last executing test programs: 36m2.710368703s ago: executing program 2 (id=534): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x3) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xc4a, 0x0, 0x2}]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa43, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x109001) close_range(r5, r6, 0x0) prctl$PR_GET_TSC(0x43, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x14) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x120, r8, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/cpu/#/msr\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'qnx6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff5}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\xe6[[.*+@/*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, '/sys/fs/smackfs/netlabel\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\-\x00'}]}]}]}]}, 0x120}}, 0x404c000) 36m1.970834653s ago: executing program 2 (id=539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x46, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2a, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x600, 0x4000884}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000084) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) 36m1.374764725s ago: executing program 2 (id=541): landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x28, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2]) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030302c757365725f69643dd7a246e48b1c10a978f7acd64db1", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x27c4, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}, @filter_kind_options=@f_basic={{0xa}, {0x277c, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0x740, 0x3, [@m_mirred={0x74, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xa5d, 0x48ad, 0x4, 0x9, 0x7}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0xa6c, 0x2, 0x0, 0x10001}, 0x2, r8}}]}, {0x7, 0x6, "c06918"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xa8, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0x0, 0x1, 0x6}, 0x1, r8}}]}, {0x5c, 0x6, "c2d676b1d83d5d13773b70b3ba046b5452a2514537c711bfcad7ed477d8702acbd91d780236df939832825ca0ce40e700e6987b470ab123fb728130e921b32bae61c982f6db0ef25436d05b6e39d8863ed58920d132a4a59"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x1a8, 0x5, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x2, 0x4, 0x2, 0x7}, @remote, @private=0xa010100, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7f, 0x4, 0x2, 0x8000000}, @multicast1, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x8, 0x0, 0x1, 0x4}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1a000000, 0x6, 0x3, 0x2, 0x9bf3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x6, 0x94, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x3, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffff}}]}, {0x8e, 0x6, "aa013b90a3863343fb192614e4c6476bd488da178e50320f9340785e0473c800f6e7afe7fc0a9868a90c8defd8dc8f2583181f03e7e6686a0b89b4dfc3335993263d4c1a2ed3b06337059c09110d710f80d74228efbef3ee5b70e7c2c35878d4ba47ba8270f48447c7013dc0e9f9d8872343f1691351dfbbf800acb1c0943df5669cb1e672fee374a08d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x100, 0x14, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0xbf, 0x6, "efbe5baf2ac7beb9c526ce0dea083af942d9f6e291faa2dc9496aefa5ef9dae6950d2c09e4c90cfca697ef4f50228c6c817b0a1187f895593363c905a252b9164046f7fb33900d1e51d8210c0b47cb904d796f824afe73a06194b13c3599f4ca8430c9178a46f13a0187d099bb37aeab9daa25c767371624ca460708856ea42fc67d79396058f52bab0b317c87b211771dbe7ad97bf56a3e306fd343054a28b915a374c8ca5f8a500592aa98eb69ebd770be11fddc6c4afea2f716"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_connmark={0x15c, 0x5, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x8000, 0x5, 0x9, 0x5782}, 0x9a2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x5, 0x2, 0x8000, 0x5b}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x400, 0x8, 0x8, 0x27d}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xe, 0x3, 0x4, 0xfffff964}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xeef00000, 0x1, 0x4, 0xfffffff8}, 0x3e9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1cb, 0x200, 0xffffffffffffffff, 0x65, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x4, 0x4, 0x1, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0xffffffffffffffff, 0x4a75, 0x4}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x200, 0x2, 0x6a80, 0x2bdc0eb0}, 0x5}}]}, {0x2f, 0x6, "3860edc51e142a95d1def9d3613fc508990c4c275b8f31ffc4366f477ab4841f726cb04cc22b80cb979676"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x180, 0x2, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x9e7, 0x3, 0xb, 0xb247}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xb, 0x2, 0x0, 0xffffffff}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7cd, 0x3, 0xffffffffffffffff, 0x2, 0x6}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xc, 0x7, 0x5, 0xb}, 0x3}}]}, {0xe1, 0x6, "fc0c4e0081787a247530484971cdf489ce106f716a7a67fb0b8bd47991d1c00843b10c9916671280dca2044474c2e6b476b15a69ba1946ea6e8cdd6e8d8465403dd809bb834f5a86298e2746d776fa1120ebf2936aa7ed4a024e01f094065f15d436bc5b17a4010557ed52b7026b7f16cf8b9408ea2639f49958d0399b6f4d818a046ead03501c0392ac51ac9a5502c50d2be072776466fd32299e88903cd0f024f1f05256a335d81a70de022f1adebb135250d1c3de01a866ef11a6d6d3d52a6ddc8698b7150328b910e6d4e124e3a3cdebfbfd5759f5018a493335f7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x9c, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x9, 0x0, 0x8000, 0x9}, 0x10}}]}, {0x4c, 0x6, "c1a4a656aa397da47f82201336812fa858ba3c5d45566cf20a4852da0f67c87de370ce7230f77823bd7e106be676705767855b27356aafd1133a7ef66fd3006e1d48ddc31530ecbe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BASIC_ACT={0x12d0, 0x3, [@m_ct={0x198, 0x12, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "be208cae4baeebccc3978b092c4f9aa0"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x4, 0x4, 0x9535, 0x40}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "3f6a85ec0a63332a1d2382b020aec58c"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_LABELS={0x14, 0x7, "1dd3df2b3280a58d5d653326484e8bb8"}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x3, 0x4, 0x4ee}}]}, {0xe9, 0x6, "fb873a20df9985855b5d9fb7343132f3978943703641dfba9bfdf0550307ab8c0f2427db0f65f92ab8d63dd6aba41b5e1e5c4f009c40d0a58847265f9feee016507cd01ccf16f9c96857eddedcc73c75895c630b93c6bf9d64a4daadcc3006429a3ed1a6935a6f5b88ce696712302a68c0e59ad92c2163312995bd33cbd82bdd0f06a517125de6005f28b2beb42d7c305f5f7eaf11a4eb7c0196f3a074a97e34425ece9b5a05ccb27f1e453e648e02008de23771e807bb8c1f1eaecbe455a69824d19c10cb27bebe4ec05726fe5cb337a48a38dd0b8099a5d3830c46137d413b33fa79f79b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x103c, 0x11, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7}}}}, @m_sample={0xf8, 0x10, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffb, 0x4, 0x8, 0x1, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x73e}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x2, 0x401, 0x3}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}]}, {0x79, 0x6, "2668175ec8efd93ebfcc2b64aed135f64089c6d4402c4a7f2e7f1aba2e8b19284401884fc5d3b9e1653cef05beeeda9a39d4e22d5a8febe4fe31fb04928f6a93db3c120fa36d74e28e0696fa4cda19f60cfced517bdfd5f537fff19f286390189465c1a5fe540d445cd5d70662e153af9f10334db7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0xc54, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0xfff, 0x80000001, 0x7, {0x2, 0x1, 0x400, 0x9fdd, 0x7, 0x1}, {0x1, 0x2, 0x0, 0x4, 0x3, 0x2}, 0x2, 0xcf, 0xe35e}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x9, 0x9, 0x7, 0x4, 0xfffffffc, 0xb17, 0xd7, 0x400, 0x3ff, 0x8, 0x81, 0x5, 0x200, 0x8, 0x3, 0x3, 0x2, 0x54, 0xa, 0x1, 0x3, 0x2, 0x8b4, 0x1, 0x6, 0x7, 0x2, 0x4, 0x9, 0x5, 0x10001, 0x2, 0x4b34, 0x3, 0x1, 0x0, 0x7, 0x9, 0x7, 0x5, 0x78a0, 0xffffffff, 0x3b11, 0x7fff, 0x8, 0x0, 0x0, 0x5a59824d, 0xe304, 0xa, 0x4, 0x8001, 0x4, 0x7, 0x2, 0x100, 0x3, 0x2, 0x0, 0x400, 0x9, 0x2, 0x800, 0x7fffffff, 0x8001, 0xb, 0x4, 0xffffffff, 0xfff, 0x3, 0x200, 0xa81e, 0x3, 0x2, 0x7, 0xfffffffb, 0x800, 0xa, 0x6, 0xb8, 0x40, 0x0, 0x4, 0xffff0001, 0x3, 0x8, 0xa8, 0x36f5, 0x1, 0x8288, 0x1, 0x28, 0x200, 0x0, 0x3, 0x9, 0x1, 0x0, 0x4, 0x2, 0x40, 0x6, 0x0, 0x4, 0x6, 0x8001, 0x9, 0x7, 0x9, 0x4, 0x0, 0x8000, 0x5, 0xc, 0x7, 0x5, 0x9, 0xdfe2, 0xffff7fff, 0x8, 0x7, 0x3, 0x39, 0xff, 0x6, 0xd9, 0x1, 0x1, 0x4, 0x8, 0x4, 0x5, 0xb70f, 0x5, 0x2, 0x7, 0xf, 0x3, 0x5, 0x0, 0x2d, 0x2, 0xffff0c9a, 0x8, 0x5, 0x4, 0xd, 0x0, 0x9, 0x0, 0x9, 0x8, 0x10000, 0xfff80000, 0x5f8, 0xf, 0xeb6ab3f4, 0xfffffffd, 0x1, 0x37, 0x8, 0x3ff, 0x0, 0x7, 0x87b, 0x2, 0x81, 0x4a, 0x8, 0x8, 0x3, 0x4, 0xffffff81, 0x3, 0x1, 0x0, 0x1ff, 0xb4e, 0x3, 0xffff, 0x8, 0x0, 0x6, 0x2, 0x9, 0xfffffff8, 0x80, 0x3, 0x51, 0xa3, 0x101, 0x1, 0x4, 0x5, 0x0, 0x2812, 0x7, 0x2, 0x17, 0x8, 0x4, 0x0, 0x307, 0x2, 0x9, 0x1ff, 0x101, 0x1, 0x3, 0xeb, 0x1, 0x800, 0x1, 0x4, 0xb, 0x9, 0x4001, 0x9, 0x5e2, 0x293, 0x80000001, 0x8, 0x4, 0x31126a03, 0x7, 0xfffffff8, 0x753, 0x9, 0x8001, 0x7, 0xf, 0xfff, 0x4, 0x0, 0x8, 0x7, 0x8, 0x8, 0x3, 0xff, 0x0, 0x7, 0x2, 0x10, 0x200, 0x1, 0x7, 0x101, 0x40, 0x0, 0x8, 0x6, 0x3, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xffffffff, 0x147, 0x400, 0x9, 0x0, 0x3, 0x81, 0xc0b, 0x7, 0x253b, 0x0, 0x0, 0x0, 0x92, 0x0, 0x2, 0x80, 0x6, 0x6, 0x61d, 0x1, 0x1ff, 0xadb, 0x9, 0x80000000, 0x1, 0x100, 0x6, 0x8, 0x8, 0x0, 0x3, 0x8, 0x3, 0x6, 0x80000001, 0x7fffffff, 0x9, 0x1, 0x0, 0x7, 0x3, 0xe25, 0xa1db, 0x8, 0x6704, 0x5, 0x100, 0xa7f1, 0x2, 0x6, 0xff, 0x6, 0x0, 0x80000001, 0xfff, 0x1, 0x6, 0x7, 0x5, 0x2, 0x8, 0x4, 0x80000001, 0x5, 0xe67, 0x1, 0x81, 0xfffffffb, 0x200, 0x6, 0x8, 0x6e0, 0x5, 0x8, 0x1, 0x1ff, 0x4, 0xfffffff9, 0x200, 0x1, 0x7, 0x10000, 0x8, 0x5, 0x26223e00, 0x2e7d, 0x95e, 0xc50, 0x2, 0x6, 0xe, 0x6, 0x4, 0x10001, 0x8, 0x6, 0x8, 0x1, 0x54b6, 0x5e80, 0x6, 0xc40, 0x8, 0x100, 0xffff, 0x6, 0xfd7a00, 0x3, 0x8, 0x8, 0xff, 0x8, 0x5, 0x8000, 0x157, 0x8d, 0xfd, 0xdd9, 0x2, 0x8, 0x8, 0x4, 0x1, 0x8bd, 0xd, 0x1, 0x5fcd, 0xc, 0x10000000, 0x1, 0xfffffffe, 0x7, 0x4, 0x7, 0x200, 0xde9a, 0x7, 0x4, 0x8, 0x7, 0x7, 0x1, 0x9, 0x8000, 0x6, 0x8, 0xfffffc01, 0x67, 0x7990, 0xfffffffd, 0x44a5, 0x6, 0x3, 0x9, 0x7ff, 0x0, 0x401, 0xffffffff, 0x1, 0x7, 0x9, 0x0, 0x1000, 0x81, 0x21, 0x4, 0x5, 0xc8f7, 0x9, 0x3, 0x91, 0x200, 0xffff, 0x3, 0x7, 0x10001, 0x965, 0x0, 0x1, 0x2, 0x1, 0x1, 0x80, 0xe, 0x10001, 0x4, 0x81, 0x5, 0x1, 0xe8, 0x4, 0x4, 0x10000, 0x6, 0xfffffff2, 0xfff, 0x2, 0x7, 0x174, 0x76d1, 0x5311, 0x4, 0x4f29, 0x7fff, 0x6, 0x401, 0x8, 0x8000, 0x4, 0xe4, 0x401, 0xfffffffe, 0x4, 0x10001, 0x3, 0xfffffffc, 0x800, 0xd, 0x3, 0x6, 0x1, 0x83c, 0x226, 0x2, 0x0, 0xfffffff9, 0x2, 0xc7, 0x3, 0x4, 0xd3f1, 0x2, 0x1ad, 0x4ac51d5b, 0x8, 0x9, 0x1, 0x83, 0x9, 0x7, 0x4, 0x2, 0x0, 0xd2c, 0x7fffffff, 0x58f8, 0x200, 0xa, 0x5, 0x5, 0x6, 0x1, 0x7, 0x7fff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4000000}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x5, 0x0, 0x10001, 0x433, 0x5, 0x9, 0x7, 0x8, 0xfffffffc, 0xc49b, 0xe6, 0x3, 0xb4, 0x8a, 0x7, 0x4, 0x9, 0x8, 0x40, 0x3, 0x100, 0x1, 0x81, 0x1000, 0x3, 0x4, 0x8, 0x180, 0x4, 0x3, 0x6, 0x9, 0x7, 0x0, 0x10001, 0xe9d2, 0x9, 0x7f, 0xfffffffc, 0x1000000, 0x2, 0x901b, 0x9, 0xd, 0x4, 0x2, 0x7, 0x3, 0x3, 0x4, 0x80000001, 0x1, 0x0, 0x17a, 0x1000, 0x6, 0x187, 0x5, 0xf, 0x1, 0xfffffffc, 0x1, 0x7ffff7ff, 0x80, 0x0, 0x4, 0xfff, 0xfffffff8, 0x14, 0x8, 0x0, 0x3, 0xfffffff5, 0x9, 0x9, 0x6, 0x2, 0x9, 0xbd79, 0x7, 0x6, 0x9, 0x0, 0x10000, 0xfffffffb, 0x80000000, 0xefd3, 0x9, 0x929, 0x80000, 0x7ceb, 0x2, 0xa, 0xb, 0x4, 0x7, 0x5, 0x7, 0x400, 0x8, 0x6, 0x2ad, 0x5, 0xc, 0x1, 0x1, 0x8, 0x8, 0x8, 0x4, 0x1ff, 0xfffffff3, 0x81, 0x2, 0xef9, 0x5c9e, 0x1, 0x1, 0x2, 0xff, 0x3, 0xc, 0x7ff, 0x40, 0x10001, 0x346c, 0x3, 0x8, 0xfe8b, 0x5, 0x7fff, 0x1, 0x3, 0x6, 0xfffffffb, 0x5, 0x7, 0x34, 0x40000, 0x3, 0x1, 0x3, 0x1ff, 0x1, 0x9, 0xe, 0x9, 0x2, 0x5, 0x6, 0x7, 0x2, 0x1, 0x3, 0x7, 0x71, 0x4, 0xf, 0xc, 0x2, 0x4, 0x27ff, 0x314, 0x1000, 0x6, 0x290, 0x1, 0x4, 0x2, 0x3b3, 0x9, 0xfffffffd, 0x9cb6, 0x8, 0xffffffff, 0x15d2, 0x1, 0x3e0f, 0xffffff16, 0xffff, 0xbfe, 0x27d7, 0xffff, 0x6f2, 0xfff, 0x80000001, 0x4, 0x1, 0xe54, 0x9, 0x7, 0x0, 0x7, 0x200, 0x1, 0x7, 0x2, 0xb8b5, 0xa, 0x10, 0x4, 0x713, 0x10000, 0x3, 0xce8, 0x3, 0x8, 0xb6, 0xf3, 0x40, 0x7abb, 0x0, 0xfff, 0x3, 0x3, 0x7fff, 0x2, 0x3, 0x9, 0x6, 0x7f, 0x1b, 0xfff, 0x80000000, 0x4, 0x6, 0x2, 0x7fffffff, 0xffffffe7, 0x7ff, 0x7, 0xa01, 0x1, 0x8, 0x8126, 0x10001, 0x200, 0x8000, 0x6, 0x0, 0x2, 0x9, 0x7ff, 0xff7, 0xa8ba, 0x1, 0xfdd, 0x1, 0x7a, 0x8001, 0xfffffff4, 0x4, 0x1, 0x5, 0xe]}]}, @TCA_BASIC_ACT={0x108, 0x3, [@m_skbedit={0x104, 0x4, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xb7, 0x6, "06794f9305d302e6a57902b8582e2d58027527cfe2231d75dc8d188fcbe1a523c63234d3f3d175eed2818ec69e718b57a5f56a951da66fcf510db8a0d842aa9db6ee76e45c22e2f1ef6d3a443abe054cfeaa2dfb87e37b0790932e2dac76e459012772d7ba417fd6b501fef7240944f58727461f7e15b0d78e87a81c8fb883885526eb2a2ae49dd058e927d893a20ea3d7eae6cee4ad2d403f2398563e299744d7ecb5dce17e5b94fc7ed9da555518ce7c0b13"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x27c4}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 35m57.83176003s ago: executing program 2 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) setpriority(0x0, 0x0, 0x62) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000200085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000080)={0x7}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 35m56.036513079s ago: executing program 2 (id=554): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfed9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a828008100240008004500001cffff000000029078ac1e0001e00000012200907800000000"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000f4ff000000000000000000000200000a2000000000b0653e67fcc41415249aad6e3cb59a030a030000000400000000000000fffe0900010073797a300000000040000000090a0104000000000000000007000002100011800b0001006f626a726566000008000740000000170900010073797a3000000000080005400000002194000000160a0300000000000000000005000007800003802c0003801400010076657468315f746f5f6261746164760014000100726f736530000000000000000000000040000380140001006c6f00000000000000000000000000001400010076657468305f746f5f68737200000000140001006e657464657673696d3000000000000008000240000000020800014000000000140000001000010000000000000000000084000a"], 0x11c}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$loop(&(0x7f0000000400), 0x6, 0x292000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local, 0x7}, {0xa, 0x0, 0x8, @empty, 0x5}, r4, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000001680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7796, @loopback, 0x6}, r4}}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ffff0000000000002600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000000000bf9100000000008500000084000000b7000000000000089500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8e1115dd9da18127}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x48800) syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00') 35m54.527761959s ago: executing program 2 (id=560): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000700)={0x0, [[0x9ef8, 0x0, 0x2, 0x201], [0x10000, 0xfffffffc, 0x5, 0x800, 0x0, 0x0, 0x0, 0x80000003], [0x7, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]], '\x00', [{0x3, 0xffffffff}, {0x3, 0xfffffffb}, {}, {0x3, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x20, 0x5f}, {0xffffffff, 0x10}, {0x0, 0x6}, {0x101, 0x1ff}, {0x0, 0xfffffffe}, {0x9, 0x12}], '\x00', 0x1000}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 35m53.893426207s ago: executing program 32 (id=560): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000700)={0x0, [[0x9ef8, 0x0, 0x2, 0x201], [0x10000, 0xfffffffc, 0x5, 0x800, 0x0, 0x0, 0x0, 0x80000003], [0x7, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]], '\x00', [{0x3, 0xffffffff}, {0x3, 0xfffffffb}, {}, {0x3, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x20, 0x5f}, {0xffffffff, 0x10}, {0x0, 0x6}, {0x101, 0x1ff}, {0x0, 0xfffffffe}, {0x9, 0x12}], '\x00', 0x1000}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 22m11.856097789s ago: executing program 3 (id=3270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r3, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 22m10.349446518s ago: executing program 3 (id=3273): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r0, r0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r0, 0x6000) 22m9.512252761s ago: executing program 3 (id=3275): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) msgget$private(0x0, 0x790) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) timer_create(0x2, &(0x7f0000000080)={0x0, 0xc, 0x2, @thr={&(0x7f00000000c0)="5de486b8e3ccc38bbe713363cf34f25307414e044d298e2e63d62414e24192f4eb665dc93087970b3c6f060000005205f109da1afb35e029edfc5ec34926b132fc15d77b4014a9efa30af5cd3bfbe28153d0ed5b3d56217f334814", 0x0}}, &(0x7f0000000140)) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x38, 0x4) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0x1b, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 22m8.728955922s ago: executing program 3 (id=3279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="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", 0x2000, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x6}, 0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="185d75e40d2de7d51200ab6019028c8254a706a704fd003a4055bbdf592782b84b1617dbd11255921e3f49a2f75200aa79a34b4e598f71bba887fd204377bc473db71b94c574fe60d32b667a1a5946df66ed880a26577cd3a30b3c4716bb5d485d7f3aa638b98933d5cf5c715343d5acc64ab47edfd9418cc7438bdef8432e0d14e3c91ea14f4e70b46bf97bcd12496d720fbb9fc296ae5f80c1b2ad745546aa69aede"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffecc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x80000, 0xd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6d08586dd61bcc1d700006cff0000000000000000000000000000000100000000000000000000000000000001"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x200000000000039b, &(0x7f0000000680)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xda, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22m7.750700786s ago: executing program 3 (id=3281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r3, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r7, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) dup3(r7, r8, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) 22m7.099620012s ago: executing program 3 (id=3284): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x8}, 0xc) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x20, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x66}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x2, 0x7baf, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[r3], 0x0, 0x10, 0x80, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000001740)=@deltfilter={0x24, 0x2d, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0x0, 0x2}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc054) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001200)={'ip_vti0\x00', &(0x7f0000001340)={'tunl0\x00', 0x0, 0x80, 0x8, 0xffff685c, 0x8000, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x67, 0x0, 0xb, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@lsrr={0x83, 0xf, 0x70, [@multicast1, @multicast2, @local]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xd, 0x6, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', r6, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)={@local, @multicast1, 0x0, 0x4, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2]}, 0x20) 22m5.88947088s ago: executing program 33 (id=3284): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x8}, 0xc) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x20, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x66}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x2, 0x7baf, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[r3], 0x0, 0x10, 0x80, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000001740)=@deltfilter={0x24, 0x2d, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0x0, 0x2}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc054) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001200)={'ip_vti0\x00', &(0x7f0000001340)={'tunl0\x00', 0x0, 0x80, 0x8, 0xffff685c, 0x8000, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x67, 0x0, 0xb, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@lsrr={0x83, 0xf, 0x70, [@multicast1, @multicast2, @local]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xd, 0x6, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', r6, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)={@local, @multicast1, 0x0, 0x4, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2]}, 0x20) 17m55.767865567s ago: executing program 5 (id=3892): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x6, 0x7, 0x42, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x40, 0x700, 0xd7, 0x6}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) socket$kcm(0x29, 0x4, 0x0) sendto$packet(r3, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f00000f9000/0x1000)=nil, 0x1000, 0x1000000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900674c00000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000010000000000000000000000000080000000000000000000000000000000009001000000000000100000000000080000000000000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000001010002000000009a51ae49967e80e09e64c3dc727a282b02359e7eae7b825c70126b084c9bec7b9ba6ba3a8464c02001b62da18977056d3bf79f721ec1170d5e7a7e663080d35b11d3fd0f7b28c1caffb87a108773bd52d2eb4cde532dce862ad1b5e1eeee6d756e5ffaa03d828ccc7fa62579ee820ffbb53a12e49b8b480649"], 0xb8}}, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newroute={0x118, 0x18, 0x20, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7700}, [@RTA_METRICS={0xf1, 0x8, 0x0, 