [ 953.648531][T16783] ? __alloc_skb+0x1c3/0x440 [ 953.653139][T16783] kmem_cache_alloc_node_noprof+0x71/0x320 [ 953.658962][T16783] ? rcu_is_watching+0x15/0xb0 [ 953.663744][T16783] __alloc_skb+0x1c3/0x440 [ 953.668174][T16783] ? genl_rcv+0x28/0x40 [ 953.672343][T16783] ? netlink_unicast+0x7f6/0x990 [ 953.677296][T16783] ? __pfx___alloc_skb+0x10/0x10 [ 953.682258][T16783] __netdev_alloc_skb+0x104/0xa10 [ 953.687299][T16783] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 953.692872][T16783] ovs_packet_cmd_execute+0x241/0xcc0 [ 953.698262][T16783] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 953.704527][T16783] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 953.710445][T16783] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 953.716795][T16783] genl_rcv_msg+0xb14/0xec0 [ 953.721316][T16783] ? mark_lock+0x9a/0x360 [ 953.725665][T16783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 953.730713][T16783] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 953.736638][T16783] ? __pfx_lock_acquire+0x10/0x10 [ 953.741681][T16783] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 953.747591][T16783] ? __pfx___might_resched+0x10/0x10 [ 953.752908][T16783] netlink_rcv_skb+0x1e3/0x430 [ 953.757691][T16783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 953.762737][T16783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 953.768051][T16783] ? __netlink_deliver_tap+0x77e/0x7c0 [ 953.773527][T16783] ? netlink_deliver_tap+0x5f/0x1b0 [ 953.778746][T16783] genl_rcv+0x28/0x40 [ 953.782742][T16783] netlink_unicast+0x7f6/0x990 [ 953.787528][T16783] ? __pfx_netlink_unicast+0x10/0x10 [ 953.792827][T16783] ? __virt_addr_valid+0x183/0x530 [ 953.797952][T16783] ? __check_object_size+0x48e/0x900 [ 953.803264][T16783] netlink_sendmsg+0x8e4/0xcb0 [ 953.808058][T16783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.813373][T16783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.818667][T16783] __sock_sendmsg+0x221/0x270 [ 953.823360][T16783] ____sys_sendmsg+0x52a/0x7e0 [ 953.828148][T16783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.833454][T16783] ? __sys_sendmsg+0x279/0x380 [ 953.838236][T16783] __sys_sendmsg+0x292/0x380 [ 953.842844][T16783] ? __pfx___sys_sendmsg+0x10/0x10 [ 953.848011][T16783] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 953.854376][T16783] do_syscall_64+0xf3/0x230 [ 953.858880][T16783] ? clear_bhb_loop+0x35/0x90 [ 953.863556][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.869444][T16783] RIP: 0033:0x7f1b51b7e719 [ 953.873855][T16783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.893453][T16783] RSP: 002b:00007f1b529e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.901865][T16783] RAX: ffffffffffffffda RBX: 00007f1b51d36130 RCX: 00007f1b51b7e719 [ 953.909834][T16783] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 953.917800][T16783] RBP: 00007f1b529e0090 R08: 0000000000000000 R09: 0000000000000000 [ 953.925765][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.933729][T16783] R13: 0000000000000000 R14: 00007f1b51d36130 R15: 00007ffd2a5dcfd8 [ 953.941707][T16783] [ 954.088638][T16787] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2640'. [ 954.100472][T16787] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 955.936765][T16801] hub 9-0:1.0: USB hub found [ 956.098024][T16801] hub 9-0:1.0: 1 port detected [ 956.643113][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2649'. [ 957.737971][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2651'. [ 958.132856][ T29] audit: type=1326 audit(1730856039.611:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16807 comm="syz.0.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd8677e719 code=0x0 [ 959.078770][T16841] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 959.085427][T16841] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 959.093362][T16841] vhci_hcd vhci_hcd.0: Device attached [ 959.296527][ T5842] vhci_hcd: vhci_device speed not set [ 959.571311][T16842] vhci_hcd: connection closed [ 959.582187][ T6012] vhci_hcd: stop threads [ 959.612182][ T6012] vhci_hcd: release socket [ 959.629544][ T6012] vhci_hcd: disconnect device [ 959.672387][ T5842] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 959.714031][ T5842] usb 43-1: enqueue for inactive port 0 [ 959.912537][ T5842] vhci_hcd: vhci_device speed not set [ 959.982439][T16844] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2656'. [ 960.292961][ T5877] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 960.526508][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 961.603757][ T5877] usb 4-1: config 8 has an invalid interface number: 2 but max is 0 [ 961.624485][ T5877] usb 4-1: config 8 has no interface number 0 [ 962.272278][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2663'. [ 962.874718][ T29] audit: type=1326 audit(1730856044.271:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16870 comm="syz.6.2664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6577e719 code=0x0 [ 963.584778][T16888] hub 9-0:1.0: USB hub found [ 963.603338][T16888] hub 9-0:1.0: 1 port detected [ 963.872089][T16840] Process accounting paused [ 963.912835][ T5877] usb 4-1: string descriptor 0 read error: -71 [ 963.919141][ T5877] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 963.932743][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.962699][ T5877] usb 4-1: can't set config #8, error -71 [ 964.102567][ T5877] usb 4-1: USB disconnect, device number 43 [ 964.772209][ T5842] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 965.780657][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 965.901566][ T5842] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 965.922095][ T5842] usb 1-1: config 0 has no interface number 0 [ 965.928532][ T5842] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 965.953956][ T5842] usb 1-1: config 0 interface 211 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 965.998563][ T5842] usb 1-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice=15.ab [ 966.007843][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.032093][ T5842] usb 1-1: Product: syz [ 966.036307][ T5842] usb 1-1: Manufacturer: syz [ 966.051602][ T5842] usb 1-1: SerialNumber: syz [ 966.086271][ T5842] usb 1-1: config 0 descriptor?? [ 966.119837][ T5842] iowarrior 1-1:0.211: no interrupt-in endpoint found [ 966.219962][ T5842] usb 1-1: USB disconnect, device number 62 [ 968.026198][T16948] netlink: 'syz.9.2683': attribute type 1 has an invalid length. [ 968.269309][T16955] syz_tun: entered promiscuous mode [ 968.488727][T16963] hub 9-0:1.0: USB hub found [ 968.494986][T16963] hub 9-0:1.0: 1 port detected [ 969.441029][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2687'. [ 969.942839][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 970.631449][T16979] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2690'. [ 970.641970][T16979] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 970.675764][T16980] bridge0: port 3(vlan2) entered blocking state [ 970.682247][T16980] bridge0: port 3(vlan2) entered disabled state [ 970.688911][T16980] vlan2: entered allmulticast mode [ 970.701117][T16980] erspan0: entered allmulticast mode [ 971.010190][T16987] hub 9-0:1.0: USB hub found [ 971.020938][T16987] hub 9-0:1.0: 1 port detected [ 971.212739][T16980] vlan2: entered promiscuous mode [ 971.217861][T16980] erspan0: entered promiscuous mode [ 971.255605][T16980] bridge0: port 3(vlan2) entered blocking state [ 971.261973][T16980] bridge0: port 3(vlan2) entered forwarding state [ 971.363393][ T46] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 971.652166][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 972.275143][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 972.287473][ T46] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 972.297049][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.320803][ T46] usb 1-1: Product: syz [ 972.325387][ T46] usb 1-1: Manufacturer: syz [ 972.330007][ T46] usb 1-1: SerialNumber: syz [ 972.375792][ T46] usb 1-1: config 0 descriptor?? [ 972.381421][T16983] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 972.593759][ T46] hub 1-1:0.0: bad descriptor, ignoring hub [ 972.600375][ T46] hub 1-1:0.0: probe with driver hub failed with error -5 [ 972.610383][ T46] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input84 [ 973.723291][ T46] usb 1-1: USB disconnect, device number 63 [ 973.723353][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 973.988114][T17010] syz_tun: entered promiscuous mode [ 974.347885][T17019] hub 9-0:1.0: USB hub found [ 974.358056][T17019] hub 9-0:1.0: 1 port detected [ 974.674228][ T25] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 974.853493][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 974.863581][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 974.871451][ T9] usb 6-1: can't read configurations, error -71 [ 974.973970][ T25] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 974.982646][ T25] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 974.995759][ T25] usb 10-1: config 0 has no interface number 0 [ 975.014768][ T25] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.026787][ T25] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 975.179013][ T25] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 975.190842][ T25] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 975.200346][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.214235][ T25] usb 10-1: config 0 descriptor?? [ 975.220763][T17012] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 975.995758][T17031] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2703'. [ 976.005536][T17031] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 976.314615][ T25] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input85 [ 977.114512][T17039] libceph: resolve 'k' (ret=-3): failed [ 977.188761][T17044] FAULT_INJECTION: forcing a failure. [ 977.188761][T17044] name failslab, interval 1, probability 0, space 0, times 0 [ 977.213983][T17044] CPU: 0 UID: 0 PID: 17044 Comm: syz.5.2707 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 977.224791][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 977.234870][T17044] Call Trace: [ 977.238174][T17044] [ 977.241123][T17044] dump_stack_lvl+0x241/0x360 [ 977.245834][T17044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.251063][T17044] ? __pfx__printk+0x10/0x10 [ 977.255687][T17044] ? fs_reclaim_acquire+0x93/0x130 [ 977.260826][T17044] ? __pfx___might_resched+0x10/0x10 [ 977.266148][T17044] should_fail_ex+0x3b0/0x4e0 [ 977.270850][T17044] ? tomoyo_encode+0x26f/0x540 [ 977.275644][T17044] should_failslab+0xac/0x100 [ 977.280355][T17044] ? tomoyo_encode+0x26f/0x540 [ 977.285157][T17044] __kmalloc_noprof+0xd8/0x400 [ 977.289949][T17044] tomoyo_encode+0x26f/0x540 [ 977.294577][T17044] tomoyo_mount_permission+0x356/0xb80 [ 977.300076][T17044] ? stack_depot_save_flags+0x29/0x830 [ 977.305557][T17044] ? tomoyo_mount_permission+0x295/0xb80 [ 977.311220][T17044] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 977.317272][T17044] ? hook_sb_mount+0x122/0x390 [ 977.322056][T17044] ? security_sb_mount+0x22/0x2f0 [ 977.327230][T17044] security_sb_mount+0xe0/0x2f0 [ 977.332115][T17044] path_mount+0xb9/0xfa0 [ 977.336387][T17044] ? kmem_cache_free+0x1a2/0x420 [ 977.341350][T17044] ? user_path_at+0x44/0x60 [ 977.345890][T17044] __se_sys_mount+0x2d6/0x3c0 [ 977.350601][T17044] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 977.356617][T17044] ? __pfx___se_sys_mount+0x10/0x10 [ 977.361852][T17044] ? do_syscall_64+0x100/0x230 [ 977.366652][T17044] ? __x64_sys_mount+0x20/0xc0 [ 