0x1, "4c4aec44cdaf27378c5632b2056544995bf588f826ecfe23d8ecf8a2707dc3b3b90db529b90d57c2e9257f1023beeb4535dbdf3225a418880e457f420e3e85d218761d6f79d3f29c3f295ecd4f2862b7ce3b37496f994b73ee4e3eccd694bbe6ce726fdbbeed9d569bff2b0a232fad21b5def95db33d6b1d94655ac68c80a1b1787413a277b69650fd5237c98a486d1f439c67470bb71204f867d09bc37fc48d4d0342879e4e27f63357862fdea93069fad1d498abcb427a69373aec8f69e025ee826714d74b6452fb106fb616e600489e71243cd6345b954171f99cffc8384e2c1749015410ac8872b8fb7982"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x118}}, 0x44041) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000280)=""/24, &(0x7f0000000580)=0x18) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 17m52.368386479s ago: executing program 5 (id=3904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x2000000000000000}, 0x0) 17m51.519102112s ago: executing program 5 (id=3907): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x303400, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000002880)=')') mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0400460005003400fe000000080026008a09000024006b"], 0x54}}, 0x40080) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="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", 0x1000, 0x1, &(0x7f0000001040)={0x11, 0x8, r5, 0x1, 0x80}, 0x14) 17m51.132012584s ago: executing program 5 (id=3910): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde041023398a71d7d80102030109022400010509401909047b07022d51d598090502022000020205090504"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffffffffffe, 0x101403) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x10, 0x1014, 0x0, 0x6, 0x0, 0x3, 0xdd2fcb245114ab72}}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x7c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "89db"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x8, 0x80}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17m49.367910668s ago: executing program 5 (id=3917): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f00000000c0)=0x7f, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001340)=[{&(0x7f0000000140)={0x27, r3, 0x1, 0x1, 0x4, 0x0, "35098ad4d237a92bb2ac33a267e2f77ee2c38d6b648fb8251e1b45b9ec27349b626a25288757a3c3f8a72cdf6d61f649cc7f7a617bc7992f02480abd01a301", 0x20}, 0x60, &(0x7f0000000800)=[{&(0x7f00000001c0)="9788f7457d4039a8feff3b483c025ceb2f627d21581c0057f66f6880de1eccad6a3ff099d3805372956f1857a04a13c4fb61f3b0bb2778916e1df43af1700740e2c1184e2acefafad5aad434ef18f60b52211485da3ad2b3d40be982fc1382f586f5982c38066d02fb46ba52bf14852bce688a91ffad592705aba7f2a33c4710ba", 0x81}, {&(0x7f0000000280)="ab032c796987bac324fdc66640fb8e248b9c86ac97ca1f535fcc125b7317babbac1a6fcea2dca52bd36d3aa25160a69faf6592ed0c341e29fed4e4b6ebfca15d3a19ff2bc22565ff8233fcfec4d286b639af58a6db9da5", 0x57}, {&(0x7f0000000300)="de1d43727c49a8", 0x7}, {&(0x7f0000000340)="e3386e4d8fa2c0d59d9776e08c27d60b2633462d8602100d29c6cf1d95dc2e7946eff845dabeae4233ca5b9fed5127a085fbcacdc7baa7c27f0680699fd386794a7b1b391ac7e66472b71605714ac48761bded3cbcda8761c780086c6340e6f9e89d85aca2a1939007769b2bbb109d9d3d622bf5308b92b127977e5d421ccfe6c6243919456c26b638def6c729d378e57f1f", 0x92}, {&(0x7f0000000400)="5f657a51a29b34eeab175b7f8adf33bba886c3466fdc36325e0c64acec21cd5f48d5bb31be74b11ca807a721fb876e4c87c24de7f903e09c9d51596714251e62f97047d035f877bf2e69a9e02c0272de632ffdb72eb003fe5a392c6bdf5b030cf893063db419adb2095e9487bb8d44cbf354c178c8653a7dfc7c0749c0298365f229a89c576b6d0d6261924e828cac0cc8c534d451d1688dcbe6b94d1926a1718c6a", 0xa2}, {&(0x7f00000004c0)="ad531dcf14b40cea8a83f3e6d5ed7b6c2eb504023eaba2d2d2befd136f1244e0190d4e3dca3ee9dc84876bbe22921fc8240a319a58d1c575a2d1983c222a19ffbc186bf5b89b9c79aa67f88d76c113a4b9d6794274c6562ea51738111991f52878c9487c460e55977693f6b62360db4553565c673c867974c5d1a3c2e969845fbd06052c58e10f802111e6565328dc46444febee5bdcb20b7e84", 0x9a}, {&(0x7f0000000580)="49437f253ce60aa04d9f2266e532e8253fb05bc6f72518556e54871ea5ae2673e9e8c6855b062bd3a3b325a27f00d25fd401ccd8a54938b6f65ea60fed10dd4ec8d832841155eccb1fe3eeecfcf19f947a0842f71bd39f4f6ec76dab8a81f17fb13175ae0c828df6a8deb319a9d56d8a2eb46b50e6037676ef52b15f", 0x7c}, {&(0x7f0000000600)="03185ff7b6d706bb9421e411206260bde80daabbc0a5342448f0712f0a0b897bcc4c59eee6b9e65f139fc0bebb7c8f467e56f5759ea96993953e9767477222a04ff6c8940d59a9ffbcbf417167c0df1f768c480c2ee9140c04a7cb42d3326d7e18eae0e4b2b69742612523ff2168733753f0e0208a7917a2ca96443a76529c78077bc05ba3876cbbd52101ec25c3f0a885b5273a474e105fef1f6c93cd0944986377e24b90b4a33d74d5f934bbda4e35e9b959c4fcb8b91390808fd5f302c8d68e9193767df54e51e0d7f2e6155b74d32b36", 0xd2}, {&(0x7f0000000700)="21aea7463333090d4ef662e665af00b9b6493c", 0x13}, {&(0x7f0000000740)="c9df89eeb0ee36dfe179ad66bbb962883ab625a16974c8e2ce1803ef610afeabdff62bc7df937ce1c43233d382c2dee20d958554896684641528ce0796b79773fddc17d44fafa09e2b577484cd1861b8e6602c09f92863f0a2c9bc787e48a12921eb3a58f78dcb62f649125ce8ab5f91133065d34e32ba6d61197d26df4aed8350ca3ff1901038b305eee350ef13269ac5d0b9a495626df09c38", 0x9a}], 0xa, &(0x7f00000008c0)={0x50, 0x1, 0x5, "1a207a311ccae0812b50a6035ed50a3a7bde9f038fcb566d44b7e226c4c068f93ebc35a2ec1ce0c3ee4abf065f9d379e6e1817cb01e411f59f00"}, 0x50, 0x10000000}, {&(0x7f0000000940)={0x27, 0x0, 0x0, 0x6, 0x9, 0x0, "75f8dfce9fab9db7b96f8db0619ad7fc643c80d93a5e6d872abab7f8003d7694bb73623ca65869a5bacc070916a86caf65d687209fa1a6ccce098625e9046e", 0x16}, 0x60, &(0x7f0000001200)=[{&(0x7f0000000c80)="5d085300e0164c37da017b75f714d18f359a9428ddce4189cc32ef6d9a5389f6750c5c10ecc318cd4fcef1098f70b1769023bb5bdc752e074ea16ed0bc1c8e5c53babddc692799bed543648fd4e555425f0022eb58e38f45a289040ed4ce5661c40e2e0902af2ed3db1c869fc29db766e37d4b9682870c89189bcffd39878a159442d952da236fec", 0x88}, {&(0x7f00000009c0)="05e7ed6b277996f0287e8ea390e2a3aea839da760383525f98bfc67a5f3224b9cb2e7f08335b41b0a644a9fd3628581b6e607823a334d8999283e2512a9b1c4374a4d27293bec2991bf39bf81df59369baee427b2d838d8691d1ed12b1c1b41c7d4a4fba1641da354c6a48c287842e66d2d5b0da1d00e80c4fb46f8012", 0x7d}, {&(0x7f0000000d80)="879e48e3a8770ef789dfc18ffa9e95baddfd31caf7319f0e5c0babe745782e3ced197949b4be55a0d8f1b1f54ca1d290cfeb9c0537cb1a8940c0f29efc0fe4590643baf8a530a36a5e7b947e0e43a25cc548bb45824c592986dcfaad4bbe20d2a538f6b991babc9bfa6bf9f94130c3c7e531d6cd1c3931af0604e4a189aff7e6bd818a51ca0624531106df11523d2943a4a0acbd25cc0ff85e191bc79affb2e115b7287ce5e2968d7ab839f8972912a5e51bd5836609657b", 0xb8}, {&(0x7f0000000e40)="ad8c027fc66026439fe7649dd1d84fb8853e477be031be64d8d130f66108340a66fa01078909bb9f295485a08cf268a9b37b956be1af60baba524032f6a4025261bcb3d4224c276f9f1a541b89a3102a6760e01ae3553e57b77158d8a8ce8544fe0fd3d8f4276528ec82f032dc84f1c71f49821f86a693d34650bed4fd0c8857877d6c4074369cbaa68b5cb41ff7081c239a6b66e8d80a614355ad83a44b74c7cc580fbe1853d91a4b7b1ce08206541e837a7dae8e6cf9c1ec2f9e17cc88bd83c6480f21cd5656e34c5d40f58d8c7c32ebef2b1ec7a2d90fe6a584c401bd389f9de696a1", 0xe4}, {&(0x7f0000000f40)="f5ef1d26effa5042a860692403c1b6e40e8a41f311a0902ae70cd4b3b0b26782d33b66e355fbfdb2906dc527d27cffe8b15834293defacfbbea4bf6dc481c71f2a8b5268211fe097d89b499db0afc3e331a2ada7e5384bb8e308e59f4f37102e69ee1593f1d93b4eff898a14ce4383c54a13d4f2eeae0d856154027c248e8828b1eb7634f2f49c6a7e", 0x89}, {&(0x7f0000001000)="3d93e36ae1556f0f77c3ad710378e1fd9f9dd0f64de9872af32068544adf0cabd21249e676d7a6746904d366882e9ed223ee8721ee0aba64a50d830d04c26aeeca9c1685a4117c1a2b3d8db23b64fca8b99ca7e64275aa853ef0be3ab2d0671ba0f0b9f35b1a1778c9364e7e1a2efbd384240a5dd1b41749ef237c52b7aee188f26601d3cf783b774f75d74beff31f8af6a9f9ad9da044fd8f0b0b8923283c987b96e3", 0xa3}, {&(0x7f00000010c0)="7598935bffe2541a1dbd0e8ffd8a397b5f597c4ff58b0d11e1e8b0682173dd505861618038fb5e729afc7fc667eb601685443460f184b17a32f8453453e5b1cff77b0e1c5d1ffb8c8b09db2f69c664317771c4c6fdc50b9f9c7e5c564dec01831c6c95fb29a6d07863fc2c464e839335db0f9c692c57257f0e4ddf4efd8bb0a02ab9219823bab60692e0ce1e3ab986902cc2fd0c14fdcee90fb9b6792ddfd95f62930c7393c80b139643e3f2023e712602aef7af2e54d285e61c2f5f2f7b2c92347f834a7816c12f3ca78fd68c7499e777cc97c03e6aa2b49a62bc5d2f6ca027629bed3a97441e10be9fa045401b1e4a", 0xf0}, {&(0x7f00000011c0)}], 0x8, &(0x7f0000001280)={0xb0, 0x11, 0x5, "cd3e5bc917c88f4f6c385e65d1ecc68bad306b251fd732cd43453c84b0680d70df00235b39889529f3a783a2c8f21763fb76475cb2c2e05cc8969ebd36aa7676a10a96e4c48ad891852ee2abadb7262118b34c770ccfee8cc0b45e86db171a1e995bb56170c2bc6aca0d60ff2375787853eb3e8b759201421a1614abef29802540dcc047e721105f0a1e5d84ef7d667ac6341b925de62243411b"}, 0xb0, 0x4008880}], 0x2, 0x10) 17m48.675956178s ago: executing program 5 (id=3920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x80000000000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x4, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x4}]}]}, 0x13c}}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8c10, 0x3, 0x1}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x8c0, r0}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000181219000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17m32.959950902s ago: executing program 34 (id=3920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x80000000000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x4, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x4}]}]}, 0x13c}}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8c10, 0x3, 0x1}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x8c0, r0}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000181219000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m2.370883453s ago: executing program 7 (id=6865): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0}}, @rdma_map={0x30, 0x114, 0x2, {{0x0}, 0x0}}], 0x60}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b600000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m2.329013819s ago: executing program 7 (id=6867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=ANY=[@ANYBLOB="2573797a313a06798f312e726561646f6e6c7900"], &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) 1m2.072055653s ago: executing program 7 (id=6871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000010a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000050000000900010063797a30000000000900020073797a31000000001400038008000240000000020800014000000000380000001a0a0101000b000000000000010000000900020073797a3000000000090001"], 0xc0}}, 0x0) 1m1.382429124s ago: executing program 7 (id=6872): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000800f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 1m1.050762169s ago: executing program 7 (id=6875): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x40000000000020d, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x11, 0x0, &(0x7f0000000040)="f8ad48cc02cb29dcc8007f5b080038d69f", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], r4, 0x0, '\x00', 0x0, 0x4}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="ffff90b5", @ANYRES16=r5, @ANYBLOB="080027bd7000ffdbdf250100000008000200020000000800020006000000"], 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x800) 28.160430701s ago: executing program 4 (id=6943): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902950003010040000904000000010100000a2401000000020102132406912026082810e50163000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) 27.494557648s ago: executing program 6 (id=6945): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) tgkill(0xffffffffffffffff, 0x0, 0x22) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x693, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_setup(0x7ff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 25.125692511s ago: executing program 6 (id=6946): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x226) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000004c0)) 24.815836101s ago: executing program 0 (id=6947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xb0, 0xf8, 0x1c, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'streebog512-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x726d}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x8c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xfffffffffffe0306}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7b}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x2b7135839e911154) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0x8, &(0x7f0000000180)=""/76, &(0x7f0000000200)=0x4c) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0xbf7}, 0x8) 24.722476512s ago: executing program 4 (id=6948): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 23.057628423s ago: executing program 4 (id=6949): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x400004, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES16, @ANYRES32=r0, @ANYRES8=r3], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142cbb9a000000860000000000000000fe8000000000000000000000000000aa4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a0010000100000000000000"], 0xc4}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x0, @local, 0x109}, 0x1c) mknodat(0xffffffffffffffff, 0x0, 0xc000, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2, 0x800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000440)={r10, 0xe3f, 0x10, 0x2}, &(0x7f00000003c0)=0x18) 22.983017842s ago: executing program 6 (id=6951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 22.687928438s ago: executing program 0 (id=6952): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xf, 0x80c, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000100)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000440)="26c37a04f0d40aa6df2b3bd1324332d636ae0e0d86253497612dcaf2a7d9283c74236dc4f43083df568a7b2d5c9ec748f657dcb595194f1b4890872bdcca55e4adfaf13325802f39198844", 0x4b}], 0x2}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="180000000000000084"], 0x48}], 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r3, 0x1, 0x8000, 0x10000}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0xa, 0x0, 0x0, 0xfffff034}, {0x48, 0x4}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd608a37f200142c00fe8000009000000000000000000000bbfe8000000600000500"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000040)={0xa0000007}) write$input_event(r0, &(0x7f0000000400)={{0x0, 0x2710}, 0x5, 0x1, 0x6}, 0x18) 22.685994784s ago: executing program 6 (id=6953): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x226) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000004c0)) 22.669966404s ago: executing program 4 (id=6954): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x0, 0x59, {0x59, 0xd, "a02908d33959c482c024d01f74bd9ca1d16fdd84eaa6b6a358e477ee5cf3585d5dfd75f7b4b78d38f146003a5cabde6e8ccc3e1412af0abff14939aec262d42bb15a357710a71aa1a8ff11a1bdded9c1a625dcce02eceb"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000640)={0x44, &(0x7f00000003c0)={0x20, 0x0, 0xf4, "ce2aa885cebf3262790768563fe4668225011124b691dc9e2fba120074a557729983cad1787014a90684519241b701c73ea45afd89091276f03dc94bc6051b0451340198f0f698da1cd01a9bffd90c8e48484481a5e24c21cf905628bf5d30b67f159728e3736d4529fb743b0051a866a72e996a8f616e3626ece5e638a35cef050649d49d180d06b0e5a94078dc0cd5358fc93ee54a9f7246f7e1b2c6d0833598aa4a43931921ae5dd73f402b386a0e3cf5ee12be38737faa0a97fca515e4a8820f15d863db79d33e55d85fcd7329114b1d48fb041679ef82b22739a64335aa9be68721d951d829bb513245ac2456997f8b1cd5"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x81, 0x3, "af79f5"}, &(0x7f0000000540)=ANY=[@ANYBLOB="2082020000009296"], &(0x7f0000000580)={0x20, 0x83, 0x1, "cd"}, &(0x7f00000005c0)={0x20, 0x84, 0x2, "23af"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "ecdbd3"}}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2000}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x2, 0x0, 0x0, 0x1ff, 0x64a0]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_usb_control_io(r0, &(0x7f0000000040)={0x87, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="908e73563c9ebec982e5d72d66e17dd2d45b13bd26122ea28aab236a7248b33d928bc94be03a", @ANYRES16=r0, @ANYRES16=r1, @ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003380000003803fead6a9b7ed93ce91713f56beb068896038cf3f01a73d8bc78d9ea1a26b2cebd14d6ba442eca6464b01ce84a349d32ce057de63ebd35a91d769c2eac54283fd7f96202"], 0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1007, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\x7fS\xd9\xc8\xeddFlX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6b;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) r3 = syz_usb_connect$cdc_ncm(0x1, 0x91, &(0x7f00000006c0)={{0x12, 0x1, 0x752, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x1, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "8f7a"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x3}, @obex={0x5, 0x24, 0x15, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xfd, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfb, 0x0, 0xc}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x201, 0x7, 0x6, 0x5, 0x10}, 0x31, &(0x7f00000007c0)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "8614647c667e9303fa0d766a49f0ebfa"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0xe2, 0x8, 0x5, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3c, 0x4, 0x7fff}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x415}}, {0x27, &(0x7f0000000840)=@string={0x27, 0x3, "6366e065b12850d1fcd8fdedbf590e9d22b72590ee8c10b93703172384c229f89adf92d069"}}]}) syz_usb_control_io(r3, &(0x7f0000000c40)={0x2c, &(0x7f00000008c0)={0x0, 0x8, 0xeb, {0xeb, 0x4, "0a3aa5c27d1cbab6e01cd58a3c9bee05b6b9d5b1b65da8e0ab848ae55871256396a66a574e646baca74bfe88f05855804d62d55115e4e3d4e864fa5e1a37b46967ea66392f1272c72278fcdce6f7f1509a10ef8f372d141a67ab0a810a763e398c4ba2d4a8e58f0e29d9b83b35d62f327b861da80507f0eaf0779d935b1e616abce78b7b57f6de74e0b5bf2250b96ed9990f04d1547dda72b8b414eb4d9f807789bff3e7b6eba93bc67503f2f22ac9bbaa76e8400b8c9374a6cb9ac8823c03e5b0cc4f2108fa55d1a968d0001268818aaa9099bbe85547272acaad9763528cfb01a3ab5a34d91ed556"}}, &(0x7f00000009c0)={0x0, 0x3, 0x99, @string={0x99, 0x3, "e6d79331455f14acb6b08e962e7682cc08aad12262584010024db32b71ff5de40d8168bfcdb807c583a415582c47ce26eac5dca282de7ae85c9bddbe1405cb11b9c3e2e3f876a963b3ff08e88a2693fa90c95fc3fc703fb73c7606740983dcba3c9dda28cf92fc4d1872cc931997f1de2062dd0744a754cbb7c914f6dbbd4a3c57658e4c7223cbe847b1113d8e0f3f0dbdead93431722a"}}, &(0x7f0000000a80)={0x0, 0xf, 0x139, {0x5, 0xf, 0x139, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x1, 0x3}, @generic={0x68, 0x10, 0x4, "9bcf723f85580cc45904f633701225445da365241cc26aaee9ba9713e2636931f882fd6007a22a131409506861164be2240207cc3cf358bcfbc2f1457233ea117fe11e798aeedfa6d4a531b1086137bcb29676d88715e776e54e0add33b7663294d2dc0d79"}, @generic={0xc5, 0x10, 0x4, "498eac351c682ee946c743040140a14d3e1de5990a404c087b3991f8f676bbc1b49f6f9ed3f6f9be94e4a5f4572272fae6fb1bfb6c8dac99e77b5a905505917be3949395376b0af976cafad2617746d77feb4cafb603f98fa21d5632dfe4d61cb3b9fb05fcac624e9fdb332f6f9fed0cf9a3c0883795eefc0fc67f68948d0b4daf8546570d3fa293f4c6c5d358d1fd3131e5711347d9351f87f0413627e4195929ee3f79afe9daeb90da163b973e837e12e6ce29edb28ffed4fe9f8418ed1399ff0b"}]}}, &(0x7f0000000bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3, 0x3, "e882fc15", "9c8a5576"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x8, 0xa3, 0x6, 0x3, 0xa}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c80)={0x40, 0xc, 0x1c, "97a68bee1296ba47daac868ceb32e6f9053ae1326a17b6129de485f2"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x20, 0x20, [0xff]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0xd8}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "c838"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "cccf"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x5}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 22.277747602s ago: executing program 0 (id=6955): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000880), 0x1, 0x101001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x21, 0x2, 0x2) socket(0x2, 0x4, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000001c0), 0x3, 0x0, 0xeeeeeeee}) creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_emit_ethernet(0xce, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, "020000000400000126000400"}, {0x18, 0x4, "0033e4756e009263e712da3df208a5bb1b7ac491ab61af626c6084454a9a"}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0) rename(0x0, &(0x7f00000000c0)='./file0/file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 22.175970114s ago: executing program 6 (id=6956): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002680)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x2, 0x2, 0x2}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000580)=[{0x2, 0x5, 0xa, 0x1}, {0x1, 0x2, 0x8, 0x4}, {0x5, 0x4, 0x5}, {0x5, 0x2, 0xa, 0x1}, {0x5, 0x1, 0x4, 0x6}, {0x4, 0x5, 0x8, 0x8}, {0x2, 0x4, 0xc, 0x5}, {0x0, 0x5, 0xa, 0xa}, {0x5, 0x5, 0xe, 0x3}, {0x4, 0x2, 0x3, 0x5}], 0x10, 0x2, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, r1, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x440, 0x10d) fremovexattr(r4, &(0x7f0000000040)=@known='user.incfs.size\x00') r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000300)={0x2, 0xd2, "c139022197a3c52d70d7ef9ed17a0ad2af66ca0eb0094b48d600913d1eb62c209c1ce3ce23e5750ecc4b3000436696ced9274dd4779cf21bdbe60851067ad40087480bbac07adf580452f2d7882aac5483119639db7b3824d8cdf72706804927e3963762acde354394596b3578107104194b02670903639eef90b556251e7d9ac1e147446ef39055246a4565f71b420bc362f520e783313f416a7f4d2f446fee60ea05f1c955a5c175874cf11f9e5e769277aefa3aba915b2187e46a53b882e5dacf6fc0b7c5be9cf3c0edb606fe1f034ed9"}) write$cgroup_int(r5, &(0x7f0000000040)=0x3, 0x12) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000400)="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") sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) 22.150418022s ago: executing program 1 (id=6957): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902950003010040000904000000010100000a2401000000020102132406912026082810e50163000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) 18.823215128s ago: executing program 1 (id=6958): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) 18.773120576s ago: executing program 6 (id=6959): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x500d}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 18.770857361s ago: executing program 0 (id=6960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000540)={r3, 0x1, 0xe3}, &(0x7f0000000580)=0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 18.6217023s ago: executing program 1 (id=6961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xb0, 0xf8, 0x1c, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'streebog512-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x726d}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x8c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xfffffffffffe0306}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7b}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x2b7135839e911154) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0x8, &(0x7f0000000180)=""/76, &(0x7f0000000200)=0x4c) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0xbf7}, 0x8) 17.454915375s ago: executing program 4 (id=6962): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 17.449352763s ago: executing program 1 (id=6963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x9, @empty, 0x40}}, 0x0, 0x0, 0x30, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3432564e, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x2}}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000800)=[{&(0x7f00000018c0)="09e438d4574c550eef57ff07ea6ce50aec570e3ff2d5ab9887567d24010e05d942d414dc69d83910ba489bf3bdb4d39221444bd00428b932af76806ba4ac2ae0e99c887f929ac94b1aa5cdc69b00144348dfd1ef3a1ceb66f7504ef937b5007927cb6276c21b94506933bd2e41b9235503903bfda1c9b5a013fe7931912575e5097f0000", 0x84}, {&(0x7f0000001800)="930d2c8f19", 0x5}], 0x2}, 0x2000c015) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1, &(0x7f0000000480)=""/205, 0xcd}}], 0x1, 0x0, 0x0) listen(r0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r9) 17.379011452s ago: executing program 7 (id=6877): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x7, 0x141302) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x729242) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x6, 0x1, 0x0) syz_open_dev$loop(0x0, 0x81, 0x2a82) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r3 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000180)) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) munlockall() shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='qnx4\x00', 0x20808c, 0x0) 17.332214584s ago: executing program 0 (id=6964): r0 = socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00', 0x20) r2 = memfd_create(&(0x7f0000000200)='\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xfe\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xa8ddj\x03\xbd\x16\x93\xb9r\x04h\xaa\x1aT\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa3[\x00\xa9C%}C\xf4c\xba\xf9H\x98}<\x98m#\xf5\x9e\xd3\xea\x00\x00\x00\x00', 0x3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) listen(r3, 0x5) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r8 = open(&(0x7f0000000180)='./file0\x00', 0x38080, 0xa0) accept$alg(r8, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x1) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="480fc75fd2b8010000000f01c1da38c442792138b8010000000f01d9c4c16d5e692e0f017a00360f01c2c421795b28f04730aa00900000", 0x37}], 0x1, 0x14, &(0x7f0000000100)=[@cr4={0x1, 0x42002}], 0x1) 17.123837502s ago: executing program 0 (id=6965): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xf, 0x80c, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000100)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000440)="26c37a04f0d40aa6df2b3bd1324332d636ae0e0d86253497612dcaf2a7d9283c74236dc4f43083df568a7b2d5c9ec748f657dcb595194f1b4890872bdcca55e4adfaf13325802f39198844", 0x4b}], 0x2}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000ffff0702", @ANYRES32=0x0, @ANYBLOB="180000000000000084"], 0x48}], 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r3, 0x1, 0x8000, 0x10000}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0xa, 0x0, 0x0, 0xfffff034}, {0x48, 0x4}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd608a37f200142c00fe8000009000000000000000000000bbfe8000000600000500"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000040)={0xa0000007}) write$input_event(r0, &(0x7f0000000400)={{0x0, 0x2710}, 0x5, 0x1, 0x6}, 0x18) 16.219390623s ago: executing program 1 (id=6966): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x40000000000020d, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x19, 0x0, &(0x7f0000000040)="f8ad48cc02cb29dcc8007f5b080038d69f8c018a11e060905e", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], r4, 0x0, '\x00', 0x0, 0x4}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="ffff90b5", @ANYRES16=r5, @ANYBLOB="080027bd7000ffdbdf250100000008000200020000000800020006000000"], 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x800) 16.190903541s ago: executing program 4 (id=6967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x60d832c4, @mcast1, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x9}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x634d83, 0x0) 0s ago: executing program 1 (id=6968): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, 0x0) prlimit64(0x0, 0xa, &(0x7f0000002c00)={0xfffffffffffffe00, 0x28}, &(0x7f0000002c40)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {0x0, 0x1000, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x20000, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) readv(r4, 0x0, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): vsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2202.950104][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6292'. [ 2202.959110][T28142] netlink: 'syz.6.6292': attribute type 30 has an invalid length. [ 2203.052501][T28139] ieee802154 phy0 wpan0: encryption failed: -22 [ 2203.766536][T24835] usbhid 1-1:0.0: can't add hid device: -71 [ 2203.789795][T24835] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2203.826749][T24835] usb 1-1: USB disconnect, device number 78 [ 2205.749112][ T5837] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2205.804839][T28181] xfs: Unexpected value for 'discard' [ 2205.881003][T28180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6305'. [ 2205.953411][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2206.041051][ T5837] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 2206.174980][ T5837] usb 2-1: config 6 has no interface number 0 [ 2206.207908][ T5837] usb 2-1: config 6 interface 200 has no altsetting 0 [ 2206.240609][ T5837] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 2206.291972][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.346349][ T5837] usb 2-1: Product: syz [ 2206.364149][ T5837] usb 2-1: Manufacturer: syz [ 2206.380855][ T5837] usb 2-1: SerialNumber: syz [ 2207.206060][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6307'. [ 2207.880609][T28196] FAULT_INJECTION: forcing a failure. [ 2207.880609][T28196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.949546][T28196] CPU: 0 UID: 0 PID: 28196 Comm: syz.6.6309 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2207.949581][T28196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2207.949596][T28196] Call Trace: [ 2207.949605][T28196] [ 2207.949615][T28196] dump_stack_lvl+0x189/0x250 [ 2207.949652][T28196] ? __pfx____ratelimit+0x10/0x10 [ 2207.949682][T28196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2207.949713][T28196] ? __pfx__printk+0x10/0x10 [ 2207.949755][T28196] should_fail_ex+0x414/0x560 [ 2207.949789][T28196] _copy_to_user+0x31/0xb0 [ 2207.949818][T28196] simple_read_from_buffer+0xe1/0x170 [ 2207.949877][T28196] proc_fail_nth_read+0x1df/0x250 [ 2207.949913][T28196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2207.949947][T28196] ? rw_verify_area+0x258/0x650 [ 2207.949971][T28196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2207.950004][T28196] vfs_read+0x200/0x980 [ 2207.950036][T28196] ? __pfx___mutex_lock+0x10/0x10 [ 2207.950058][T28196] ? __pfx_vfs_read+0x10/0x10 [ 2207.950084][T28196] ? __fget_files+0x2a/0x420 [ 2207.950118][T28196] ? __fget_files+0x3a0/0x420 [ 2207.950146][T28196] ? __fget_files+0x2a/0x420 [ 2207.950194][T28196] ksys_read+0x145/0x250 [ 2207.950222][T28196] ? __pfx_ksys_read+0x10/0x10 [ 2207.950244][T28196] ? fput+0xa0/0xd0 [ 2207.950282][T28196] ? do_syscall_64+0xbe/0x3b0 [ 2207.950306][T28196] do_syscall_64+0xfa/0x3b0 [ 2207.950325][T28196] ? lockdep_hardirqs_on+0x9c/0x150 [ 2207.950358][T28196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.950379][T28196] ? clear_bhb_loop+0x60/0xb0 [ 2207.950407][T28196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.950429][T28196] RIP: 0033:0x7fcc2ff8d33c [ 2207.950450][T28196] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2207.950469][T28196] RSP: 002b:00007fcc30d13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2207.950492][T28196] RAX: ffffffffffffffda RBX: 00007fcc301b5fa0 RCX: 00007fcc2ff8d33c [ 2207.950509][T28196] RDX: 000000000000000f RSI: 00007fcc30d130a0 RDI: 0000000000000005 [ 2207.950524][T28196] RBP: 00007fcc30d13090 R08: 0000000000000000 R09: 0000000000000000 [ 2207.950538][T28196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2207.950551][T28196] R13: 0000000000000000 R14: 00007fcc301b5fa0 R15: 00007ffff34b7dd8 [ 2207.950586][T28196] [ 2208.365835][T28205] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2208.365835][T28205] program syz.0.6310 not setting count and/or reply_len properly [ 2210.822083][T24837] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 2211.548517][ T5837] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 2211.558271][ T5837] dvb-usb: bulk message failed: -71 (3/0) [ 2211.569246][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2211.582291][ T5837] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 2211.582588][T24837] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 2211.590966][ T5837] usb 2-1: media controller created [ 2211.630484][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2211.658147][T24837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2211.687629][T24837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2211.718850][T24837] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2211.722952][ T5837] dvb-usb: bulk message failed: -71 (6/0) [ 2211.748188][T24837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2211.762586][ T5837] dvb-usb: bulk message failed: -71 (6/0) [ 2211.772484][ T5837] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 2211.790175][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input146 [ 2211.845116][ T5837] dvb-usb: schedule remote query interval to 150 msecs. [ 2211.938993][T24837] usb 5-1: SerialNumber: syz [ 2212.000891][ T5837] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 2212.611699][T14360] dvb-usb: bulk message failed: -71 (1/0) [ 2212.617596][T14360] dvb-usb: error while querying for an remote control event. [ 2212.801673][ T5837] usb 2-1: USB disconnect, device number 48 [ 2212.808255][T24837] usb 5-1: can't set config #1, error -71 [ 2213.038141][T24837] usb 5-1: USB disconnect, device number 18 [ 2213.946505][T18795] Bluetooth: hci3: command 0x0406 tx timeout [ 2214.202768][ T5837] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 2214.777525][T28249] loop2: detected capacity change from 0 to 7 [ 2214.798126][T28249] Dev loop2: unable to read RDB block 7 [ 2214.804978][T28249] loop2: unable to read partition table [ 2214.815513][T28249] loop2: partition table beyond EOD, truncated [ 2214.823150][T28249] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2215.043859][T28255] FAULT_INJECTION: forcing a failure. [ 2215.043859][T28255] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.072385][T28255] CPU: 0 UID: 0 PID: 28255 Comm: syz.1.6322 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2215.072417][T28255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2215.072431][T28255] Call Trace: [ 2215.072439][T28255] [ 2215.072449][T28255] dump_stack_lvl+0x189/0x250 [ 2215.072487][T28255] ? __pfx____ratelimit+0x10/0x10 [ 2215.072518][T28255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2215.072552][T28255] ? __pfx__printk+0x10/0x10 [ 2215.072579][T28255] ? __pfx___might_resched+0x10/0x10 [ 2215.072609][T28255] ? fs_reclaim_acquire+0x7d/0x100 [ 2215.072643][T28255] should_fail_ex+0x414/0x560 [ 2215.072675][T28255] should_failslab+0xa8/0x100 [ 2215.072705][T28255] __kmalloc_noprof+0xcb/0x4f0 [ 2215.072729][T28255] ? kfree+0x4d/0x440 [ 2215.072748][T28255] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2215.072787][T28255] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2215.072821][T28255] ? tomoyo_domain+0xda/0x130 [ 2215.072860][T28255] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2215.072887][T28255] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2215.072917][T28255] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2215.072960][T28255] ? __lock_acquire+0xab9/0xd20 [ 2215.073009][T28255] ? __fget_files+0x2a/0x420 [ 2215.073049][T28255] ? __fget_files+0x2a/0x420 [ 2215.073077][T28255] ? __fget_files+0x3a0/0x420 [ 2215.073104][T28255] ? __fget_files+0x2a/0x420 [ 2215.073137][T28255] security_file_ioctl+0xcb/0x2d0 [ 2215.073168][T28255] __se_sys_ioctl+0x47/0x170 [ 2215.073194][T28255] do_syscall_64+0xfa/0x3b0 [ 2215.073220][T28255] ? lockdep_hardirqs_on+0x9c/0x150 [ 2215.073250][T28255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.073271][T28255] ? clear_bhb_loop+0x60/0xb0 [ 2215.073297][T28255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.073324][T28255] RIP: 0033:0x7f307838e929 [ 2215.073343][T28255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2215.073361][T28255] RSP: 002b:00007f30791af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2215.073383][T28255] RAX: ffffffffffffffda RBX: 00007f30785b5fa0 RCX: 00007f307838e929 [ 2215.073399][T28255] RDX: 00002000000000c0 RSI: 00000000c0045009 RDI: 0000000000000005 [ 2215.073414][T28255] RBP: 00007f30791af090 R08: 0000000000000000 R09: 0000000000000000 [ 2215.073427][T28255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.073440][T28255] R13: 0000000000000000 R14: 00007f30785b5fa0 R15: 00007ffe41bd79d8 [ 2215.073474][T28255] [ 2215.075191][T28255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2216.246873][T28264] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2216.246873][T28264] program syz.0.6323 not setting count and/or reply_len properly [ 2217.537076][T28297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6332'. [ 2217.625220][T28297] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2217.676574][T28297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6332'. [ 2217.876169][T28297] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2217.955374][T28297] bond1 (unregistering): Released all slaves [ 2218.136620][T28313] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2218.136620][T28313] program syz.0.6336 not setting count and/or reply_len properly [ 2219.688168][T28334] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2219.688168][T28334] program syz.7.6340 not setting count and/or reply_len properly [ 2220.496279][T28344] mkiss: ax0: crc mode is auto. [ 2220.835007][T28349] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 2221.239360][T28354] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2221.747471][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.842872][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.430218][T28379] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2223.437698][T28379] overlayfs: failed to set xattr on upper [ 2223.443470][T28379] overlayfs: ...falling back to redirect_dir=nofollow. [ 2223.450412][T28379] overlayfs: ...falling back to index=off. [ 2223.456290][T28379] overlayfs: ...falling back to uuid=null. [ 2224.176304][T28403] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 2224.269682][T28405] loop6: detected capacity change from 0 to 524287999 [ 2224.286099][T28405] buffer_io_error: 6 callbacks suppressed [ 2224.292050][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.305678][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.315677][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.325652][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.335885][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.346273][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.357190][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.367146][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.376403][T28405] ldm_validate_partition_table(): Disk read failed. [ 2224.385617][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.395900][T28405] Buffer I/O error on dev loop6, logical block 0, async page read [ 2224.407956][T28405] Dev loop6: unable to read RDB block 0 [ 2224.422658][T28405] loop6: unable to read partition table [ 2224.431673][T28405] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2225.255906][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6366'. [ 2226.167113][T28419] xfs: Unexpected value for 'discard' [ 2227.036886][ T5837] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2227.056090][T28425] netlink: 'syz.7.6368': attribute type 1 has an invalid length. [ 2227.070352][T28425] netlink: 600 bytes leftover after parsing attributes in process `syz.7.6368'. [ 2227.193245][ T5837] usb 2-1: device descriptor read/64, error -71 [ 2227.556460][ T5837] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2231.542464][T24837] kernel write not supported for file /input/event0 (pid: 24837 comm: kworker/1:15) [ 2232.398641][T28487] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 2233.173869][ T30] audit: type=1400 audit(1749487153.747:959): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=28499 comm="syz.0.6392" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2233.365888][ T5922] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 2233.597201][ T5922] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2234.060666][T18816] Bluetooth: hci5: command 0x0406 tx timeout [ 2235.470245][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2235.481758][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2235.505286][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.515016][ T5922] usb 2-1: Product: syz [ 2235.526950][ T5922] usb 2-1: Manufacturer: syz [ 2235.528995][T28512] FAULT_INJECTION: forcing a failure. [ 2235.528995][T28512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2235.531620][ T5922] usb 2-1: SerialNumber: syz [ 2235.569818][T28512] CPU: 0 UID: 0 PID: 28512 Comm: syz.4.6396 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2235.569852][T28512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2235.569867][T28512] Call Trace: [ 2235.569876][T28512] [ 2235.569887][T28512] dump_stack_lvl+0x189/0x250 [ 2235.569928][T28512] ? __pfx____ratelimit+0x10/0x10 [ 2235.569962][T28512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2235.569994][T28512] ? __pfx__printk+0x10/0x10 [ 2235.570017][T28512] ? __might_fault+0xb0/0x130 [ 2235.570056][T28512] should_fail_ex+0x414/0x560 [ 2235.570091][T28512] _copy_from_user+0x2d/0xb0 [ 2235.570113][T28512] kstrtouint_from_user+0xc4/0x170 [ 2235.570148][T28512] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2235.570207][T28512] proc_fail_nth_write+0x88/0x240 [ 2235.570240][T28512] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2235.570278][T28512] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2235.570312][T28512] vfs_write+0x27e/0xa90 [ 2235.570346][T28512] ? __pfx_vfs_write+0x10/0x10 [ 2235.570372][T28512] ? __fget_files+0x2a/0x420 [ 2235.570406][T28512] ? __fget_files+0x3a0/0x420 [ 2235.570434][T28512] ? __fget_files+0x2a/0x420 [ 2235.570475][T28512] ksys_write+0x145/0x250 [ 2235.570503][T28512] ? __pfx_ksys_write+0x10/0x10 [ 2235.570535][T28512] ? do_syscall_64+0xbe/0x3b0 [ 2235.570578][T28512] do_syscall_64+0xfa/0x3b0 [ 2235.570596][T28512] ? lockdep_hardirqs_on+0x9c/0x150 [ 2235.570628][T28512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.570650][T28512] ? clear_bhb_loop+0x60/0xb0 [ 2235.570677][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.570698][T28512] RIP: 0033:0x7f381678d3df [ 2235.570718][T28512] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2235.570738][T28512] RSP: 002b:00007f38145d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2235.570761][T28512] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f381678d3df [ 2235.570776][T28512] RDX: 0000000000000001 RSI: 00007f38145d50a0 RDI: 0000000000000004 [ 2235.570790][T28512] RBP: 00007f38145d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2235.570804][T28512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2235.570817][T28512] R13: 0000000000000001 R14: 00007f38169b6080 R15: 00007ffe05cdfbe8 [ 2235.570851][T28512] [ 2235.883427][T28494] netlink: 'syz.1.6389': attribute type 10 has an invalid length. [ 2235.893204][ T5922] usb 2-1: 0:2 : does not exist [ 2235.906424][ T5922] usb 2-1: USB disconnect, device number 51 [ 2236.167098][T28523] 9pnet_fd: Insufficient options for proto=fd [ 2236.858869][T28528] openvswitch: netlink: Actions may not be safe on all matching packets [ 2238.030926][ T30] audit: type=1400 audit(1749487158.607:960): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=28533 comm="syz.1.6403" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2238.963993][ T78] wlan1: Trigger new scan to find an IBSS to join [ 2239.496283][T28545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2239.600180][T28553] tipc: Started in network mode [ 2239.609308][T28554] 9pnet_virtio: no channels available for device blocksize : 1 [ 2239.609308][T28554] ivsize : 0 [ 2239.609308][T28554] maxauthsize : 0 [ 2239.609308][T28554] geniv : [ 2239.609308][T28554] [ 2239.609308][T28554] name : ecb(aes) [ 2239.609308][T28554] driver : ecb(aes-aesni) [ 2239.609308][T28554] module : kernel [ 2239.609308][T28554] priority : 300 [ 2239.609308][T28554] refcnt : 1 [ 2239.609308][T28554] selftest : passed [ 2239.609308][T28554] internal : no [ 2239.609308][T28554] type : lskcipher [ 2239.609308][T28554] blocksize : 16 [ 2239.609308][T28554] min keysize : 16 [ 2239.609308][T28554] max keysize : 32 [ 2239.609308][T28554] ivsize : 0 [ 2239.609308][T28554] chunksize : 16 [ 2239.609308][T28554] statesize : 0 [ 2239.609308][T28554] [ 2239.609308][T28554] name : essiv(cbc(aes),sha256) [ 2239.609308][T28554] driver : essiv(cbc-aes-aesni,sha256-x86_64) [ 