977.371454][T17044] do_syscall_64+0xf3/0x230 [ 977.375987][T17044] ? clear_bhb_loop+0x35/0x90 [ 977.380698][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.386617][T17044] RIP: 0033:0x7f2dcf97e719 [ 977.391061][T17044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.410694][T17044] RSP: 002b:00007f2dd0755038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 977.419148][T17044] RAX: ffffffffffffffda RBX: 00007f2dcfb35f80 RCX: 00007f2dcf97e719 [ 977.427149][T17044] RDX: 0000000020000000 RSI: 0000000020000240 RDI: 0000000020000080 [ 977.435148][T17044] RBP: 00007f2dd0755090 R08: 0000000000000000 R09: 0000000000000000 [ 977.443151][T17044] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 977.451146][T17044] R13: 0000000000000000 R14: 00007f2dcfb35f80 R15: 00007fff65e09a68 [ 977.459158][T17044] [ 977.622287][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 977.624896][ C1] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 977.639830][ T5877] usb 10-1: USB disconnect, device number 11 [ 977.744342][T17052] syz_tun: entered promiscuous mode [ 977.759813][T17053] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2709'. [ 977.774695][T17053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2709'. [ 977.792359][T17053] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2709'. [ 977.792644][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 977.815981][ T9] usb 7-1: config 0 has no interfaces? [ 977.824484][ T9] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 977.838451][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.847676][ T9] usb 7-1: Product: syz [ 977.851950][ T9] usb 7-1: Manufacturer: syz [ 977.857246][ T9] usb 7-1: SerialNumber: syz [ 977.883375][ T9] usb 7-1: config 0 descriptor?? [ 978.129547][ T46] usb 7-1: USB disconnect, device number 26 [ 978.236254][T17061] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2714'. [ 978.265485][T17061] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 978.419567][T17063] could not allocate digest TFM handle cbcmac-aes-ce [ 979.568600][T17081] libceph: resolve 'k' (ret=-3): failed [ 979.654630][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 979.804777][T17083] netlink: 'syz.5.2719': attribute type 10 has an invalid length. [ 979.885443][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2722'. [ 979.983239][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 980.134248][T17094] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.2720'. [ 980.203626][T17094] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.2720'. [ 980.667084][ T9] usb 4-1: config 8 has an invalid interface number: 2 but max is 0 [ 980.675392][ T9] usb 4-1: config 8 has no interface number 0 [ 980.744180][ T9] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 980.753616][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.979848][ T9] usb 4-1: Product: syz [ 981.002108][ T9] usb 4-1: Manufacturer: syz [ 981.010198][ T9] usb 4-1: SerialNumber: syz [ 982.030826][T17108] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2726'. [ 984.016223][T17112] netlink: 'syz.0.2728': attribute type 29 has an invalid length. [ 984.026413][T17112] FAULT_INJECTION: forcing a failure. [ 984.026413][T17112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.910058][T17112] CPU: 0 UID: 0 PID: 17112 Comm: syz.0.2728 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 984.920876][T17112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 984.930949][T17112] Call Trace: [ 984.934254][T17112] [ 984.937203][T17112] dump_stack_lvl+0x241/0x360 [ 984.941914][T17112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.947124][T17112] ? __pfx__printk+0x10/0x10 [ 984.951731][T17112] ? __pfx_lock_release+0x10/0x10 [ 984.956782][T17112] should_fail_ex+0x3b0/0x4e0 [ 984.961488][T17112] _copy_to_iter+0x4ae/0x1e70 [ 984.966196][T17112] ? __virt_addr_valid+0x183/0x530 [ 984.971338][T17112] ? __pfx__copy_to_iter+0x10/0x10 [ 984.976469][T17112] ? kasan_save_track+0x51/0x80 [ 984.981345][T17112] ? __virt_addr_valid+0x183/0x530 [ 984.986488][T17112] ? __virt_addr_valid+0x183/0x530 [ 984.991618][T17112] ? __virt_addr_valid+0x45f/0x530 [ 984.996744][T17112] ? __phys_addr_symbol+0x2f/0x70 [ 985.001780][T17112] ? __check_object_size+0x48e/0x900 [ 985.007087][T17112] __skb_datagram_iter+0x107/0x900 [ 985.012226][T17112] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 985.017882][T17112] skb_copy_datagram_iter+0xd1/0x250 [ 985.023175][T17112] netlink_recvmsg+0x2d0/0x11d0 [ 985.028031][T17112] ? __pfx_netlink_recvmsg+0x10/0x10 [ 985.033310][T17112] ? iovec_from_user+0x87/0x240 [ 985.038154][T17112] ? iovec_from_user+0x87/0x240 [ 985.042996][T17112] ? rcu_is_watching+0x15/0xb0 [ 985.047753][T17112] ? iovec_from_user+0x87/0x240 [ 985.052597][T17112] ? iovec_from_user+0x87/0x240 [ 985.057440][T17112] ? trace_kmalloc+0x1f/0xd0 [ 985.062022][T17112] ? __kmalloc_noprof+0x21a/0x400 [ 985.067054][T17112] ? iovec_from_user+0x1b4/0x240 [ 985.071998][T17112] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 985.077297][T17112] ? __pfx_netlink_recvmsg+0x10/0x10 [ 985.082591][T17112] sock_recvmsg+0x22f/0x280 [ 985.087106][T17112] ____sys_recvmsg+0x1c6/0x480 [ 985.091881][T17112] ? __pfx_____sys_recvmsg+0x10/0x10 [ 985.097182][T17112] __sys_recvmsg+0x2e6/0x3d0 [ 985.101774][T17112] ? __pfx___sys_recvmsg+0x10/0x10 [ 985.106881][T17112] ? __mutex_unlock_slowpath+0x21d/0x750 [ 985.112539][T17112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 985.118867][T17112] ? do_syscall_64+0x100/0x230 [ 985.123717][T17112] ? do_syscall_64+0xb6/0x230 [ 985.128394][T17112] do_syscall_64+0xf3/0x230 [ 985.132894][T17112] ? clear_bhb_loop+0x35/0x90 [ 985.137568][T17112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.143455][T17112] RIP: 0033:0x7fbd8677e719 [ 985.147875][T17112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.167478][T17112] RSP: 