2239.609308][T28554] module : kernel [ 2239.609308][T28554] priority : 400 [ 2239.609308][T28554] refcnt : 1 [ 2239.609308][T28554] selftest : passed [ 2239.609308][T28554] internal : no [ 2239.609308][T28554] type : skcipher [ 2239.609308][T28554] async : no [ 2239.609308][T28554] blocksize : 16 [ 2239.609308][T28554] min keysize : 16 [ 2239.609308][T28554] max keysize : 32 [ 2239.609308][T28554] ivsize : 16 [ 2239.609308][T28554] chunksize : 16 [ 2239.609308][T28554] walksize : 16 [ 2239.609308][T28554] statesize : 0 [ 2239.609308][T28554] [ 2239.609308][T28554] name : hmac(sha512) [ 2239.609308][T28554] driver : hmac-shash(sha512-avx2) [ 2239.609308][T28554] module : kernel [ 2239.609308][T28554] priority : 170 [ 2239.609308][T28554] refcnt : 2 [ 2239.609308][T28554] selftest : passed [ 2239.609308][T28554] internal : no [ 2239.609308][T28554] type : shash [ 2239.609308][T28554] blocksize : 128 [ 2239.781252][T28553] tipc: Node identity ac14140c, cluster identity 4711 [ 2240.037306][T28565] FAULT_INJECTION: forcing a failure. [ 2240.037306][T28565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2240.051348][T28565] CPU: 0 UID: 0 PID: 28565 Comm: syz.0.6408 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2240.051380][T28565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2240.051395][T28565] Call Trace: [ 2240.051405][T28565] [ 2240.051415][T28565] dump_stack_lvl+0x189/0x250 [ 2240.051453][T28565] ? __pfx____ratelimit+0x10/0x10 [ 2240.051487][T28565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2240.051520][T28565] ? __pfx__printk+0x10/0x10 [ 2240.051543][T28565] ? __might_fault+0xb0/0x130 [ 2240.051582][T28565] should_fail_ex+0x414/0x560 [ 2240.051617][T28565] fpu__restore_sig+0x1bb/0x1100 [ 2240.051647][T28565] ? __lock_acquire+0xab9/0xd20 [ 2240.051688][T28565] ? __pfx_fpu__restore_sig+0x10/0x10 [ 2240.051747][T28565] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 2240.051783][T28565] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 2240.051853][T28565] ? do_syscall_64+0xbe/0x3b0 [ 2240.051878][T28565] do_syscall_64+0xfa/0x3b0 [ 2240.051899][T28565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2240.051921][T28565] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2240.051944][T28565] ? clear_bhb_loop+0x60/0xb0 [ 2240.051971][T28565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2240.051992][T28565] RIP: 0033:0x7fcc3dd8e927 [ 2240.052012][T28565] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 2240.052032][T28565] RSP: 002b:00007fcc3ec71038 EFLAGS: 00000246 [ 2240.052052][T28565] RAX: 000000000000012b RBX: 00007fcc3dfb6160 RCX: 00007fcc3dd8e929 [ 2240.052068][T28565] RDX: 0000000000000001 RSI: 0000200000000f00 RDI: 0000000000000006 [ 2240.052083][T28565] RBP: 00007fcc3ec71090 R08: 0000000000000000 R09: 0000000000000000 [ 2240.052097][T28565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2240.052110][T28565] R13: 0000000000000000 R14: 00007fcc3dfb6160 R15: 00007ffe23dbfc78 [ 2240.052145][T28565] [ 2240.590085][T28553] tipc: Enabled bearer , priority 10 [ 2240.610875][T28554] netlink: 'syz.4.6405': attribute type 3 has an invalid length. [ 2240.656325][T28563] syz_tun: entered allmulticast mode [ 2240.691458][T28557] syz_tun: left allmulticast mode [ 2240.917112][T28571] loop7: detected capacity change from 0 to 524287999 [ 2241.585548][T14360] tipc: Node number set to 2886997004 [ 2241.904380][ T30] audit: type=1400 audit(1749487162.468:961): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=28589 comm="syz.0.6418" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2242.382404][T18816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2242.393768][T18816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2242.404883][T18816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2242.419238][T18816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2242.475969][T18816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2242.648190][T28599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2242.864774][T17487] wlan1: Trigger new scan to find an IBSS to join [ 2242.956761][T28613] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6423'. [ 2242.967880][T24836] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2242.996932][T28613] ufs: You didn't specify the type of your ufs filesystem [ 2242.996932][T28613] [ 2242.996932][T28613] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2242.996932][T28613] [ 2242.996932][T28613] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2243.028652][T28613] ufs: ufstype=old is supported read-only [ 2243.037023][T28613] ufs: ufs_fill_super(): bad magic number [ 2243.540616][T24661] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2243.564519][T24836] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 2243.572041][T24661] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.573612][T24836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.646252][T24836] usb 5-1: config 0 descriptor?? [ 2244.144627][T24835] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 2244.211372][T18265] wlan1: Creating new IBSS network, BSSID ae:24:ce:b4:72:57 [ 2244.276946][T24836] kaweth 5-1:0.0: Firmware present in device. [ 2244.445867][T24836] kaweth 5-1:0.0: Statistics collection: 0 [ 2244.493173][T24835] usb 1-1: config index 0 descriptor too short (expected 149, got 148) [ 2244.506544][T24836] kaweth 5-1:0.0: Multicast filter limit: 0 [ 2244.544749][T18816] Bluetooth: hci0: command tx timeout [ 2244.556534][T24836] kaweth 5-1:0.0: MTU: 0 [ 2244.585514][T24835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2244.611385][T24836] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 2244.699629][T24661] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2244.728953][T24835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2244.853524][T24661] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.891525][T24835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2244.985603][T24835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2245.147340][T24835] usb 1-1: SerialNumber: syz [ 2245.443769][T28624] netlink: 'syz.4.6424': attribute type 11 has an invalid length. [ 2245.708276][T24835] usb 1-1: 0:2 : does not exist [ 2246.214314][T24661] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2246.342128][T24661] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.614126][T18816] Bluetooth: hci0: command tx timeout [ 2247.125470][T24841] usb 1-1: USB disconnect, device number 79 [ 2247.159041][T24836] kaweth 5-1:0.0: kaweth interface created at eth13 [ 2247.221217][T24661] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2247.232065][T24661] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.286032][T24834] usb 5-1: USB disconnect, device number 19 [ 2248.017349][T28600] chnl_net:caif_netlink_parms(): no params data found [ 2248.753858][T18816] Bluetooth: hci0: command tx timeout [ 2248.842704][T24661] bridge_slave_1: left allmulticast mode [ 2248.859798][T28655] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2248.896795][T24661] bridge_slave_1: left promiscuous mode [ 2249.011946][T24661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.022692][T24661] bridge_slave_0: left allmulticast mode [ 2249.036333][T24661] bridge_slave_0: left promiscuous mode [ 2249.043101][T24661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.775768][T18816] Bluetooth: hci0: command tx timeout [ 2251.301003][T24661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2251.311671][T24661] bond_slave_0: left promiscuous mode [ 2251.320149][T24661] bond0 (unregistering): Released all slaves [ 2251.356578][T28600] bridge0: port 1(bridge_slave_0) entered blocking state [ 2251.366149][T28600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.373478][T28600] bridge_slave_0: entered allmulticast mode [ 2251.381702][T28600] bridge_slave_0: entered promiscuous mode [ 2251.391281][T28600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2251.398724][T28600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.426970][T28600] bridge_slave_1: entered allmulticast mode [ 2251.435253][T28600] bridge_slave_1: entered promiscuous mode [ 2251.486358][T24841] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2251.530772][T28600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2251.564545][T24661] tipc: Left network mode [ 2251.605466][T24661] IPVS: stopping master sync thread 20366 ... [ 2251.753446][T24841] usb 5-1: device descriptor read/64, error -71 [ 2251.803652][T28600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2252.024216][T24841] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2252.032445][T28600] team0: Port device team_slave_0 added [ 2252.276164][T28600] team0: Port device team_slave_1 added [ 2252.374273][T24661] hsr_slave_0: left promiscuous mode [ 2252.374392][T24841] usb 5-1: device descriptor read/64, error -71 [ 2252.388153][T24661] hsr_slave_1: left promiscuous mode [ 2252.448582][T24661] veth1_macvtap: left promiscuous mode [ 2252.462991][T24661] veth0_macvtap: left promiscuous mode [ 2252.472021][T24661] veth1_vlan: left promiscuous mode [ 2252.491406][T24661] veth0_vlan: left promiscuous mode [ 2252.525046][T24841] usb usb5-port1: attempt power cycle [ 2252.893395][T24841] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2252.971266][T24841] usb 5-1: device descriptor read/8, error -71 [ 2253.437354][T24841] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2253.447471][T28706] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2253.483891][T24841] usb 5-1: device descriptor read/8, error -71 [ 2253.596570][T24841] usb usb5-port1: unable to enumerate USB device [ 2253.931116][T28716] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2253.931116][T28716] program syz.0.6453 not setting count and/or reply_len properly [ 2254.986492][T24661] team0 (unregistering): Port device team_slave_1 removed [ 2255.036878][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fde5400: rx timeout, send abort [ 2255.217160][T24661] team0 (unregistering): Port device team_slave_0 removed [ 2255.257769][T24841] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 2255.407045][T24841] usb 2-1: device descriptor read/64, error -71 [ 2255.536973][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fde4400: rx timeout, send abort [ 2255.547089][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fde5400: abort rx timeout. Force session deactivation [ 2255.858790][T24841] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 2256.002133][T24841] usb 2-1: device descriptor read/64, error -71 [ 2256.045204][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fde4400: abort rx timeout. Force session deactivation [ 2256.122654][T24841] usb usb2-port1: attempt power cycle [ 2256.300702][T28600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2256.311868][T28600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.337827][ C0] vkms_vblank_simulate: vblank timer overrun [ 2256.372854][T28600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.421982][T28600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.454352][T28600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.480704][T24841] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2256.539476][T24841] usb 2-1: device descriptor read/8, error -71 [ 2256.565762][T28748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2256.597249][T28600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2256.773847][T28600] hsr_slave_0: entered promiscuous mode [ 2256.781520][T28600] hsr_slave_1: entered promiscuous mode [ 2256.789345][T28600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2256.799940][T28600] Cannot create hsr debugfs directory [ 2256.812902][T24841] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2256.831847][T24661] IPVS: stop unused estimator thread 0... [ 2256.845022][T24841] usb 2-1: device descriptor read/8, error -71 [ 2257.080319][T24841] usb usb2-port1: unable to enumerate USB device [ 2257.289419][T28756] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2257.289419][T28756] program syz.4.6465 not setting count and/or reply_len properly [ 2259.093340][T24836] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2259.210854][T28600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2259.228491][T28600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2259.245057][T28600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2259.275497][T24836] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2259.286403][T24836] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2259.296546][T24836] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.308506][T24836] usb 2-1: config 220 has no interface number 2 [ 2259.315448][T24836] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2259.315883][T28600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2259.328924][T24836] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2259.328982][T24836] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2259.329034][T24836] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2259.350685][T24836] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2259.370250][T24836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.378931][T24836] usb 2-1: Product: syz [ 2259.385195][T24836] usb 2-1: Manufacturer: syz [ 2259.390360][T24836] usb 2-1: SerialNumber: syz [ 2259.617115][T28600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2259.705855][T28600] 8021q: adding VLAN 0 to HW filter on device team0 [ 2259.715228][T28767] netlink: 'syz.1.6468': attribute type 29 has an invalid length. [ 2259.755670][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 2259.762964][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2259.771835][T28767] netlink: 'syz.1.6468': attribute type 29 has an invalid length. [ 2259.782292][T28767] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6468'. [ 2259.827938][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 2259.835174][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2259.991265][T28767] overlayfs: missing 'lowerdir' [ 2260.222121][T24836] usb 2-1: selecting invalid altsetting 0 [ 2260.249087][T24836] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 2260.255783][T24836] usb 2-1: No valid video chain found. [ 2260.269336][T24836] usb 2-1: selecting invalid altsetting 0 [ 2260.275327][T24836] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2260.311178][T24836] usb 2-1: USB disconnect, device number 56 [ 2260.679562][T28600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2261.813832][T28600] veth0_vlan: entered promiscuous mode [ 2263.118577][T28821] netlink: 'syz.7.6477': attribute type 4 has an invalid length. [ 2263.157390][T24837] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 2263.166817][T28600] veth1_vlan: entered promiscuous mode [ 2263.392700][T24837] usb 2-1: config index 0 descriptor too short (expected 149, got 148) [ 2263.402501][T28600] veth0_macvtap: entered promiscuous mode [ 2263.424428][T24837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.446896][T28600] veth1_macvtap: entered promiscuous mode [ 2263.462044][T24837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2263.470316][T28827] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2263.470316][T28827] program syz.4.6478 not setting count and/or reply_len properly [ 2263.486827][T24837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2263.844051][T24837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2263.849262][T28600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2263.876987][T24837] usb 2-1: SerialNumber: syz [ 2263.879125][T28600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2263.910241][T28600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2263.910593][T24837] usb 2-1: 0:2 : does not exist [ 2263.926256][T28600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2263.942029][T28600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2263.957981][T28600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.172496][T24837] usb 2-1: USB disconnect, device number 57 [ 2264.737765][T21193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2264.756205][T21193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2264.841152][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2264.849470][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2264.922029][T24835] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2265.061985][T24835] usb 5-1: device descriptor read/64, error -71 [ 2265.314326][T24835] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2265.471928][T24835] usb 5-1: device descriptor read/64, error -71 [ 2265.592159][T24835] usb usb5-port1: attempt power cycle [ 2266.374324][T24835] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2266.429501][T24835] usb 5-1: device descriptor read/8, error -71 [ 2266.613482][T28868] fuse: Bad value for 'fd' [ 2266.752633][T24835] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2266.792400][T24835] usb 5-1: device descriptor read/8, error -71 [ 2266.953963][T24835] usb usb5-port1: unable to enumerate USB device [ 2267.072486][T28874] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2267.072486][T28874] program syz.0.6489 not setting count and/or reply_len properly [ 2267.979109][T28882] gfs2: gfs2 mount does not exist [ 2268.658680][T28887] FAULT_INJECTION: forcing a failure. [ 2268.658680][T28887] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.671516][T28887] CPU: 1 UID: 0 PID: 28887 Comm: syz.7.6492 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2268.671544][T28887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2268.671559][T28887] Call Trace: [ 2268.671568][T28887] [ 2268.671579][T28887] dump_stack_lvl+0x189/0x250 [ 2268.671617][T28887] ? __pfx____ratelimit+0x10/0x10 [ 2268.671651][T28887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2268.671683][T28887] ? __pfx__printk+0x10/0x10 [ 2268.671708][T28887] ? __pfx___might_resched+0x10/0x10 [ 2268.671740][T28887] ? fs_reclaim_acquire+0x7d/0x100 [ 2268.671777][T28887] should_fail_ex+0x414/0x560 [ 2268.671811][T28887] should_failslab+0xa8/0x100 [ 2268.671842][T28887] __kmalloc_noprof+0xcb/0x4f0 [ 2268.671867][T28887] ? sock_kmalloc+0xd6/0x160 [ 2268.671912][T28887] sock_kmalloc+0xd6/0x160 [ 2268.671945][T28887] skcipher_recvmsg+0x55c/0x11c0 [ 2268.671998][T28887] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2268.672026][T28887] ? __lock_acquire+0xab9/0xd20 [ 2268.672058][T28887] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2268.672084][T28887] ? security_socket_recvmsg+0x7e/0x2e0 [ 2268.672109][T28887] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2268.672140][T28887] sock_recvmsg+0x229/0x270 [ 2268.672179][T28887] ____sys_recvmsg+0x1c9/0x460 [ 2268.672219][T28887] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2268.672267][T28887] ? import_iovec+0x74/0xa0 [ 2268.672293][T28887] ___sys_recvmsg+0x1b5/0x510 [ 2268.672329][T28887] ? __pfx____sys_recvmsg+0x10/0x10 [ 2268.672387][T28887] ? __fget_files+0x3a0/0x420 [ 2268.672430][T28887] do_recvmmsg+0x307/0x770 [ 2268.672469][T28887] ? __pfx_do_recvmmsg+0x10/0x10 [ 2268.672517][T28887] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2268.672574][T28887] __x64_sys_recvmmsg+0x190/0x240 [ 2268.672609][T28887] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2268.672634][T28887] ? rcu_is_watching+0x15/0xb0 [ 2268.672667][T28887] ? do_syscall_64+0xbe/0x3b0 [ 2268.672687][T28887] do_syscall_64+0xfa/0x3b0 [ 2268.672702][T28887] ? lockdep_hardirqs_on+0x9c/0x150 [ 2268.672729][T28887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2268.672747][T28887] ? clear_bhb_loop+0x60/0xb0 [ 2268.672769][T28887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2268.672787][T28887] RIP: 0033:0x7f1b8058e929 [ 2268.672803][T28887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2268.672819][T28887] RSP: 002b:00007f1b7e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2268.672839][T28887] RAX: ffffffffffffffda RBX: 00007f1b807b5fa0 RCX: 00007f1b8058e929 [ 2268.672853][T28887] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 2268.672864][T28887] RBP: 00007f1b7e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2268.672876][T28887] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 2268.672897][T28887] R13: 0000000000000000 R14: 00007f1b807b5fa0 R15: 00007fff0568dbf8 [ 2268.672925][T28887] [ 2270.135854][T28904] vivid-002: disconnect [ 2270.141917][T28903] vivid-002: reconnect [ 2270.431449][T24837] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2270.745966][T28919] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2270.745966][T28919] program syz.1.6503 not setting count and/or reply_len properly [ 2270.753691][T24837] usb 1-1: device descriptor read/64, error -71 [ 2271.142060][T24837] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2271.395479][T24837] usb 1-1: device descriptor read/64, error -71 [ 2271.521914][T24837] usb usb1-port1: attempt power cycle [ 2271.950143][T24837] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2271.991915][T24837] usb 1-1: device descriptor read/8, error -71 [ 2272.251012][T24837] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2272.273832][T24837] usb 1-1: device descriptor read/8, error -71 [ 2272.353121][T14360] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2272.385915][T24837] usb usb1-port1: unable to enumerate USB device [ 2272.522863][T14360] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.541104][T14360] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2272.560320][T14360] usb 5-1: config 1 has no interface number 0 [ 2272.570503][T14360] usb 5-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 2272.592492][T14360] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.621231][T14360] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2272.639820][T14360] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.48 [ 2272.655007][T14360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.665557][T14360] usb 5-1: Product: syz [ 2272.669868][T14360] usb 5-1: Manufacturer: syz [ 2272.676953][T14360] usb 5-1: SerialNumber: syz [ 2274.174337][T14360] cdc_ncm 5-1:1.1: bind() failure [ 2274.427640][T14360] usb 5-1: USB disconnect, device number 28 [ 2276.479921][T24837] IPVS: starting estimator thread 0... [ 2276.588858][T28967] xfs: Unexpected value for 'discard' [ 2276.650814][T28966] IPVS: using max 26 ests per chain, 62400 per kthread [ 2277.127309][ T3566] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2277.595394][ T30] audit: type=1326 audit(1749487198.172:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28976 comm="syz.7.