002b:00007fbd874f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 985.175907][T17112] RAX: ffffffffffffffda RBX: 00007fbd86935f80 RCX: 00007fbd8677e719 [ 985.183884][T17112] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 985.191858][T17112] RBP: 00007fbd874f9090 R08: 0000000000000000 R09: 0000000000000000 [ 985.199823][T17112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.207787][T17112] R13: 0000000000000000 R14: 00007fbd86935f80 R15: 00007ffe61d5b1b8 [ 985.215766][T17112] [ 985.408951][T17112] netlink: 'syz.0.2728': attribute type 29 has an invalid length. [ 985.815694][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 985.830409][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input86 [ 985.869918][ T9] usb 4-1: USB disconnect, device number 44 [ 986.006397][T17123] libceph: resolve 'k' (ret=-3): failed [ 986.147787][T17127] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2730'. [ 986.167696][T17127] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 986.922408][T17139] netlink: 'syz.9.2735': attribute type 10 has an invalid length. [ 987.022991][T17139] team0: Failed to send options change via netlink (err -105) [ 987.065293][T17139] team0: Port device netdevsim0 added [ 987.086540][ T594] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 987.102935][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 987.366935][T17149] hub 9-0:1.0: USB hub found [ 987.377189][T17149] hub 9-0:1.0: 1 port detected [ 988.491312][T17163] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 988.497969][T17163] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 988.506164][T17163] vhci_hcd vhci_hcd.0: Device attached [ 988.712419][ T46] vhci_hcd: vhci_device speed not set [ 988.781172][ T46] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 988.892925][T17120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 988.901732][T17120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 989.030077][T17169] libceph: resolve 'k' (ret=-3): failed [ 989.037988][T17164] vhci_hcd: connection reset by peer [ 989.043470][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 989.052794][ T35] vhci_hcd: stop threads [ 989.057090][ T35] vhci_hcd: release socket [ 989.065242][T17120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 989.078518][T17162] netlink: 'syz.6.2743': attribute type 29 has an invalid length. [ 989.087034][ T35] vhci_hcd: disconnect device [ 989.092838][T17120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 989.109937][T17162] netlink: 'syz.6.2743': attribute type 29 has an invalid length. [ 989.120473][T17120] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 989.134956][T17120] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 989.163817][T17120] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 989.177593][T17120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 989.213023][T17120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 989.392701][T17173] FAULT_INJECTION: forcing a failure. [ 989.392701][T17173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.405981][T17173] CPU: 0 UID: 0 PID: 17173 Comm: syz.3.2745 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 989.416765][T17173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 989.426824][T17173] Call Trace: [ 989.430101][T17173] [ 989.433052][T17173] dump_stack_lvl+0x241/0x360 [ 989.437740][T17173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.442937][T17173] ? __pfx__printk+0x10/0x10 [ 989.447526][T17173] ? arch_stack_walk+0xfd/0x150 [ 989.452374][T17173] ? __pfx_lock_release+0x10/0x10 [ 989.457403][T17173] should_fail_ex+0x3b0/0x4e0 [ 989.462082][T17173] _copy_from_user+0x2f/0xc0 [ 989.466673][T17173] snd_ctl_ioctl+0x35e/0x1890 [ 989.471352][T17173] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 989.476468][T17173] ? kasan_save_track+0x51/0x80 [ 989.481341][T17173] ? kasan_save_track+0x3f/0x80 [ 989.486219][T17173] ? kasan_save_free_info+0x40/0x50 [ 989.491430][T17173] ? __kasan_slab_free+0x59/0x70 [ 989.496386][T17173] ? kfree+0x1a0/0x440 [ 989.500456][T17173] ? tomoyo_path_number_perm+0x68d/0x880 [ 989.506093][T17173] ? security_file_ioctl+0xc6/0x2a0 [ 989.511295][T17173] ? __se_sys_ioctl+0x47/0x170 [ 989.516055][T17173] ? do_syscall_64+0xf3/0x230 [ 989.520739][T17173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.526806][T17173] ? do_vfs_ioctl+0xf08/0x2e40 [ 989.531571][T17173] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 989.536597][T17173] ? mark_lock+0x9a/0x360 [ 989.540944][T17173] ? tomoyo_path_number_perm+0x71a/0x880 [ 989.546585][T17173] ? tomoyo_path_number_perm+0x208/0x880 [ 989.552225][T17173] ? smack_log+0x123/0x540 [ 989.556637][T17173] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 989.562618][T17173] ? __pfx_smack_log+0x10/0x10 [ 989.567381][T17173] ? smk_access+0x4ab/0x4e0 [ 989.571881][T17173] ? smk_tskacc+0x300/0x370 [ 989.576382][T17173] ? smack_file_ioctl+0x2f7/0x3a0 [ 989.581414][T17173] ? __pfx_smack_file_ioctl+0x10/0x10 [ 989.586826][T17173] ? __se_sys_ioctl+0x30/0x170 [ 989.591596][T17173] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 989.596703][T17173] __se_sys_ioctl+0xf9/0x170 [ 989.601559][T17173] do_syscall_64+0xf3/0x230 [ 989.606064][T17173] ? clear_bhb_loop+0x35/0x90 [ 989.610741][T17173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.616650][T17173] RIP: 0033:0x7fb03ef7e719 [ 989.621088][T17173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.640704][T17173] RSP: 002b:00007fb03fda5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.649130][T17173] RAX: ffffffffffffffda RBX: 00007fb03f136058 RCX: 00007fb03ef7e719 [ 989.657099][T17173] RDX: 0000000020001980 RSI: 00000000c1105517 RDI: 0000000000000005 [ 989.665069][T17173] RBP: 00007fb03fda5090 R08: 0000000000000000 R09: 0000000000000000 [ 989.673037][T17173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.681003][T17173] R13: 0000000000000000 R14: 00007fb03f136058 R15: 00007fff350a4ff8 [ 989.688990][T17173] [ 990.131817][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 990.302295][ T5829] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 990.459357][T17177] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2746'. [ 990.489308][T17177] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 990.552530][T17188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 991.073128][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 991.162402][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 991.230386][T17201] hub 9-0:1.0: USB hub found [ 991.235152][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 991.242515][T17201] hub 9-0:1.0: 1 port detected [ 991.832289][ T5829] Bluetooth: hci0: ISO packet for unknown connection handle 201 [ 991.950371][T17216] libceph: resolve 'k' (ret=-3): failed [ 992.192263][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 992.535670][T17223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2759'. [ 992.553322][ T5877] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 993.129943][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 993.144592][ T5877] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 993.164313][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 993.232147][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 993.234613][ T5877] usb 7-1: config 0 has no interface number 0 [ 993.244426][ T5877] usb 7-1: config 0 interface 12 has no altsetting 0 [ 993.366016][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 993.386435][ T5877] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 993.412165][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.755127][T17229] hub 9-0:1.0: USB hub found [ 993.762265][T17229] hub 9-0:1.0: 1 port detected [ 994.060859][ T5877] usb 7-1: Product: syz [ 994.071064][ T5877] usb 7-1: Manufacturer: syz [ 994.075825][ T5877] usb 7-1: SerialNumber: syz [ 994.077018][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.087022][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.123375][ T5877] usb 7-1: config 0 descriptor?? [ 994.352920][T17228] Process accounting resumed [ 994.406795][ T46] vhci_hcd: vhci_device speed not set [ 994.418986][T17233] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2762'. [ 994.431181][T17233] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 994.599258][T17235] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.2760'. [ 994.611960][T17235] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.2760'. [ 995.007923][T17219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.053051][T17219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.648801][T17248] hub 9-0:1.0: USB hub found [ 995.662111][T17248] hub 9-0:1.0: 1 port detected [ 996.303787][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 996.647433][ T5877] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 996.656547][ T5877] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 996.664255][ T5877] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 996.671913][ T5877] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 996.690037][ T5877] usb 7-1: USB disconnect, device number 27 [ 996.716365][T17255] libceph: resolve 'k' (ret=-3): failed [ 997.738054][T17266] netlink: 'syz.6.2770': attribute type 29 has an invalid length. [ 997.994068][T17275] hub 9-0:1.0: USB hub found [ 997.999312][T17275] hub 9-0:1.0: 1 port detected [ 998.532437][ T46] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 998.657867][T17288] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2777'. [ 998.668902][T17288] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 998.677279][ T46] usb 7-1: device descriptor read/64, error -71 [ 998.693260][T17289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.932167][ T46] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 999.062244][ T46] usb 7-1: device descriptor read/64, error -71 [ 999.182739][ T46] usb usb7-port1: attempt power cycle [ 1000.198804][ T46] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1000.233919][ T46] usb 7-1: device descriptor read/8, error -71 [ 1000.607876][T17302] hub 9-0:1.0: USB hub found [ 1000.619336][T17302] hub 9-0:1.0: 1 port detected [ 1000.961966][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2782'. [ 1001.659249][T17322] 9pnet_fd: Insufficient options for proto=fd [ 1001.853199][ T46] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1001.884099][ T46] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1002.097611][ T46] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1002.107807][ T46] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1002.117931][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.129888][T17306] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1002.141059][ T46] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1003.099408][ T29] audit: type=1326 audit(1730856084.571:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17338 comm="syz.3.2790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x0 [ 1004.582293][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2793'. [ 1005.324368][ T5827] usb 7-1: USB disconnect, device number 31 [ 1006.157952][T17337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.349858][T17378] hub 9-0:1.0: USB hub found [ 1007.355111][T17378] hub 9-0:1.0: 1 port detected [ 1007.794788][T17383] FAULT_INJECTION: forcing a failure. [ 1007.794788][T17383] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.807885][T17383] CPU: 0 UID: 0 PID: 17383 Comm: syz.5.2800 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 1007.818675][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1007.828753][T17383] Call Trace: [ 1007.832046][T17383] [ 