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2277.925337][T28981] FAULT_INJECTION: forcing a failure. [ 2277.925337][T28981] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.076601][ T30] audit: type=1326 audit(1749487198.212:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28976 comm="syz.7.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2278.166497][T28981] CPU: 0 UID: 0 PID: 28981 Comm: syz.1.6523 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2278.166529][T28981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2278.166543][T28981] Call Trace: [ 2278.166553][T28981] [ 2278.166563][T28981] dump_stack_lvl+0x189/0x250 [ 2278.166599][T28981] ? __pfx____ratelimit+0x10/0x10 [ 2278.166631][T28981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2278.166662][T28981] ? __pfx__printk+0x10/0x10 [ 2278.166686][T28981] ? lock_acquire+0x175/0x360 [ 2278.166712][T28981] ? __pfx___might_resched+0x10/0x10 [ 2278.166746][T28981] should_fail_ex+0x414/0x560 [ 2278.166777][T28981] should_failslab+0xa8/0x100 [ 2278.166805][T28981] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2278.166829][T28981] ? preempt_schedule_irq+0xb5/0x150 [ 2278.166858][T28981] ? __alloc_skb+0x112/0x2d0 [ 2278.166886][T28981] __alloc_skb+0x112/0x2d0 [ 2278.166913][T28981] netlink_sendmsg+0x5c6/0xb30 [ 2278.166946][T28981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2278.166972][T28981] ? trace_irq_disable+0x37/0x110 [ 2278.166999][T28981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2278.167024][T28981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2278.167050][T28981] __sock_sendmsg+0x219/0x270 [ 2278.167085][T28981] ____sys_sendmsg+0x505/0x830 [ 2278.167117][T28981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2278.167153][T28981] ? import_iovec+0x74/0xa0 [ 2278.167177][T28981] ___sys_sendmsg+0x21f/0x2a0 [ 2278.167205][T28981] ? __pfx____sys_sendmsg+0x10/0x10 [ 2278.167275][T28981] ? __fget_files+0x2a/0x420 [ 2278.167301][T28981] ? __fget_files+0x3a0/0x420 [ 2278.167338][T28981] __x64_sys_sendmsg+0x19b/0x260 [ 2278.167367][T28981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2278.167416][T28981] do_syscall_64+0xfa/0x3b0 [ 2278.167436][T28981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.167455][T28981] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2278.167475][T28981] ? clear_bhb_loop+0x60/0xb0 [ 2278.167500][T28981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.167519][T28981] RIP: 0033:0x7f307838e929 [ 2278.167538][T28981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2278.167556][T28981] RSP: 002b:00007f30791af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2278.167578][T28981] RAX: ffffffffffffffda RBX: 00007f30785b5fa0 RCX: 00007f307838e929 [ 2278.167594][T28981] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000003 [ 2278.167607][T28981] RBP: 00007f30791af090 R08: 0000000000000000 R09: 0000000000000000 [ 2278.167619][T28981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.167631][T28981] R13: 0000000000000000 R14: 00007f30785b5fa0 R15: 00007ffe41bd79d8 [ 2278.167662][T28981] [ 2278.485227][ T30] audit: type=1326 audit(1749487198.232:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28976 comm="syz.7.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2278.512828][ T30] audit: type=1326 audit(1749487198.242:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28976 comm="syz.7.6522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2279.376415][T28996] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2279.557396][T29002] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2279.557396][T29002] program syz.7.6526 not setting count and/or reply_len properly [ 2280.634224][T29007] Invalid ELF header type: 0 != 1 [ 2280.920827][T29015] xfs: Unexpected value for 'discard' [ 2281.640691][T29018] @: renamed from vlan0 (while UP) [ 2282.516549][T24837] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 2282.874105][T29035] netlink: 'syz.4.6536': attribute type 10 has an invalid length. [ 2282.990463][T29035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6536'. [ 2283.179371][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.193419][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2287.083581][T24833] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 2287.259494][T29035] team0: Port device geneve0 added [ 2287.676619][T24833] usb 1-1: device descriptor read/all, error -71 [ 2288.504334][T29050] veth0: entered promiscuous mode [ 2288.520513][T29049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2288.696063][T29055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2288.790955][T29050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6541'. [ 2289.110407][T29048] veth0: left promiscuous mode [ 2289.468359][T29061] xfs: Unexpected value for 'discard' [ 2292.660731][T29109] syz_tun: entered allmulticast mode [ 2292.667387][T29108] syz_tun: left allmulticast mode [ 2292.698044][T29104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2292.997437][T14360] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2293.576528][T29120] xfs: Unexpected value for 'discard' [ 2294.078634][T14360] usb 5-1: Using ep0 maxpacket: 8 [ 2294.086395][T14360] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2294.096653][T14360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.602383][T14360] usb 5-1: can't set config #252, error -71 [ 2295.618652][T14360] usb 5-1: USB disconnect, device number 30 [ 2295.790770][ T30] audit: type=1326 audit(1749487216.374:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.831900][ T30] audit: type=1326 audit(1749487216.404:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.861582][ T30] audit: type=1326 audit(1749487216.404:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.892418][T29135] block nbd7: not configured, cannot reconfigure [ 2295.903479][ T30] audit: type=1326 audit(1749487216.404:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.903539][ T30] audit: type=1326 audit(1749487216.404:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.903585][ T30] audit: type=1326 audit(1749487216.404:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.903631][ T30] audit: type=1326 audit(1749487216.404:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.903677][ T30] audit: type=1326 audit(1749487216.404:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.903726][ T30] audit: type=1326 audit(1749487216.414:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.903773][ T30] audit: type=1326 audit(1749487216.414:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29131 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307838e929 code=0x7ffc0000 [ 2295.904451][T29135] netlink: 'syz.7.6566': attribute type 6 has an invalid length. [ 2295.904470][T29135] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6566'. [ 2295.916020][T29139] FAULT_INJECTION: forcing a failure. [ 2295.916020][T29139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2296.126056][T29138] FAULT_INJECTION: forcing a failure. [ 2296.126056][T29138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2296.180273][ T5922] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2296.266712][T29139] CPU: 1 UID: 0 PID: 29139 Comm: syz.4.6565 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2296.266743][T29139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2296.266756][T29139] Call Trace: [ 2296.266765][T29139] [ 2296.266775][T29139] dump_stack_lvl+0x189/0x250 [ 2296.266812][T29139] ? __pfx____ratelimit+0x10/0x10 [ 2296.266845][T29139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2296.266877][T29139] ? __pfx__printk+0x10/0x10 [ 2296.266913][T29139] should_fail_ex+0x414/0x560 [ 2296.266945][T29139] strncpy_from_user+0x36/0x290 [ 2296.266976][T29139] path_getxattrat+0x122/0x400 [ 2296.267009][T29139] ? __pfx_path_getxattrat+0x10/0x10 [ 2296.267055][T29139] ? __pfx_ksys_write+0x10/0x10 [ 2296.267078][T29139] ? rcu_is_watching+0x15/0xb0 [ 2296.267116][T29139] ? do_syscall_64+0xbe/0x3b0 [ 2296.267141][T29139] do_syscall_64+0xfa/0x3b0 [ 2296.267160][T29139] ? lockdep_hardirqs_on+0x9c/0x150 [ 2296.267190][T29139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2296.267213][T29139] ? clear_bhb_loop+0x60/0xb0 [ 2296.267248][T29139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2296.267270][T29139] RIP: 0033:0x7f381678e929 [ 2296.267289][T29139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2296.267308][T29139] RSP: 002b:00007f38145d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 2296.267330][T29139] RAX: ffffffffffffffda RBX: 00007f38169b6080 RCX: 00007f381678e929 [ 2296.267347][T29139] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2296.267360][T29139] RBP: 00007f38145d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2296.267374][T29139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2296.267387][T29139] R13: 0000000000000000 R14: 00007f38169b6080 R15: 00007ffe05cdfbe8 [ 2296.267420][T29139] [ 2296.478590][T29138] CPU: 0 UID: 0 PID: 29138 Comm: syz.6.6567 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2296.478622][T29138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2296.478636][T29138] Call Trace: [ 2296.478645][T29138] [ 2296.478656][T29138] dump_stack_lvl+0x189/0x250 [ 2296.478695][T29138] ? __pfx____ratelimit+0x10/0x10 [ 2296.478730][T29138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2296.478768][T29138] ? __pfx__printk+0x10/0x10 [ 2296.478792][T29138] ? __might_fault+0xb0/0x130 [ 2296.478832][T29138] should_fail_ex+0x414/0x560 [ 2296.478868][T29138] _copy_from_iter+0x1db/0x16f0 [ 2296.478918][T29138] ? __pfx__copy_from_iter+0x10/0x10 [ 2296.478950][T29138] ? __pfx_woken_wake_function+0x10/0x10 [ 2296.478981][T29138] ? file_tty_write+0x2e8/0x990 [ 2296.479015][T29138] ? rcu_is_watching+0x15/0xb0 [ 2296.479049][T29138] ? kfree+0x4d/0x440 [ 2296.479079][T29138] file_tty_write+0x486/0x990 [ 2296.479125][T29138] vfs_write+0x54b/0xa90 [ 2296.479158][T29138] ? __pfx_tty_write+0x10/0x10 [ 2296.479193][T29138] ? __pfx_vfs_write+0x10/0x10 [ 2296.479231][T29138] ? __fget_files+0x2a/0x420 [ 2296.479273][T29138] ksys_write+0x145/0x250 [ 2296.479302][T29138] ? __pfx_ksys_write+0x10/0x10 [ 2296.479325][T29138] ? rcu_is_watching+0x15/0xb0 [ 2296.479363][T29138] ? do_syscall_64+0xbe/0x3b0 [ 2296.479389][T29138] do_syscall_64+0xfa/0x3b0 [ 2296.479407][T29138] ? lockdep_hardirqs_on+0x9c/0x150 [ 2296.479440][T29138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2296.479463][T29138] ? clear_bhb_loop+0x60/0xb0 [ 2296.479499][T29138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2296.479521][T29138] RIP: 0033:0x7ff06fd8e929 [ 2296.479542][T29138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2296.479562][T29138] RSP: 002b:00007ff070b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2296.479586][T29138] RAX: ffffffffffffffda RBX: 00007ff06ffb5fa0 RCX: 00007ff06fd8e929 [ 2296.479603][T29138] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 2296.479618][T29138] RBP: 00007ff070b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 2296.479632][T29138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2296.479645][T29138] R13: 0000000000000000 R14: 00007ff06ffb5fa0 R15: 00007ffc03e2ad88 [ 2296.479680][T29138] [ 2297.138480][ T5922] usb 2-1: device descriptor read/64, error -71 [ 2297.204010][T29146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'. [ 2297.229599][T29146] netlink: 'syz.4.6570': attribute type 5 has an invalid length. [ 2297.237385][T29146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6570'. [ 2297.261792][T29146] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 2297.319042][T29146] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 2297.334791][T29146] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 2297.357536][T29146] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 2297.396973][T29146] geneve3: entered promiscuous mode [ 2297.402443][T29146] geneve3: entered allmulticast mode [ 2297.415285][T29156] netlink: 'syz.6.6572': attribute type 10 has an invalid length. [ 2297.430380][ T5922] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2297.464008][T29156] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2297.578224][ T5922] usb 2-1: device descriptor read/64, error -71 [ 2297.592458][T24661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2297.617652][T24661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2297.829658][ T5922] usb usb2-port1: attempt power cycle [ 2297.956472][T29166] xfs: Unexpected value for 'discard' [ 2298.697738][ T5922] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2298.988640][T28946] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2299.378938][T28946] usb 5-1: Using ep0 maxpacket: 32 [ 2299.455596][T28946] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2299.464734][T28946] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2299.473892][ T5922] usb 2-1: device descriptor read/8, error -71 [ 2299.481660][T28946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2299.508856][T28946] usb 5-1: config 1 has no interface number 0 [ 2299.515169][T28946] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2299.526343][T28946] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 2299.543683][T28946] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2299.559756][T28946] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2299.570283][T28946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.582415][T29174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2299.594476][T28946] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2299.822528][T29174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2299.880186][T28946] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 2300.020856][T29191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2300.079535][T29191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2300.096130][T24836] usb 5-1: USB disconnect, device number 31 [ 2300.103833][T24836] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2300.891647][T24834] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2301.082494][T24834] usb 1-1: device descriptor read/64, error -71 [ 2301.937590][T24834] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2302.097514][T24834] usb 1-1: device descriptor read/64, error -71 [ 2302.239914][T24834] usb usb1-port1: attempt power cycle [ 2302.597353][T24834] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2302.640381][T24834] usb 1-1: device descriptor read/8, error -71 [ 2302.917429][T24834] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2306.107755][ T5922] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2306.397055][ T5922] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 2306.505608][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2306.669083][T24834] usb 1-1: device descriptor read/8, error -71 [ 2306.847478][T24834] usb usb1-port1: unable to enumerate USB device [ 2306.897977][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2309.113281][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2309.113301][ T30] audit: type=1400 audit(1749487229.696:1009): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=29221 comm="syz.6.6590" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2309.318491][ T5922] usb 5-1: string descriptor 0 read error: -71 [ 2309.374367][ T5922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2309.414985][ T3508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2309.469021][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2309.580900][ T5922] usb 5-1: can't set config #1, error -71 [ 2309.603001][ T5922] usb 5-1: USB disconnect, device number 32 [ 2310.150891][T29235] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2310.150891][T29235] program syz.0.6593 not setting count and/or reply_len properly [ 2310.720292][T29248] xfs: Unexpected value for 'discard' [ 2312.637933][ T5922] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2313.136095][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 2313.143397][ T5922] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 2313.143431][ T5922] usb 2-1: config 0 has no interface number 0 [ 2313.145638][ T5922] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2313.145670][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.145692][ T5922] usb 2-1: Product: syz [ 2313.145709][ T5922] usb 2-1: Manufacturer: syz [ 2313.145726][ T5922] usb 2-1: SerialNumber: syz [ 2313.151964][ T5922] usb 2-1: config 0 descriptor?? [ 2316.296410][ T30] audit: type=1326 audit(1749487236.877:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.451932][ T30] audit: type=1326 audit(1749487236.877:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.546419][ T30] audit: type=1326 audit(1749487236.877:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.546500][ T30] audit: type=1326 audit(1749487236.877:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.546556][ T30] audit: type=1326 audit(1749487236.877:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.546604][ T30] audit: type=1326 audit(1749487236.877:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.548752][ T30] audit: type=1326 audit(1749487236.877:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.549484][ T30] audit: type=1326 audit(1749487236.877:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.549542][ T30] audit: type=1326 audit(1749487236.877:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2316.549615][ T30] audit: type=1326 audit(1749487236.877:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29273 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3dd8e929 code=0x7ffc0000 [ 2318.057038][ T5922] peak_usb 2-1:0.56 can0: unable to request usb[type=0 value=1] err=-71 [ 2318.057074][ T5922] peak_usb 2-1:0.56: unable to read PCAN-USB X6 firmware info (err -71) [ 2318.807221][ C0] vkms_vblank_simulate: vblank timer overrun [ 2319.007256][ T5922] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -71 [ 2319.013329][ T5922] usb 2-1: USB disconnect, device number 62 [ 2319.087541][T29311] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6614'. [ 2320.157254][T29336] Invalid ELF header type: 28869 != 1 [ 2321.029742][T29345] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2321.029742][T29345] program syz.1.6622 not setting count and/or reply_len properly [ 2321.827004][T29350] FAULT_INJECTION: forcing a failure. [ 2321.827004][T29350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2321.840209][T29350] CPU: 1 UID: 0 PID: 29350 Comm: syz.7.6623 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2321.840237][T29350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2321.840251][T29350] Call Trace: [ 2321.840261][T29350] [ 2321.840273][T29350] dump_stack_lvl+0x189/0x250 [ 2321.840311][T29350] ? __pfx____ratelimit+0x10/0x10 [ 2321.840345][T29350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2321.840378][T29350] ? __pfx__printk+0x10/0x10 [ 2321.840401][T29350] ? __might_fault+0xb0/0x130 [ 2321.840440][T29350] should_fail_ex+0x414/0x560 [ 2321.840475][T29350] _copy_from_user+0x2d/0xb0 [ 2321.840498][T29350] __sys_bpf+0x1ed/0x860 [ 2321.840530][T29350] ? __pfx___sys_bpf+0x10/0x10 [ 2321.840554][T29350] ? preempt_schedule_irq+0xde/0x150 [ 2321.840621][T29350] __x64_sys_bpf+0x7c/0x90 [ 2321.840647][T29350] do_syscall_64+0xfa/0x3b0 [ 2321.840669][T29350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2321.840690][T29350] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2321.840712][T29350] ? clear_bhb_loop+0x60/0xb0 [ 2321.840740][T29350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2321.840761][T29350] RIP: 0033:0x7f1b8058e929 [ 2321.840781][T29350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2321.840802][T29350] RSP: 002b:00007f1b7e3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2321.840826][T29350] RAX: ffffffffffffffda RBX: 00007f1b807b6160 RCX: 00007f1b8058e929 [ 2321.840843][T29350] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2321.840858][T29350] RBP: 00007f1b7e3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2321.840873][T29350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2321.840887][T29350] R13: 0000000000000000 R14: 00007f1b807b6160 R15: 00007fff0568dbf8 [ 2321.840921][T29350] [ 2322.646186][T29359] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6626'. [ 2323.132120][T29366] mac80211_hwsim hwsim117 wlan0: entered promiscuous mode [ 2323.283537][T29366] mac80211_hwsim hwsim117 wlan0: left promiscuous mode [ 2324.619960][T29374] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6632'. [ 2324.798775][T29377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6632'. [ 2324.820106][T29377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6632'. [ 2324.955340][T29380] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2325.171138][T29393] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2325.171138][T29393] program syz.1.6634 not setting count and/or reply_len properly [ 2326.202136][T29399] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2326.794431][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2326.794455][ T30] audit: type=1400 audit(1749487247.358:1057): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=29414 comm="syz.6.6642" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2327.346090][T29426] FAULT_INJECTION: forcing a failure. [ 2327.346090][T29426] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.358834][T29426] CPU: 0 UID: 0 PID: 29426 Comm: syz.6.6645 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2327.358853][T29426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2327.358862][T29426] Call Trace: [ 2327.358868][T29426] [ 