1007.834989][T17383] dump_stack_lvl+0x241/0x360 [ 1007.839690][T17383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.844904][T17383] ? __pfx__printk+0x10/0x10 [ 1007.849512][T17383] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1007.854997][T17383] ? __pfx___might_resched+0x10/0x10 [ 1007.860305][T17383] should_fail_ex+0x3b0/0x4e0 [ 1007.865009][T17383] should_failslab+0xac/0x100 [ 1007.869709][T17383] ? __netlink_diag_dump+0x173/0x640 [ 1007.875018][T17383] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1007.880328][T17383] __netlink_diag_dump+0x173/0x640 [ 1007.885472][T17383] netlink_diag_dump+0xef/0x1e0 [ 1007.890347][T17383] netlink_dump+0x647/0xd80 [ 1007.894882][T17383] ? __pfx_netlink_dump+0x10/0x10 [ 1007.899951][T17383] __netlink_dump_start+0x5a2/0x790 [ 1007.905179][T17383] netlink_diag_handler_dump+0x1a4/0x240 [ 1007.910849][T17383] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 1007.917030][T17383] ? __pfx_netlink_diag_dump+0x10/0x10 [ 1007.922511][T17383] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 1007.928435][T17383] ? sock_diag_lock_handler+0x19/0x280 [ 1007.933919][T17383] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 1007.940095][T17383] sock_diag_rcv_msg+0x3dc/0x5f0 [ 1007.945067][T17383] netlink_rcv_skb+0x1e3/0x430 [ 1007.949849][T17383] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1007.955331][T17383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1007.960655][T17383] ? netlink_deliver_tap+0x2e/0x1b0 [ 1007.965877][T17383] netlink_unicast+0x7f6/0x990 [ 1007.970669][T17383] ? __pfx_netlink_unicast+0x10/0x10 [ 1007.975966][T17383] ? __virt_addr_valid+0x183/0x530 [ 1007.981099][T17383] ? __check_object_size+0x48e/0x900 [ 1007.986409][T17383] netlink_sendmsg+0x8e4/0xcb0 [ 1007.991186][T17383] ? mark_lock+0x9a/0x360 [ 1007.995546][T17383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.000859][T17383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.006164][T17383] __sock_sendmsg+0x221/0x270 [ 1008.010870][T17383] sock_write_iter+0x2d7/0x3f0 [ 1008.015669][T17383] ? __pfx_sock_write_iter+0x10/0x10 [ 1008.020994][T17383] do_iter_readv_writev+0x600/0x880 [ 1008.026222][T17383] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1008.031964][T17383] ? bpf_lsm_file_permission+0x9/0x10 [ 1008.037348][T17383] ? security_file_permission+0x74/0x280 [ 1008.043003][T17383] ? rw_verify_area+0x1c3/0x6f0 [ 1008.047875][T17383] vfs_writev+0x376/0xba0 [ 1008.052320][T17383] ? __pfx_vfs_writev+0x10/0x10 [ 1008.057218][T17383] ? fdget_pos+0x19a/0x320 [ 1008.061656][T17383] do_writev+0x1b1/0x350 [ 1008.065920][T17383] ? __pfx_do_writev+0x10/0x10 [ 1008.070696][T17383] ? do_syscall_64+0x100/0x230 [ 1008.075478][T17383] ? do_syscall_64+0xb6/0x230 [ 1008.080177][T17383] do_syscall_64+0xf3/0x230 [ 1008.084700][T17383] ? clear_bhb_loop+0x35/0x90 [ 1008.089394][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.095304][T17383] RIP: 0033:0x7f2dcf97e719 [ 1008.099746][T17383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.119389][T17383] RSP: 002b:00007f2dd0713038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1008.127828][T17383] RAX: ffffffffffffffda RBX: 00007f2dcfb36130 RCX: 00007f2dcf97e719 [ 1008.135821][T17383] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000006 [ 1008.143807][T17383] RBP: 00007f2dd0713090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.151799][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.159801][T17383] R13: 0000000000000000 R14: 00007f2dcfb36130 R15: 00007fff65e09a68 [ 1008.167807][T17383] [ 1008.720752][ T29] audit: type=1326 audit(1730856090.191:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17384 comm="syz.3.2803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03ef7e719 code=0x0 [ 1008.742209][ T5827] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1008.931772][ T5827] usb 7-1: Using ep0 maxpacket: 8 [ 1009.022213][ T5827] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.162407][ T5827] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1009.171508][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.202267][ T5827] usb 7-1: Product: syz [ 1009.206492][ T5827] usb 7-1: Manufacturer: syz [ 1009.211121][ T5827] usb 7-1: SerialNumber: syz [ 1009.322926][ T5827] usb 7-1: config 0 descriptor?? [ 1009.328594][ T5827] usb 7-1: can't set config #0, error -71 [ 1009.338689][ T5827] usb 7-1: USB disconnect, device number 32 [ 1009.349714][ T9860] udevd[9860]: setting mode of /dev/bus/usb/007/032 to 020664 failed: No such file or directory [ 1009.372505][ T9860] udevd[9860]: setting owner of /dev/bus/usb/007/032 to uid=0, gid=0 failed: No such file or directory [ 1010.362294][ T30] INFO: task syz-executor:13681 blocked for more than 145 seconds. [ 1010.433683][T17403] syz_tun: entered promiscuous mode [ 1010.447971][ T30] Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 1010.462324][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1010.471688][ T30] task:syz-executor state:D stack:20992 pid:13681 tgid:13681 ppid:1 flags:0x00004004 [ 1010.507823][ T30] Call Trace: [ 1010.511157][ T30] [ 1010.531487][ T30] __schedule+0x17fa/0x4bd0 [ 1010.542107][ T30] ? __pfx___schedule+0x10/0x10 [ 1010.547048][ T30] ? __pfx_lock_release+0x10/0x10 [ 1010.558864][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1010.565080][ T30] ? schedule+0x90/0x320 [ 1010.569393][ T30] schedule+0x14b/0x320 [ 1010.581069][ T30] v9fs_evict_inode+0x171/0x360 [ 1010.592444][ T30] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1010.597874][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 1010.607150][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1010.615617][ T30] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1010.621044][ T30] evict+0x4e8/0x9b0 [ 1010.654911][ T30] ? __pfx_evict+0x10/0x10 [ 1010.659383][ T30] ? iput+0x713/0xa50 [ 1010.672182][ T30] __dentry_kill+0x20d/0x630 [ 1010.677178][ T30] ? dput+0x37/0x2b0 [ 1010.681114][ T30] dput+0x19f/0x2b0 [ 1010.692305][ T5905] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1010.704699][ T30] shrink_dcache_for_umount+0xb4/0x180 [ 1010.718192][ T30] generic_shutdown_super+0x6a/0x2d0 [ 1010.728528][ T30] kill_anon_super+0x3b/0x70 [ 1010.740565][ T30] v9fs_kill_super+0x4c/0x90 [ 1010.750260][ T30] deactivate_locked_super+0xc4/0x130 [ 1010.766989][ T30] cleanup_mnt+0x41f/0x4b0 [ 1010.771468][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1010.787015][ T30] task_work_run+0x24f/0x310 [ 1010.794026][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1010.799243][ T30] ? __x64_sys_umount+0x123/0x170 [ 1010.814163][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1010.820052][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 1010.829467][ T30] do_syscall_64+0x100/0x230 [ 1010.836962][ T30] ? clear_bhb_loop+0x35/0x90 [ 1010.841809][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.854117][ T30] RIP: 0033:0x7ffa68f7fa47 [ 1010.858726][ T30] RSP: 002b:00007fffe5259bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1010.871044][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffa68f7fa47 [ 1010.882408][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe5259c70 [ 1010.890592][ T30] RBP: 00007fffe5259c70 R08: 0000000000000000 R09: 0000000000000000 [ 1010.906962][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe525acf0 [ 1010.918272][ T30] R13: 00007ffa68ff123c R14: 00000000000d2c4b R15: 00007fffe525ad30 [ 1010.932008][ T30] [ 1010.941481][T17408] veth0_to_hsr: entered promiscuous mode [ 1010.958792][T17410] hsr0: entered promiscuous mode [ 1010.969228][ T30] [ 1010.969228][ T30] Showing all locks held in the system: [ 1011.008105][ T30] 1 lock held by khungtaskd/30: [ 1011.019645][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1011.032930][ T30] 3 locks held by kworker/1:1/46: [ 1011.038091][ T30] 2 locks held by kworker/u8:4/62: [ 1011.044199][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1011.091921][ T30] #1: ffffc900015d7d00 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1011.164629][ T30] 2 locks held by getty/5590: [ 1011.169441][ T30] #0: ffff88814cec20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1011.180141][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1011.192391][ T30] 6 locks held by kworker/0:6/5905: [ 1011.197634][ T30] #0: ffff8880216fe948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1011.209203][ T30] #1: ffffc900042efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1011.225002][ T30] #2: ffff888144741190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1011.234985][ T30] #3: ffff8881443d2510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 1011.246225][ T30] #4: ffff888143f69a68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 1011.257414][ T30] #5: ffffffff8f5903f0 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1f8/0x1b30 [ 1011.268617][ T30] 3 locks held by kworker/u8:10/6013: [ 1011.274386][ T30] #0: ffff88814cc7f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1011.287313][ T30] #1: ffffc90004b87d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1011.301135][ T30] #2: ffffffff8fcc13c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1011.311055][ T30] 1 lock held by syz-executor/13681: [ 1011.316920][ T30] #0: ffff88807c8ec0e0 (&type->s_umount_key#86){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 1011.328273][ T30] 1 lock held by syz.0.2801/17387: [ 1011.337413][ T30] 2 locks held by syz.6.2807/17407: [ 1011.345156][ T30] #0: ffff88807a823e08 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1011.356328][ T30] #1: ffffffff8fcc13c8 (rtnl_mutex){+.+.}-{3:3}, at: packet_release+0x47e/0xcd0 [ 1011.371112][ T30] 2 locks held by syz.6.2807/17411: [ 1011.376839][ T30] #0: ffffffff8fcc13c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1011.388418][ T30] #1: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1011.400605][ T30] [ 1011.415107][ T30] ============================================= [ 1011.415107][ T30] [ 1011.423743][ T30] NMI backtrace for cpu 1 [ 1011.428108][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 1011.438613][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1011.448679][ T30] Call Trace: [ 1011.451955][ T30] [ 1011.454882][ T30] dump_stack_lvl+0x241/0x360 [ 1011.459566][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.464765][ T30] ? __pfx__printk+0x10/0x10 [ 1011.469363][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1011.474305][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1011.479764][ T30] ? _printk+0xd5/0x120 [ 1011.483921][ T30] ? __pfx__printk+0x10/0x10 [ 1011.488508][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1011.493362][ T30] ? __pfx__printk+0x10/0x10 [ 1011.497969][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1011.503012][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1011.509005][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1011.515001][ T30] watchdog+0xff4/0x1040 [ 1011.519251][ T30] ? watchdog+0x1ea/0x1040 [ 1011.523675][ T30] ? __pfx_watchdog+0x10/0x10 [ 1011.528358][ T30] kthread+0x2f0/0x390 [ 1011.532425][ T30] ? __pfx_watchdog+0x10/0x10 [ 1011.537102][ T30] ? __pfx_kthread+0x10/0x10 [ 1011.541688][ T30] ret_from_fork+0x4b/0x80 [ 1011.546108][ T30] ? __pfx_kthread+0x10/0x10 [ 1011.550694][ T30] ret_from_fork_asm+0x1a/0x30 [ 1011.555468][ T30] [ 1011.559710][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1011.565422][ C0] NMI backtrace for cpu 0 [ 1011.565436][ C0] CPU: 0 UID: 0 PID: 5193 Comm: klogd Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 1011.565457][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1011.565468][ C0] RIP: 0010:kasan_check_range+0x1b/0x290 [ 