2327.358874][T29426] dump_stack_lvl+0x189/0x250 [ 2327.358900][T29426] ? __pfx____ratelimit+0x10/0x10 [ 2327.358922][T29426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2327.358942][T29426] ? __pfx__printk+0x10/0x10 [ 2327.358958][T29426] ? __pfx___might_resched+0x10/0x10 [ 2327.358979][T29426] ? fs_reclaim_acquire+0x7d/0x100 [ 2327.359003][T29426] should_fail_ex+0x414/0x560 [ 2327.359025][T29426] should_failslab+0xa8/0x100 [ 2327.359063][T29426] __kmalloc_noprof+0xcb/0x4f0 [ 2327.359080][T29426] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2327.359108][T29426] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2327.359147][T29426] genl_start+0x180/0x6c0 [ 2327.359166][T29426] ? netlink_lookup+0x30/0x200 [ 2327.359185][T29426] __netlink_dump_start+0x466/0x7e0 [ 2327.359207][T29426] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 2327.359231][T29426] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 2327.359251][T29426] ? genl_get_cmd+0x67f/0x910 [ 2327.359274][T29426] ? __pfx_genl_start+0x10/0x10 [ 2327.359292][T29426] ? __pfx_genl_dumpit+0x10/0x10 [ 2327.359311][T29426] ? __pfx_genl_done+0x10/0x10 [ 2327.359340][T29426] genl_rcv_msg+0x5da/0x790 [ 2327.359365][T29426] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2327.359384][T29426] ? ref_tracker_free+0x63a/0x7d0 [ 2327.359401][T29426] ? __pfx_ethnl_default_start+0x10/0x10 [ 2327.359416][T29426] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 2327.359432][T29426] ? __pfx_ethnl_default_done+0x10/0x10 [ 2327.359449][T29426] ? __pfx_ref_tracker_free+0x10/0x10 [ 2327.359475][T29426] netlink_rcv_skb+0x208/0x470 [ 2327.359495][T29426] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2327.359517][T29426] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2327.359545][T29426] ? down_read+0x1ad/0x2e0 [ 2327.359561][T29426] genl_rcv+0x28/0x40 [ 2327.359579][T29426] netlink_unicast+0x75b/0x8d0 [ 2327.359601][T29426] netlink_sendmsg+0x805/0xb30 [ 2327.359624][T29426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2327.359665][T29426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2327.359696][T29426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2327.359713][T29426] __sock_sendmsg+0x219/0x270 [ 2327.359737][T29426] ____sys_sendmsg+0x505/0x830 [ 2327.359758][T29426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2327.359782][T29426] ? import_iovec+0x74/0xa0 [ 2327.359799][T29426] ___sys_sendmsg+0x21f/0x2a0 [ 2327.359818][T29426] ? __pfx____sys_sendmsg+0x10/0x10 [ 2327.359861][T29426] ? __fget_files+0x2a/0x420 [ 2327.359879][T29426] ? __fget_files+0x3a0/0x420 [ 2327.359923][T29426] __x64_sys_sendmsg+0x19b/0x260 [ 2327.359944][T29426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2327.359990][T29426] ? __pfx_ksys_write+0x10/0x10 [ 2327.360012][T29426] ? do_syscall_64+0xbe/0x3b0 [ 2327.360029][T29426] do_syscall_64+0xfa/0x3b0 [ 2327.360042][T29426] ? lockdep_hardirqs_on+0x9c/0x150 [ 2327.360065][T29426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.360079][T29426] ? clear_bhb_loop+0x60/0xb0 [ 2327.360098][T29426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.360113][T29426] RIP: 0033:0x7ff06fd8e929 [ 2327.360127][T29426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2327.360140][T29426] RSP: 002b:00007ff070b9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2327.360156][T29426] RAX: ffffffffffffffda RBX: 00007ff06ffb5fa0 RCX: 00007ff06fd8e929 [ 2327.360167][T29426] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000007 [ 2327.360177][T29426] RBP: 00007ff070b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 2327.360186][T29426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2327.360195][T29426] R13: 0000000000000000 R14: 00007ff06ffb5fa0 R15: 00007ffc03e2ad88 [ 2327.360219][T29426] [ 2327.737851][ C0] vkms_vblank_simulate: vblank timer overrun [ 2327.911713][ T30] audit: type=1800 audit(1749487248.488:1058): pid=29428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.6646" name="dmabuf" dev="dmabuf" ino=12 res=0 errno=0 [ 2328.152774][T29430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2328.220134][T29434] FAULT_INJECTION: forcing a failure. [ 2328.220134][T29434] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.240948][T29434] CPU: 1 UID: 0 PID: 29434 Comm: syz.7.6648 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2328.240979][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2328.240994][T29434] Call Trace: [ 2328.241003][T29434] [ 2328.241012][T29434] dump_stack_lvl+0x189/0x250 [ 2328.241064][T29434] ? __pfx____ratelimit+0x10/0x10 [ 2328.241107][T29434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2328.241137][T29434] ? __pfx__printk+0x10/0x10 [ 2328.241164][T29434] ? __pfx___might_resched+0x10/0x10 [ 2328.241192][T29434] ? fs_reclaim_acquire+0x7d/0x100 [ 2328.241225][T29434] should_fail_ex+0x414/0x560 [ 2328.241256][T29434] should_failslab+0xa8/0x100 [ 2328.241284][T29434] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2328.241307][T29434] ? audit_log_start+0x126/0x870 [ 2328.241331][T29434] audit_log_start+0x126/0x870 [ 2328.241356][T29434] ? __pfx_audit_log_start+0x10/0x10 [ 2328.241384][T29434] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 2328.241419][T29434] ? lockdep_hardirqs_on+0x9c/0x150 [ 2328.241448][T29434] ? take_dentry_name_snapshot+0x157/0x500 [ 2328.241474][T29434] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 2328.241507][T29434] integrity_audit_message+0xfe/0x4d0 [ 2328.241539][T29434] ? __pfx_integrity_audit_message+0x10/0x10 [ 2328.241565][T29434] ? take_dentry_name_snapshot+0x29/0x500 [ 2328.241593][T29434] ? take_dentry_name_snapshot+0x4eb/0x500 [ 2328.241620][T29434] ? krealloc_noprof+0x1cd/0x340 [ 2328.241650][T29434] integrity_audit_msg+0x41/0x60 [ 2328.241678][T29434] ima_collect_measurement+0x701/0x8d0 [ 2328.241719][T29434] ? __pfx_ima_collect_measurement+0x10/0x10 [ 2328.241758][T29434] ? rcu_is_watching+0x15/0xb0 [ 2328.241786][T29434] ? trace_contention_end+0x39/0x120 [ 2328.241852][T29434] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2328.241890][T29434] process_measurement+0x1121/0x1a40 [ 2328.241939][T29434] ? __pfx_process_measurement+0x10/0x10 [ 2328.242008][T29434] ? __pfx_migrate_enable+0x10/0x10 [ 2328.242030][T29434] ? rcu_read_lock_any_held+0xb3/0x120 [ 2328.242078][T29434] ima_file_mmap+0x1a2/0x1f0 [ 2328.242107][T29434] ? __pfx_ima_file_mmap+0x10/0x10 [ 2328.242150][T29434] security_mmap_file+0x7a4/0xa60 [ 2328.242183][T29434] vm_mmap_pgoff+0x12c/0x4c0 [ 2328.242211][T29434] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2328.242234][T29434] ? __fget_files+0x2a/0x420 [ 2328.242269][T29434] ? __fget_files+0x3a0/0x420 [ 2328.242296][T29434] ? __fget_files+0x2a/0x420 [ 2328.242330][T29434] ksys_mmap_pgoff+0x51f/0x760 [ 2328.242369][T29434] do_syscall_64+0xfa/0x3b0 [ 2328.242391][T29434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2328.242418][T29434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2328.242440][T29434] ? clear_bhb_loop+0x60/0xb0 [ 2328.242467][T29434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2328.242488][T29434] RIP: 0033:0x7f1b8058e929 [ 2328.242508][T29434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2328.242526][T29434] RSP: 002b:00007f1b7e3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2328.242548][T29434] RAX: ffffffffffffffda RBX: 00007f1b807b5fa0 RCX: 00007f1b8058e929 [ 2328.242565][T29434] RDX: 0000000000000004 RSI: 0000000000001000 RDI: 0000200000fff000 [ 2328.242579][T29434] RBP: 00007f1b7e3f6090 R08: 0000000000000004 R09: 0000000000002000 [ 2328.242593][T29434] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2328.242606][T29434] R13: 0000000000000000 R14: 00007f1b807b5fa0 R15: 00007fff0568dbf8 [ 2328.242639][T29434] [ 2328.587181][T29434] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 2328.595274][T29434] audit: out of memory in audit_log_start [ 2329.814437][T29450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2329.907894][T29441] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2329.907894][T29441] program syz.4.6650 not setting count and/or reply_len properly [ 2330.626813][T29457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6653'. [ 2330.934752][ T30] audit: type=1400 audit(1749487251.498:1059): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=29459 comm="syz.4.6654" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2330.956680][ C0] vkms_vblank_simulate: vblank timer overrun [ 2330.971383][T29462] FAULT_INJECTION: forcing a failure. [ 2330.971383][T29462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2330.993898][T29462] CPU: 0 UID: 0 PID: 29462 Comm: syz.1.6655 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2330.993940][T29462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2330.993953][T29462] Call Trace: [ 2330.993962][T29462] [ 2330.993971][T29462] dump_stack_lvl+0x189/0x250 [ 2330.994005][T29462] ? __pfx____ratelimit+0x10/0x10 [ 2330.994034][T29462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2330.994064][T29462] ? __pfx__printk+0x10/0x10 [ 2330.994084][T29462] ? __might_fault+0xb0/0x130 [ 2330.994120][T29462] should_fail_ex+0x414/0x560 [ 2330.994164][T29462] _copy_from_user+0x2d/0xb0 [ 2330.994185][T29462] video_usercopy+0x354/0x14f0 [ 2330.994212][T29462] ? smk_tskacc+0x2fc/0x370 [ 2330.994234][T29462] ? __pfx___video_do_ioctl+0x10/0x10 [ 2330.994254][T29462] ? __pfx_video_usercopy+0x10/0x10 [ 2330.994273][T29462] ? smack_file_ioctl+0x2a9/0x340 [ 2330.994312][T29462] ? __fget_files+0x2a/0x420 [ 2330.994337][T29462] ? __fget_files+0x3a0/0x420 [ 2330.994367][T29462] v4l2_ioctl+0x18a/0x1e0 [ 2330.994387][T29462] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2330.994407][T29462] __se_sys_ioctl+0xfc/0x170 [ 2330.994430][T29462] do_syscall_64+0xfa/0x3b0 [ 2330.994447][T29462] ? lockdep_hardirqs_on+0x9c/0x150 [ 2330.994476][T29462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2330.994495][T29462] ? clear_bhb_loop+0x60/0xb0 [ 2330.994520][T29462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2330.994539][T29462] RIP: 0033:0x7f307838e929 [ 2330.994557][T29462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2330.994573][T29462] RSP: 002b:00007f30791af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2330.994594][T29462] RAX: ffffffffffffffda RBX: 00007f30785b5fa0 RCX: 00007f307838e929 [ 2330.994609][T29462] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 2330.994622][T29462] RBP: 00007f30791af090 R08: 0000000000000000 R09: 0000000000000000 [ 2330.994634][T29462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.994646][T29462] R13: 0000000000000000 R14: 00007f30785b5fa0 R15: 00007ffe41bd79d8 [ 2330.994677][T29462] [ 2331.213054][ C0] vkms_vblank_simulate: vblank timer overrun [ 2333.530123][T29489] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2333.758340][T29495] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2333.758340][T29495] program syz.6.6664 not setting count and/or reply_len properly [ 2333.969016][T29502] delete_channel: no stack [ 2334.012982][T29505] sp0: Synchronizing with TNC [ 2334.280533][T29510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6669'. [ 2334.300398][T29510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6669'. [ 2334.338705][T29510] ip6gretap1: entered allmulticast mode [ 2335.023805][T19404] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2335.183732][T19404] usb 2-1: Using ep0 maxpacket: 32 [ 2335.196998][T19404] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2335.218728][T19404] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2335.230660][T19404] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2335.250579][T19404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.269037][T19404] usb 2-1: Product: 듽롥ꈗꄀ哩燎＀꾶斠莈ꀆ冖⿾㯂曓ೂ蒃욬麮张Є킓çžê‹½å‡‡íŒä°¦åƒ†à«¨í—ƒ [ 2335.292027][T19404] usb 2-1: Manufacturer: ဉ [ 2335.303704][T19404] usb 2-1: SerialNumber: è¹¹ì€ì‡èº’㾑ꘗ㤿緊㷪â´å¤­é‹—禉⺰è›å²†ê †çˆˆä©§è„륀垆ꨌé­ã™“ᬸ䳥êŽìº“辚㉯셛킑ʰ絬äŸã¡»ìºƒà¶¨â­Žç¸¤ì°®ê ¨ [ 2335.424209][T29524] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2335.754967][T19404] usb 2-1: USB disconnect, device number 63 [ 2336.054819][T29538] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2336.212852][T29543] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2336.212852][T29543] program syz.0.6679 not setting count and/or reply_len properly [ 2336.872717][ T5922] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2338.181356][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2338.234396][ T5922] usb 2-1: config 15 has an invalid interface number: 240 but max is 0 [ 2338.261644][T29561] FAULT_INJECTION: forcing a failure. [ 2338.261644][T29561] name failslab, interval 1, probability 0, space 0, times 0 [ 2338.262496][ T5922] usb 2-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 2338.275263][T29561] CPU: 1 UID: 0 PID: 29561 Comm: syz.7.6684 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2338.275290][T29561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2338.275302][T29561] Call Trace: [ 2338.275311][T29561] [ 2338.275320][T29561] dump_stack_lvl+0x189/0x250 [ 2338.275354][T29561] ? __pfx____ratelimit+0x10/0x10 [ 2338.275383][T29561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2338.275413][T29561] ? __pfx__printk+0x10/0x10 [ 2338.275435][T29561] ? __pfx_fixup_exception+0x10/0x10 [ 2338.275465][T29561] ? look_up_lock_class+0x74/0x170 [ 2338.275508][T29561] should_fail_ex+0x414/0x560 [ 2338.275545][T29561] should_failslab+0xa8/0x100 [ 2338.275577][T29561] __kmalloc_noprof+0xcb/0x4f0 [ 2338.275606][T29561] ? io_alloc_ocqe+0x6f/0x550 [ 2338.275640][T29561] io_alloc_ocqe+0x6f/0x550 [ 2338.275667][T29561] ? io_cqe_cache_refill+0x1a8/0x240 [ 2338.275700][T29561] io_cqe_overflow_locked+0x26/0x40 [ 2338.275734][T29561] __io_submit_flush_completions+0x248/0xe40 [ 2338.275765][T29561] ? io_submit_fail_init+0x3d2/0x590 [ 2338.275809][T29561] io_submit_sqes+0x181b/0x1c50 [ 2338.275869][T29561] __se_sys_io_uring_enter+0x2df/0x2b20 [ 2338.275918][T29561] ? ksys_write+0x1cb/0x250 [ 2338.275948][T29561] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2338.275973][T29561] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2338.276008][T29561] ? __pfx_vfs_write+0x10/0x10 [ 2338.276038][T29561] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2338.276078][T29561] ? __fget_files+0x3a0/0x420 [ 2338.276116][T29561] ? fput+0xa0/0xd0 [ 2338.276150][T29561] ? ksys_write+0x22a/0x250 [ 2338.276190][T29561] ? __pfx_ksys_write+0x10/0x10 [ 2338.276273][T29561] ? rcu_is_watching+0x15/0xb0 [ 2338.276312][T29561] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 2338.276343][T29561] do_syscall_64+0xfa/0x3b0 [ 2338.276363][T29561] ? lockdep_hardirqs_on+0x9c/0x150 [ 2338.276415][T29561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2338.276439][T29561] ? clear_bhb_loop+0x60/0xb0 [ 2338.276479][T29561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2338.276502][T29561] RIP: 0033:0x7f1b8058e929 [ 2338.276524][T29561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2338.276546][T29561] RSP: 002b:00007f1b7e3f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2338.276574][T29561] RAX: ffffffffffffffda RBX: 00007f1b807b5fa0 RCX: 00007f1b8058e929 [ 2338.276593][T29561] RDX: 0000000000000000 RSI: 000000000000291c RDI: 0000000000000003 [ 2338.276607][T29561] RBP: 00007f1b7e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2338.276623][T29561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2338.276639][T29561] R13: 0000000000000000 R14: 00007f1b807b5fa0 R15: 00007fff0568dbf8 [ 2338.276678][T29561] [ 2338.619744][ T5922] usb 2-1: config 15 has no interface number 0 [ 2338.626386][ T5922] usb 2-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2338.641403][ T5922] usb 2-1: config 15 interface 240 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2338.656629][ T5922] usb 2-1: config 15 interface 240 has no altsetting 0 [ 2338.736707][T29566] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 2338.753283][T29566] qnx6: wrong signature (magic) in superblock #1. [ 2338.759884][T29566] qnx6: unable to read the first superblock [ 2338.886107][ T5922] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 2338.895266][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.903668][ T5922] usb 2-1: Product: syz [ 2338.907852][ T5922] usb 2-1: Manufacturer: syz [ 2338.912469][ T5922] usb 2-1: SerialNumber: syz [ 2341.404265][T29586] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2341.616178][T18816] Bluetooth: hci4: command 0x0406 tx timeout [ 2341.866470][ T5922] usb 2-1: no audio or video endpoints found [ 2341.921458][ T5922] usb 2-1: USB disconnect, device number 64 [ 2342.053711][ T3566] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2342.271618][T29591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2343.153310][T29598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6694'. [ 2344.552294][T19404] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2344.611051][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.618735][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.292432][T19404] usb 2-1: Using ep0 maxpacket: 8 [ 2345.301414][T19404] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2345.310502][T19404] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 2345.318955][T19404] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 2345.328067][T19404] usb 2-1: config 4 has no interface number 0 [ 2345.336467][T19404] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2345.345869][T19404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.357332][T19404] usb 2-1: Product: syz [ 2345.361542][T19404] usb 2-1: Manufacturer: syz [ 2345.366740][T19404] usb 2-1: SerialNumber: syz [ 2345.663057][T29626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.742053][T29626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2345.763055][T29637] overlayfs: missing 'lowerdir' [ 2345.905091][T19404] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 2346.074544][T29638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6707'. [ 2346.120243][T19404] usb 2-1: No valid video chain found. [ 2346.134450][T19404] usb 2-1: USB disconnect, device number 65 [ 2348.423477][T29663] Bluetooth: MGMT ver 1.23 [ 2348.438756][T29663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6716'. [ 2348.490854][T29663] bridge0: entered promiscuous mode [ 2348.497372][T29663] macsec1: entered allmulticast mode [ 2348.503072][T29663] bridge0: entered allmulticast mode [ 2348.517607][T29663] bridge0: port 3(macsec1) entered blocking state [ 2348.525135][T29663] bridge0: port 3(macsec1) entered disabled state [ 2349.013669][T29663] bridge0: left allmulticast mode [ 2349.020648][T29663] bridge0: left promiscuous mode [ 2349.221821][T24836] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 2350.118786][T24836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2350.128480][T29674] netlink: 'syz.7.6719': attribute type 21 has an invalid length. [ 2350.138062][T29674] netlink: 'syz.7.6719': attribute type 6 has an invalid length. [ 2350.146279][T29674] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6719'. [ 2350.186004][T24836] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2350.247283][T24836] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2350.260319][T24836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2350.312343][T29676] Invalid ELF header type: 2 != 1 [ 2350.325760][T24836] usb 1-1: config 0 descriptor?? [ 2350.624461][T29680] netlink: 'syz.7.6721': attribute type 10 has an invalid length. [ 2350.632872][T29680] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6721'. [ 2350.720680][T29662] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6716'. [ 2351.461976][T29680] bond0: entered promiscuous mode [ 2351.467083][T29680] bond_slave_0: entered promiscuous mode [ 2351.477957][T29680] bond_slave_1: entered promiscuous mode [ 2351.484906][T29680] bridge0: port 3(bond0) entered blocking state [ 2351.491408][T29680] bridge0: port 3(bond0) entered disabled state [ 2351.497867][T29680] bond0: entered allmulticast mode [ 2351.503319][T29680] bond_slave_0: entered allmulticast mode [ 2351.509081][T29680] bond_slave_1: entered allmulticast mode [ 2352.642915][T24836] usb 1-1: USB disconnect, device number 90 [ 2353.240682][ T30] audit: type=1400 audit(1749487273.821:1060): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=29709 comm="syz.0.6729" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2354.215007][T29721] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2355.077494][T29737] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6737'. [ 2355.151260][T24835] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2355.642646][T24835] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 2355.661869][T24835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.674346][T24835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2355.687400][T24835] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2355.698941][T24835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2355.710348][T24835] usb 5-1: SerialNumber: syz [ 2355.746886][T24835] usb 5-1: 0:2 : does not exist [ 2355.830354][ T30] audit: type=1400 audit(1749487276.411:1061): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=29747 comm="syz.1.6740" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2356.085717][T24835] usb 5-1: USB disconnect, device number 33 [ 2356.514364][T29760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6745'. [ 2357.086471][T29764] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2358.156362][T29773] fuse: Invalid rootmode [ 2358.850513][ T30] audit: type=1400 audit(1749487279.432:1062): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=29775 comm="syz.6.6752" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2359.009333][ T30] audit: type=1326 audit(1749487279.462:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.284545][ T30] audit: type=1326 audit(1749487279.462:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.392959][ T30] audit: type=1326 audit(1749487279.462:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.561060][ T30] audit: type=1326 audit(1749487279.512:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.583679][ T5922] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2359.616013][ T30] audit: type=1326 audit(1749487279.522:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.848451][ T30] audit: type=1326 audit(1749487279.532:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.871401][ T30] audit: type=1326 audit(1749487279.542:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.893542][ T30] audit: type=1326 audit(1749487279.552:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.916123][ T30] audit: type=1326 audit(1749487279.562:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29787 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8058e929 code=0x7ffc0000 [ 2359.950336][ T5922] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2359.965250][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.980687][ T5922] usb 2-1: Product: syz [ 2360.001908][ T5922] usb 2-1: Manufacturer: syz [ 2360.021181][ T5922] usb 2-1: SerialNumber: syz [ 2360.040111][ T5922] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2360.048005][ T5922] r8152-cfgselector 2-1: config 0 descriptor?? [ 2360.863966][ T5922] r8152-cfgselector 2-1: USB disconnect, device number 66 [ 2364.027364][T29814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2364.349862][T24834] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 2364.390461][ T5922] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 2364.512131][T24834] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2364.529877][T24834] usb 1-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2364.647810][ T5922] usb 2-1: config index 0 descriptor too short (expected 149, got 148) [ 2364.674186][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2364.684611][T24834] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2364.875126][T24834] usb 1-1: string descriptor 0 read error: -22 [ 2364.884337][T24834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2364.911266][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2364.920604][T24834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.935667][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2364.958545][T24834] usb 1-1: bad CDC descriptors [ 2364.986372][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2365.015627][ T5922] usb 2-1: SerialNumber: syz [ 2365.256686][ T5922] usb 2-1: 0:2 : does not exist [ 2365.391684][T24837] usb 1-1: USB disconnect, device number 91 [ 2365.454798][T24835] usb 2-1: USB disconnect, device number 67 [ 2365.889813][T24837] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2366.170681][T24837] usb 1-1: Using ep0 maxpacket: 32 [ 2366.181617][T24837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2366.195109][T24837] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2366.207454][T24837] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2366.235375][T24837] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2366.257025][T24837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.274720][T24837] usb 1-1: Product: syz [ 2366.284847][T24837] usb 1-1: Manufacturer: syz [ 2366.299045][T24837] usb 1-1: SerialNumber: syz [ 2366.334219][T24837] cdc_ncm 1-1:1.0: skipping garbage [ 2366.354242][T24837] cdc_ncm 1-1:1.0: skipping garbage [ 2366.373722][T24837] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 2366.396305][T24837] cdc_ncm 1-1:1.0: bind() failure [ 2366.542817][T19404] usb 1-1: USB disconnect, device number 92 [ 2367.429604][T29567] Bluetooth: hci0: command 0x0406 tx timeout [ 2370.372246][T29868] xt_hashlimit: max too large, truncated to 1048576 [ 2370.650602][T29866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2370.756587][T29857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2370.799839][T29857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2371.328996][T24837] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 2371.589045][T24836] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2371.626562][T24837] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 2371.643858][T24837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2371.654566][T24837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2371.670352][T24837] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2371.685374][T24837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2371.693554][T24837] usb 5-1: SerialNumber: syz [ 2371.711953][T24837] usb 5-1: 0:2 : does not exist [ 2371.851932][T24836] usb 2-1: too many configurations: 92, using maximum allowed: 8 [ 2372.028080][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.046374][T24841] usb 5-1: USB disconnect, device number 34 [ 2372.056590][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.080051][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.111904][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.142989][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.164686][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.186938][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.404536][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.536651][T24836] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2372.586441][T24836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.620200][T24836] usb 2-1: Product: syz [ 2372.643977][T24836] usb 2-1: Manufacturer: syz [ 2372.676456][T24836] usb 2-1: SerialNumber: syz [ 2373.137891][T24836] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2373.337954][T24834] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2373.388232][T29899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6785'. [ 2373.644792][T29882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.668204][T29882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2373.909749][ T5922] usb 2-1: USB disconnect, device number 68 [ 2374.039653][ T3566] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2374.439543][T24834] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2374.537204][T24834] ath9k_htc: Failed to initialize the device [ 2374.728125][ T5922] usb 2-1: ath9k_htc: USB layer deinitialized [ 2376.103821][T29918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2376.882540][T29930] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6793'. [ 2376.905786][T29930] fuse: Unknown parameter ''' [ 2376.971981][T29932] netlink: 'syz.1.6798': attribute type 10 has an invalid length. [ 2376.980590][T29932] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6798'. [ 2377.058733][T29935] Invalid ELF header type: 3 != 1 [ 2381.668341][T19404] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2381.897719][T19404] usb 5-1: Using ep0 maxpacket: 8 [ 2382.029848][T19404] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2382.088730][T19404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 2382.108804][T19404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 2382.123481][T19404] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2382.140605][T19404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.157240][T19404] usb 5-1: Product: syz [ 2382.165777][T19404] usb 5-1: Manufacturer: syz [ 2382.175735][T19404] usb 5-1: SerialNumber: syz [ 2382.190743][T19404] usb 5-1: config 0 descriptor?? [ 2382.208553][T29951] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2382.315316][T29962] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2382.315316][T29962] program syz.1.6804 not setting count and/or reply_len properly [ 2382.507825][T24835] usb 5-1: USB disconnect, device number 35 [ 2383.487027][T29970] Cannot find add_set index 0 as target [ 2384.135797][T29974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2385.867279][T29990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6809'. [ 2385.890393][T29990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6809'. [ 2385.899691][T29990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6809'. [ 2388.468281][ T5922] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2389.105898][ T5922] usb 2-1: config index 0 descriptor too short (expected 149, got 148) [ 2389.114489][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2389.179672][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2389.211572][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2389.244609][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2389.263233][ T5922] usb 2-1: SerialNumber: syz [ 2389.276563][ T5922] usb 2-1: 0:2 : does not exist [ 2389.494581][ T5922] usb 2-1: USB disconnect, device number 69 [ 2391.052149][T30020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2396.183325][T30050] set match dimension is over the limit! [ 2397.893521][T30065] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2398.255313][T30070] overlayfs: missing 'lowerdir' [ 2402.622762][T30104] netlink: 'syz.4.6846': attribute type 1 has an invalid length. [ 2402.631091][T30104] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6846'. [ 2402.646775][T30104] netlink: 'syz.4.6846': attribute type 1 has an invalid length. [ 2402.865431][T30102] netlink: 'syz.4.6846': attribute type 21 has an invalid length. [ 2402.873354][T30102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6846'. [ 2404.860914][T30124] netlink: 'syz.0.6853': attribute type 8 has an invalid length. [ 2405.244235][T30130] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6853'. [ 2405.913985][T24835] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2406.045433][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.078675][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.213141][T24835] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 2406.242516][T30138] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6858'. [ 2406.341768][T30138] netlink: 'syz.7.6858': attribute type 2 has an invalid length. [ 2406.349950][T30138] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6858'. [ 2406.433020][T24835] usb 2-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 2406.436763][ T3566] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2406.453855][T24835] usb 2-1: config 0 has no interface number 0 [ 2406.509160][T24835] usb 2-1: config 0 interface 69 has no altsetting 0 [ 2406.521392][T24835] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2406.531123][T24835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.620615][T24835] usb 2-1: config 0 descriptor?? [ 2407.370446][T24835] usb 2-1: string descriptor 0 read error: -71 [ 2407.432477][T24835] usb 2-1: selecting invalid altsetting 0 [ 2407.484077][T24835] usb 2-1: USB disconnect, device number 70 [ 2407.946822][T30166] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6865'. [ 2408.103068][T30173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6868'. [ 2408.291286][T30180] netlink: 'syz.7.6871': attribute type 2 has an invalid length. [ 2408.310679][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6871'. [ 2410.277151][T30205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'. [ 2413.497534][T30206] tipc: Failed to remove unknown binding: 66,1,1/2886997004:3079297606/3079297608 [ 2413.904154][T24837] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 2414.271337][T24837] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2414.292471][T24837] usb 2-1: config 0 has no interface number 0 [ 2416.889267][T24837] usb 2-1: string descriptor 0 read error: -71 [ 2416.900306][T29567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2416.915469][T24837] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2416.924722][T29567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2416.934189][T29567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2416.941403][T24837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.952794][T29567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2416.961185][T29567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2416.993942][T24837] usb 2-1: config 0 descriptor?? [ 2417.001333][T24837] usb 2-1: can't set config #0, error -71 [ 2417.009787][T24837] usb 2-1: USB disconnect, device number 71 [ 2417.389060][ T7897] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.904507][T30236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6888'. [ 2417.914938][T30236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6888'. [ 2418.249932][T30242] FAULT_INJECTION: forcing a failure. [ 2418.249932][T30242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2418.264152][T30242] CPU: 0 UID: 0 PID: 30242 Comm: syz.6.6890 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2418.264179][T30242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2418.264192][T30242] Call Trace: [ 2418.264199][T30242] [ 2418.264208][T30242] dump_stack_lvl+0x189/0x250 [ 2418.264241][T30242] ? irqentry_exit+0x74/0x90 [ 2418.264270][T30242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2418.264315][T30242] should_fail_ex+0x414/0x560 [ 2418.264343][T30242] _copy_from_user+0x2d/0xb0 [ 2418.264363][T30242] memdup_user+0x5e/0xd0 [ 2418.264391][T30242] strndup_user+0x68/0xd0 [ 2418.264419][T30242] __se_sys_mount+0xde/0x410 [ 2418.264446][T30242] ? ksys_write+0x22a/0x250 [ 2418.264469][T30242] ? __pfx___se_sys_mount+0x10/0x10 [ 2418.264499][T30242] ? do_syscall_64+0xbe/0x3b0 [ 2418.264514][T30242] ? __x64_sys_mount+0x20/0xc0 [ 2418.264541][T30242] do_syscall_64+0xfa/0x3b0 [ 2418.264559][T30242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2418.264576][T30242] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2418.264595][T30242] ? clear_bhb_loop+0x60/0xb0 [ 2418.264617][T30242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2418.264635][T30242] RIP: 0033:0x7ff06fd8e929 [ 2418.264651][T30242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2418.264668][T30242] RSP: 002b:00007ff070b7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2418.264687][T30242] RAX: ffffffffffffffda RBX: 00007ff06ffb6080 RCX: 00007ff06fd8e929 [ 2418.264702][T30242] RDX: 0000200000000580 RSI: 0000200000000040 RDI: 0000200000000140 [ 2418.264715][T30242] RBP: 00007ff070b7e090 R08: 0000200000000080 R09: 0000000000000000 [ 2418.264733][T30242] R10: 0000000003010003 R11: 0000000000000246 R12: 0000000000000001 [ 2418.264745][T30242] R13: 0000000000000000 R14: 00007ff06ffb6080 R15: 00007ffc03e2ad88 [ 2418.264773][T30242] [ 2418.717456][ T7897] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.878244][T30236] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6888'. [ 2418.905750][T30245] sp0: Synchronizing with TNC [ 2418.993709][T18816] Bluetooth: hci1: command tx timeout [ 2419.026370][T30245] CUSE: info not properly terminated [ 2419.265378][T30244] [U] è` [ 2419.361175][ T7897] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.699223][ T7897] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.512912][T30226] chnl_net:caif_netlink_parms(): no params data found [ 2420.653779][T19404] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2420.813147][T19404] usb 2-1: Using ep0 maxpacket: 16 [ 2421.078756][T18816] Bluetooth: hci1: command tx timeout [ 2421.786805][T19404] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2422.549284][ T7897] bond0: left allmulticast mode [ 2422.608713][ T7897] bond_slave_0: left allmulticast mode [ 2422.685702][ T7897] bond_slave_1: left allmulticast mode [ 2422.765581][ T7897] bridge0: port 3(bond0) entered disabled state [ 2422.923153][ T7897] bridge_slave_1: left allmulticast mode [ 2422.991833][ T7897] bridge_slave_1: left promiscuous mode [ 2423.059726][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2423.152935][T18816] Bluetooth: hci1: command tx timeout [ 2423.276308][ T7897] bridge_slave_0: left allmulticast mode [ 2423.350771][ T7897] bridge_slave_0: left promiscuous mode [ 2423.418950][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2423.783126][T19404] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2423.791370][T19404] usb 2-1: Product: syz [ 2423.807324][T19404] usb 2-1: Manufacturer: syz [ 2423.812020][T19404] usb 2-1: SerialNumber: syz [ 2424.052114][T19404] usb 2-1: config 0 descriptor?? [ 2424.599403][T19404] usb 2-1: can't set config #0, error -71 [ 2424.769462][T19404] usb 2-1: USB disconnect, device number 72 [ 2424.776779][T30289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6902'. [ 2424.787950][T30289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6902'. [ 2424.808279][T30286] Falling back ldisc for ptm0. [ 2425.239854][T18816] Bluetooth: hci1: command tx timeout [ 2426.232964][T24836] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 2426.327502][ T7897] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2426.384645][T24836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2426.395771][T24836] usb 1-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2426.408936][T24836] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2426.419154][T24836] usb 1-1: string descriptor 0 read error: -22 [ 2426.425611][T24836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2426.435134][T24836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.450708][T24836] usb 1-1: bad CDC descriptors [ 2426.560563][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2426.570060][ T7897] bond_slave_0: left promiscuous mode [ 2426.578805][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2426.587955][ T7897] bond_slave_1: left promiscuous mode [ 2426.597959][ T7897] bond0 (unregistering): Released all slaves [ 2426.685294][T19404] usb 1-1: USB disconnect, device number 93 [ 2426.758472][ T7897] bond1 (unregistering): Released all slaves [ 2426.786542][T30226] bridge0: port 1(bridge_slave_0) entered blocking state [ 2426.803107][T30226] bridge0: port 1(bridge_slave_0) entered disabled state [ 2426.810276][T30226] bridge_slave_0: entered allmulticast mode [ 2426.838464][T30226] bridge_slave_0: entered promiscuous mode [ 2426.855323][T30289] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6902'. [ 2426.892994][T30226] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.989556][T30226] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.007585][T30226] bridge_slave_1: entered allmulticast mode [ 2427.024188][T30226] bridge_slave_1: entered promiscuous mode [ 2427.167469][ T7897] tipc: Left network mode [ 2427.176395][T30226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2427.204216][T30226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2427.253938][ T7897] IPVS: stopping master sync thread 20694 ... [ 2427.378375][T30226] team0: Port device team_slave_0 added [ 2427.559721][T30226] team0: Port device team_slave_1 added [ 2427.614872][T30226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2428.362234][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 2428.362253][ T30] audit: type=1326 audit(1749487348.950:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30313 comm="syz.6.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06fd8e929 code=0x7fc00000 [ 2429.491893][T30226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2429.745751][T24835] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 2429.913939][ T30] audit: type=1326 audit(1749487350.230:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30313 comm="syz.6.