1011.565498][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 <49> 39 f8 0f 82 56 02 00 00 48 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 [ 1011.565513][ C0] RSP: 0018:ffffc90002f7f510 EFLAGS: 00000002 [ 1011.565529][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8142fb1a [ 1011.565541][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888035456500 [ 1011.565553][ C0] RBP: ffffc90002f7f610 R08: ffff888035456508 R09: 1ffff1100fc78800 [ 1011.565566][ C0] R10: dffffc0000000000 R11: ffffed100fc78801 R12: ffff88807e3c4000 [ 1011.565579][ C0] R13: ffff888035455c80 R14: ffff888035456500 R15: 0000000000000000 [ 1011.565592][ C0] FS: 00007f1aee27a380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1011.565607][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1011.565619][ C0] CR2: 0000001b2c317ff8 CR3: 0000000030154000 CR4: 00000000003526f0 [ 1011.565634][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1011.565645][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1011.565656][ C0] Call Trace: [ 1011.565663][ C0] [ 1011.565671][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1011.565696][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1011.565721][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1011.565744][ C0] ? nmi_handle+0x2a/0x5a0 [ 1011.565769][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1011.565791][ C0] ? nmi_handle+0x14f/0x5a0 [ 1011.565808][ C0] ? nmi_handle+0x2a/0x5a0 [ 1011.565826][ C0] ? kasan_check_range+0x1b/0x290 [ 1011.565850][ C0] ? default_do_nmi+0x63/0x160 [ 1011.565882][ C0] ? exc_nmi+0x123/0x1f0 [ 1011.565905][ C0] ? end_repeat_nmi+0xf/0x53 [ 1011.565928][ C0] ? switch_mm_irqs_off+0x2ea/0xa70 [ 1011.565947][ C0] ? kasan_check_range+0x1b/0x290 [ 1011.565971][ C0] ? kasan_check_range+0x1b/0x290 [ 1011.565996][ C0] ? kasan_check_range+0x1b/0x290 [ 1011.566021][ C0] [ 1011.566027][ C0] [ 1011.566035][ C0] switch_mm_irqs_off+0x2ea/0xa70 [ 1011.566055][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 1011.566078][ C0] __schedule+0x10c7/0x4bd0 [ 1011.566108][ C0] ? __pfx___schedule+0x10/0x10 [ 1011.566126][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1011.566154][ C0] ? preempt_schedule+0xe1/0xf0 [ 1011.566171][ C0] preempt_schedule_common+0x84/0xd0 [ 1011.566190][ C0] preempt_schedule+0xe1/0xf0 [ 1011.566207][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1011.566225][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1011.566250][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1011.566276][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1011.566297][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 1011.566315][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1011.566335][ C0] ? autoremove_wake_function+0x37/0x110 [ 1011.566360][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 1011.566387][ C0] sock_def_readable+0x20f/0x5b0 [ 1011.566403][ C0] ? sock_def_readable+0xd7/0x5b0 [ 1011.566419][ C0] unix_dgram_sendmsg+0x1493/0x1f80 [ 1011.566452][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1011.566479][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1011.566498][ C0] __sock_sendmsg+0x221/0x270 [ 1011.566515][ C0] __sys_sendto+0x39b/0x4f0 [ 1011.566538][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1011.566569][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1011.566594][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1011.566621][ C0] __x64_sys_sendto+0xde/0x100 [ 1011.566642][ C0] do_syscall_64+0xf3/0x230 [ 1011.566662][ C0] ? clear_bhb_loop+0x35/0x90 [ 1011.566681][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.566699][ C0] RIP: 0033:0x7f1aee3dc9b5 [ 1011.566713][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 1011.566728][ C0] RSP: 002b:00007fffee791aa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1011.566744][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1aee3dc9b5 [ 1011.566757][ C0] RDX: 000000000000004d RSI: 000055b9d0252fa0 RDI: 0000000000000003 [ 1011.566768][ C0] RBP: 000055b9d024b910 R08: 0000000000000000 R09: 0000000000000000 [ 1011.566780][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 1011.566791][ C0] R13: 00007f1aee56a212 R14: 00007fffee791ba8 R15: 0000000000000000 [ 1011.566811][ C0] [ 1011.603061][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1011.603080][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 1011.603104][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1011.603115][ T30] Call Trace: [ 1011.603123][ T30] [ 1011.603133][ T30] dump_stack_lvl+0x241/0x360 [ 1011.603164][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.603186][ T30] ? __pfx__printk+0x10/0x10 [ 1011.603205][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1011.603236][ T30] ? vscnprintf+0x5d/0x90 [ 1011.603266][ T30] panic+0x349/0x880 [ 1011.603289][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1011.603314][ T30] ? __pfx_panic+0x10/0x10 [ 1011.603332][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1011.603352][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1011.603377][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1011.603397][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1011.603420][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1011.603447][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1011.603474][ T30] watchdog+0x1033/0x1040 [ 1011.603498][ T30] ? watchdog+0x1ea/0x1040 [ 1011.603524][ T30] ? __pfx_watchdog+0x10/0x10 [ 1011.603546][ T30] kthread+0x2f0/0x390 [ 1011.603564][ T30] ? __pfx_watchdog+0x10/0x10 [ 1011.603585][ T30] ? __pfx_kthread+0x10/0x10 [ 1011.603604][ T30] ret_from_fork+0x4b/0x80 [ 1011.603632][ T30] ? __pfx_kthread+0x10/0x10 [ 1011.603651][ T30] ret_from_fork_asm+0x1a/0x30 [ 1011.603685][ T30] [ 1012.175147][ T30] Kernel Offset: disabled [ 1012.179469][ T30] Rebooting in 86400 seconds..