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff06fd8e929 code=0x7fc00000 [ 2429.976345][T24835] usb 1-1: config index 0 descriptor too short (expected 149, got 148) [ 2429.988738][T30226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2430.050028][T24835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2430.162666][T24835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2430.253510][T24835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2430.331387][T24835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2430.404164][T24835] usb 1-1: SerialNumber: syz [ 2430.651772][T24835] usb 1-1: 0:2 : does not exist [ 2430.738004][T30226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2430.745286][T30226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2430.772341][T30226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2430.864043][T24835] usb 1-1: USB disconnect, device number 94 [ 2431.127766][T30226] hsr_slave_0: entered promiscuous mode [ 2431.143079][T30226] hsr_slave_1: entered promiscuous mode [ 2431.159536][T30226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2431.233025][T30226] Cannot create hsr debugfs directory [ 2431.309134][ T7897] hsr_slave_0: left promiscuous mode [ 2431.316777][ T7897] hsr_slave_1: left promiscuous mode [ 2431.341883][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2431.375610][T30342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6916'. [ 2431.392079][T30342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6916'. [ 2431.439139][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2431.780729][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2431.890418][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2431.991315][ T7897] veth0_macvtap: left allmulticast mode [ 2432.006429][ T7897] veth1_macvtap: left allmulticast mode [ 2432.012951][ T7897] veth1_macvtap: left promiscuous mode [ 2432.022915][ T7897] veth0_macvtap: left promiscuous mode [ 2432.836937][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 2432.906288][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 2434.761181][T30342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6916'. [ 2435.352124][T24841] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2435.594371][T24841] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 2435.667777][T24841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.837035][T24841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2435.972945][T24841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2436.084620][T24841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2436.192856][T24841] usb 5-1: SerialNumber: syz [ 2436.651878][T24841] usb 5-1: 0:2 : does not exist [ 2437.280918][ T7897] IPVS: stop unused estimator thread 0... [ 2437.911948][ T30] audit: type=1400 audit(1749487358.451:1103): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=30385 comm="syz.6.6930" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2438.031917][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2438.113082][T19404] usb 5-1: USB disconnect, device number 36 [ 2439.735115][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6936'. [ 2439.751475][T30415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6936'. [ 2439.760528][T30415] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6936'. [ 2441.649888][T30431] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2441.649888][T30431] program syz.6.6940 not setting count and/or reply_len properly [ 2442.124165][T30226] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2442.177856][ T30] audit: type=1400 audit(1749487362.772:1104): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=30433 comm="syz.1.6942" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 2442.207062][T30226] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2442.230052][T30226] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2442.258857][T30226] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2442.630984][T24836] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2442.994385][T24836] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 2443.092921][T24836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2443.231177][T24836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2443.372980][T24836] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2443.515943][T24836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2443.636367][T24836] usb 5-1: SerialNumber: syz [ 2443.981708][T24836] usb 5-1: 0:2 : does not exist [ 2445.345154][T30226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2445.368367][T30226] 8021q: adding VLAN 0 to HW filter on device team0 [ 2445.386031][T27126] bridge0: port 1(bridge_slave_0) entered blocking state [ 2445.393218][T27126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2445.466588][T27126] bridge0: port 2(bridge_slave_1) entered blocking state [ 2445.473998][T27126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2445.507667][T19404] usb 5-1: USB disconnect, device number 37 [ 2446.159937][T30226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2446.372828][T30457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6947'. [ 2446.383306][T30457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6947'. [ 2446.392349][T30457] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6947'. [ 2447.403496][T30471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6949'. [ 2447.420589][T30471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6949'. [ 2447.443474][T30226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2448.090138][T28946] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 2448.306226][T30501] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2448.306226][T30501] program syz.0.6955 not setting count and/or reply_len properly [ 2448.344203][T28946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.449311][T28946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2448.478935][T28946] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2448.499090][T28946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2448.697940][T28946] usb 5-1: Product: syz [ 2448.816226][T28946] usb 5-1: Manufacturer: syz [ 2448.991700][T28946] usb 5-1: SerialNumber: syz [ 2449.026935][T19404] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2449.387682][T19404] usb 2-1: config index 0 descriptor too short (expected 149, got 148) [ 2449.548832][T19404] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2449.727181][T19404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2449.923342][T19404] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2450.064801][T19404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2450.255096][T19404] usb 2-1: SerialNumber: syz [ 2451.428395][T30510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2451.469656][T30510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2451.486498][T19404] usb 2-1: can't set config #1, error -71 [ 2451.502930][T19404] usb 2-1: USB disconnect, device number 73 [ 2451.572525][T30226] veth0_vlan: entered promiscuous mode [ 2451.608099][T30226] veth1_vlan: entered promiscuous mode [ 2451.695462][T30226] veth0_macvtap: entered promiscuous mode [ 2451.708191][T30226] veth1_macvtap: entered promiscuous mode [ 2451.725310][T30226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2451.760106][T30226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2451.811993][T30226] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.812033][T30226] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.812062][T30226] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.812090][T30226] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.041079][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2452.041116][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2452.201899][T30522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6961'. [ 2452.736909][ T7897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2452.736935][ T7897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2452.866697][T28946] usb 5-1: cannot find UAC_HEADER [ 2452.911538][T28946] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2452.913527][T28946] usb 5-1: USB disconnect, device number 38 [ 2453.308744][T30536] netlink: 'syz.1.6963': attribute type 6 has an invalid length. [ 2454.180745][T30531] bio_check_eod: 2 callbacks suppressed [ 2454.180760][T30531] syz.7.6877: attempt to access beyond end of device [ 2454.180760][T30531] loop7: rw=0, sector=1, nr_sectors = 1 limit=0 [ 2454.199283][T30531] qnx4: unable to read the superblock [ 2460.216948][ T16] sched: DL replenish lagged too much [ 2467.774101][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.788782][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2478.022216][ T7901] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2581.094627][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2581.101734][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30515/1:b..l P30534/1:b..l [ 2581.111868][ C1] rcu: (detected by 1, t=10503 jiffies, g=188329, q=658 ncpus=2) [ 2581.119705][ C1] task:syz.7.6877 state:R running task stack:24888 pid:30534 tgid:30530 ppid:30226 task_flags:0x40054c flags:0x00004000 [ 2581.134852][ C1] Call Trace: [ 2581.138166][ C1] [ 2581.141107][ C1] __schedule+0x16a2/0x4cb0 [ 2581.145658][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 2581.150994][ C1] ? __pfx___schedule+0x10/0x10 [ 2581.155913][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 2581.161259][ C1] preempt_schedule_irq+0xb5/0x150 [ 2581.166408][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2581.172169][ C1] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 2581.179142][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2581.184976][ C1] irqentry_exit+0x6f/0x90 [ 2581.189454][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2581.195484][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 2581.200810][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 2b 7b fb 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 2581.220457][ C1] RSP: 0018:ffffc90004c2eab8 EFLAGS: 00000206 [ 2581.226557][ C1] RAX: 7e81178617ff3700 RBX: 0000000000000000 RCX: 7e81178617ff3700 [ 2581.234533][ C1] RDX: 0000000000000000 RSI: ffffffff8db594b7 RDI: ffffffff8be1af40 [ 2581.242522][ C1] RBP: ffffffff81728de5 R08: 0000000000000000 R09: ffffffff81728de5 [ 2581.250517][ C1] R10: ffffc90004c2ec78 R11: ffffffff81ace8a0 R12: 0000000000000002 [ 2581.258508][ C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 2581.266507][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.271632][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2581.277798][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.282972][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.288120][ C1] ? free_pages_and_swap_cache+0x277/0x520 [ 2581.293940][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.299082][ C1] unwind_next_frame+0xc2/0x2390 [ 2581.304072][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.309223][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.314347][ C1] ? folios_put_refs+0x559/0x640 [ 2581.319308][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2581.325494][ C1] arch_stack_walk+0x11c/0x150 [ 2581.330297][ C1] ? free_pages_and_swap_cache+0x277/0x520 [ 2581.336138][ C1] stack_trace_save+0x9c/0xe0 [ 2581.340852][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2581.346256][ C1] save_stack+0xf7/0x1f0 [ 2581.350510][ C1] ? __pfx_save_stack+0x10/0x10 [ 2581.355373][ C1] ? free_unref_folios+0xcd2/0x1570 [ 2581.360607][ C1] ? folios_put_refs+0x559/0x640 [ 2581.365572][ C1] ? free_pages_and_swap_cache+0x277/0x520 [ 2581.371398][ C1] ? page_ext_put+0x97/0xc0 [ 2581.375930][ C1] __reset_page_owner+0x71/0x1f0 [ 2581.380910][ C1] free_unref_folios+0xcd2/0x1570 [ 2581.385978][ C1] folios_put_refs+0x559/0x640 [ 2581.390763][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 2581.396085][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2581.402025][ C1] ? free_swap_cache+0x109/0x300 [ 2581.407013][ C1] free_pages_and_swap_cache+0x277/0x520 [ 2581.412709][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 2581.419076][ C1] ? tlb_table_flush+0x145/0x410 [ 2581.424060][ C1] tlb_flush_mmu+0x3a0/0x680 [ 2581.428683][ C1] ? unmap_page_range+0x38da/0x41c0 [ 2581.433936][ C1] unmap_page_range+0x38fd/0x41c0 [ 2581.439065][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 2581.444458][ C1] ? unmap_vmas+0x144/0x580 [ 2581.448984][ C1] unmap_vmas+0x399/0x580 [ 2581.453371][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2581.458275][ C1] exit_mmap+0x248/0xb50 [ 2581.462528][ C1] ? uprobe_clear_state+0x20f/0x290 [ 2581.467748][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2581.472549][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2581.478250][ C1] ? __pfx_exit_aio+0x10/0x10 [ 2581.482966][ C1] ? uprobe_clear_state+0x274/0x290 [ 2581.488189][ C1] ? mm_update_next_owner+0xa7/0x870 [ 2581.493530][ C1] __mmput+0x118/0x420 [ 2581.497648][ C1] exit_mm+0x1da/0x2c0 [ 2581.501726][ C1] ? __pfx_exit_mm+0x10/0x10 [ 2581.506341][ C1] ? rcu_is_watching+0x15/0xb0 [ 2581.511241][ C1] do_exit+0x640/0x22e0 [ 2581.515443][ C1] ? __pfx_do_exit+0x10/0x10 [ 2581.520034][ C1] ? preempt_schedule_common+0x83/0xd0 [ 2581.525517][ C1] ? preempt_schedule+0xae/0xc0 [ 2581.530407][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 2581.535849][ C1] do_group_exit+0x21c/0x2d0 [ 2581.540469][ C1] get_signal+0x125e/0x1310 [ 2581.545030][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 2581.550626][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2581.556822][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 2581.562291][ C1] exit_to_user_mode_loop+0x75/0x110 [ 2581.567596][ C1] do_syscall_64+0x2bd/0x3b0 [ 2581.572221][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2581.577454][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2581.583521][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2581.588215][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2581.594134][ C1] RIP: 0033:0x7fe8f738e929 [ 2581.598567][ C1] RSP: 002b:00007fe8f811c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2581.607000][ C1] RAX: fffffffffffffe00 RBX: 00007fe8f75b6088 RCX: 00007fe8f738e929 [ 2581.615005][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8f75b6088 [ 2581.623008][ C1] RBP: 00007fe8f75b6080 R08: 0000000000000000 R09: 0000000000000000 [ 2581.630996][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8f75b608c [ 2581.638998][ C1] R13: 0000000000000000 R14: 00007fffa150abd0 R15: 00007fffa150acb8 [ 2581.647013][ C1] [ 2581.650084][ C1] task:syz.6.6959 state:R running task stack:25240 pid:30515 tgid:30514 ppid:28600 task_flags:0x40044c flags:0x00004002 [ 2581.663711][ C1] Call Trace: [ 2581.667012][ C1] [ 2581.669981][ C1] __schedule+0x16a2/0x4cb0 [ 2581.674552][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 2581.679876][ C1] ? __pfx___schedule+0x10/0x10 [ 2581.684752][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 2581.690079][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2581.695336][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 2581.700657][ C1] preempt_schedule_irq+0xb5/0x150 [ 2581.705796][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2581.711562][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2581.717396][ C1] irqentry_exit+0x6f/0x90 [ 2581.721815][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2581.727805][ C1] RIP: 0010:unwind_next_frame+0x16d/0x2390 [ 2581.733654][ C1] Code: d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 45 1b 00 00 f6 03 03 0f 85 e4 17 00 00 49 8d 5e 35 48 89 d8 48 c1 e8 03 48 89 44 24 28 <0f> b6 04 28 84 c0 0f 85 3c 1b 00 00 4c 89 6c 24 50 4c 89 64 24 20 [ 2581.754089][ C1] RSP: 0018:ffffc90004a7ed78 EFLAGS: 00000a07 [ 2581.760189][ C1] RAX: 1ffff9200094fdcf RBX: ffffc90004a7ee7d RCX: bb5c15216ec45500 [ 2581.768187][ C1] RDX: 0000000000000001 RSI: ffffffff8be1af20 RDI: ffffffff8be1aee0 [ 2581.776185][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81728de5 [ 2581.784160][ C1] R10: ffffc90004a7ee98 R11: ffffffff81ace8a0 R12: 1ffff9200094fdc9 [ 2581.792150][ C1] R13: ffffc90004a7ee98 R14: ffffc90004a7ee48 R15: ffffffff81728de5 [ 2581.800151][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.805294][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2581.811486][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.816636][ C1] ? unwind_next_frame+0xd4/0x2390 [ 2581.821761][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2581.826897][ C1] ? do_exit+0x6ad/0x22e0 [ 2581.831273][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2581.837486][ C1] arch_stack_walk+0x11c/0x150 [ 2581.842269][ C1] ? do_exit+0x6ad/0x22e0 [ 2581.846627][ C1] stack_trace_save+0x9c/0xe0 [ 2581.851342][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2581.856752][ C1] save_stack+0xf7/0x1f0 [ 2581.861008][ C1] ? __pfx_save_stack+0x10/0x10 [ 2581.865876][ C1] ? free_unref_folios+0xcd2/0x1570 [ 2581.871118][ C1] ? folios_put_refs+0x559/0x640 [ 2581.876088][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 2581.881210][ C1] ? shmem_evict_inode+0x272/0xa70 [ 2581.886350][ C1] ? evict+0x501/0x9c0 [ 2581.890453][ C1] ? __dentry_kill+0x209/0x660 [ 2581.895263][ C1] ? dput+0x19f/0x2b0 [ 2581.899271][ C1] ? __fput+0x68e/0xa70 [ 2581.903593][ C1] ? task_work_run+0x1d1/0x260 [ 2581.908385][ C1] ? do_exit+0x6ad/0x22e0 [ 2581.912800][ C1] ? page_ext_put+0x97/0xc0 [ 2581.917356][ C1] __reset_page_owner+0x71/0x1f0 [ 2581.922336][ C1] free_unref_folios+0xcd2/0x1570 [ 2581.927425][ C1] folios_put_refs+0x559/0x640 [ 2581.932226][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 2581.937537][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 2581.943907][ C1] shmem_undo_range+0x49e/0x14b0 [ 2581.948879][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 2581.954273][ C1] ? __lock_acquire+0xab9/0xd20 [ 2581.959195][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 2581.964901][ C1] shmem_evict_inode+0x272/0xa70 [ 2581.969880][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 2581.975533][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2581.981043][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2581.987187][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 2581.992392][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2581.997875][ C1] evict+0x501/0x9c0 [ 2582.001818][ C1] ? __pfx_evict+0x10/0x10 [ 2582.006255][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 2582.011461][ C1] ? _raw_spin_unlock+0x28/0x50 [ 2582.016336][ C1] ? iput+0x6d8/0x9d0 [ 2582.020370][ C1] __dentry_kill+0x209/0x660 [ 2582.025006][ C1] ? dput+0x37/0x2b0 [ 2582.028935][ C1] dput+0x19f/0x2b0 [ 2582.032765][ C1] __fput+0x68e/0xa70 [ 2582.036789][ C1] task_work_run+0x1d1/0x260 [ 2582.041417][ C1] ? __pfx_task_work_run+0x10/0x10 [ 2582.046572][ C1] do_exit+0x6ad/0x22e0 [ 2582.050758][ C1] ? cgroup_freezing+0x20/0x360 [ 2582.055631][ C1] ? __pfx_do_exit+0x10/0x10 [ 2582.060258][ C1] ? cgroup_freezing+0x20/0x360 [ 2582.065148][ C1] ? cgroup_freezing+0x20/0x360 [ 2582.070029][ C1] ? cgroup_freezing+0x20/0x360 [ 2582.074916][ C1] do_group_exit+0x21c/0x2d0 [ 2582.079540][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2582.084787][ C1] get_signal+0x125e/0x1310 [ 2582.089334][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 2582.094909][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2582.101115][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 2582.106619][ C1] exit_to_user_mode_loop+0x75/0x110 [ 2582.111966][ C1] do_syscall_64+0x2bd/0x3b0 [ 2582.116571][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2582.121813][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2582.128007][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2582.132705][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2582.138618][ C1] RIP: 0033:0x7ff06fd8e929 [ 2582.143067][ C1] RSP: 002b:00007ff070b9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2582.151509][ C1] RAX: fffffffffffffe00 RBX: 00007ff06ffb5fa0 RCX: 00007ff06fd8e929 [ 2582.159496][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2582.167490][ C1] RBP: 00007ff06fe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2582.175477][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2582.183473][ C1] R13: 0000000000000000 R14: 00007ff06ffb5fa0 R15: 00007ffc03e2ad88 [ 2582.191479][ C1] [ 2582.194511][ C1] rcu: rcu_preempt kthread starved for 10106 jiffies! g188329 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2582.205811][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2582.215795][ C1] rcu: RCU grace-period kthread stack dump: [ 2582.221732][ C1] task:rcu_preempt state:R running task stack:26824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2582.235305][ C1] Call Trace: [ 2582.238614][ C1] [ 2582.241579][ C1] __schedule+0x16a2/0x4cb0 [ 2582.246187][ C1] ? schedule+0x165/0x360 [ 2582.250552][ C1] ? __pfx___schedule+0x10/0x10 [ 2582.255447][ C1] ? schedule+0x91/0x360 [ 2582.259742][ C1] schedule+0x165/0x360 [ 2582.263941][ C1] schedule_timeout+0x12b/0x270 [ 2582.268826][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2582.274201][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2582.280127][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2582.285475][ C1] ? prepare_to_swait_event+0x341/0x380 [ 2582.291058][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 2582.295947][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2582.302143][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2582.307458][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2582.312698][ C1] ? finish_swait+0xcd/0x1f0 [ 2582.317313][ C1] rcu_gp_kthread+0x99/0x390 [ 2582.321945][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2582.327184][ C1] ? __kthread_parkme+0x7b/0x200 [ 2582.332165][ C1] ? __kthread_parkme+0x1a1/0x200 [ 2582.337330][ C1] kthread+0x70e/0x8a0 [ 2582.341438][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2582.346675][ C1] ? __pfx_kthread+0x10/0x10 [ 2582.351311][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2582.356561][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2582.361805][ C1] ? __pfx_kthread+0x10/0x10 [ 2582.366428][ C1] ret_from_fork+0x3fc/0x770 [ 2582.371069][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2582.376220][ C1] ? __switch_to_asm+0x39/0x70 [ 2582.380992][ C1] ? __switch_to_asm+0x33/0x70 [ 2582.385776][ C1] ? __pfx_kthread+0x10/0x10 [ 2582.390403][ C1] ret_from_fork_asm+0x1a/0x30 [ 2582.395228][ C1] [ 2582.398275][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2582.404618][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2582.409885][ C0] NMI backtrace for cpu 0 [ 2582.409907][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 2582.409928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2582.409940][ C0] RIP: 0010:stack_depot_save_flags+0xaf/0x900 [ 2582.409968][ C0] Code: c5 29 f8 41 89 f8 41 c1 c0 06 41 31 c0 01 ef 45 89 c1 41 c1 c1 08 44 29 c5 41 31 e9 41 01 f8 44 29 cf 44 89 c9 c1 c1 10 31 f9 <45> 01 c1 89 c8 c1 c0 13 41 29 c8 44 31 c0 44 01 c9 41 29 c1 89 c5 [ 2582.409985][ C0] RSP: 0018:ffffc90000006e38 EFLAGS: 00000286 [ 2582.410002][ C0] RAX: 000000009d0ed0c4 RBX: 0000000000000000 RCX: 000000009cc9b8d1 [ 2582.410015][ C0] RDX: ffffc90000006f04 RSI: 0000000000000017 RDI: 000000009e9e1dee [ 2582.410028][ C0] RBP: 0000000029fa529f R08: 000000000c69e595 R09: 00000000a53f0257 [ 2582.410040][ C0] R10: 0000000000000016 R11: ffffffff81ace8a0 R12: ffffea000643df00 [ 2582.410054][ C0] R13: 0000000000000000 R14: ffffc90000006eb0 R15: ffffc90000006e00 [ 2582.410067][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 2582.410082][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2582.410095][ C0] CR2: 0000555575cce5c8 CR3: 000000003e4d0000 CR4: 00000000003526f0 [ 2582.410111][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2582.410122][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2582.410133][ C0] Call Trace: [ 2582.410140][ C0] [ 2582.410149][ C0] ? __lock_acquire+0xab9/0xd20 [ 2582.410178][ C0] kasan_save_track+0x4f/0x80 [ 2582.410197][ C0] ? kasan_save_track+0x3e/0x80 [ 2582.410215][ C0] ? kasan_save_free_info+0x46/0x50 [ 2582.410241][ C0] ? __kasan_slab_free+0x62/0x70 [ 2582.410260][ C0] ? kmem_cache_free+0x18f/0x400 [ 2582.410282][ C0] ? skb_release_data+0x62d/0x7c0 [ 2582.410304][ C0] ? consume_skb+0x9e/0xf0 [ 2582.410323][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 2582.410348][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 2582.410372][ C0] ? nft_do_chain+0x40c/0x1920 [ 2582.410395][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 2582.410417][ C0] ? nf_hook_slow+0xc2/0x220 [ 2582.410436][ C0] ? NF_HOOK+0x206/0x3a0 [ 2582.410454][ C0] ? NF_HOOK+0x30c/0x3a0 [ 2582.410471][ C0] ? __netif_receive_skb+0x143/0x380 [ 2582.410499][ C0] ? process_backlog+0x60e/0x14f0 [ 2582.410517][ C0] ? __napi_poll+0xc4/0x480 [ 2582.410531][ C0] ? net_rx_action+0x707/0xe30 [ 2582.410548][ C0] ? handle_softirqs+0x286/0x870 [ 2582.410573][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 2582.410597][ C0] ? irq_exit_rcu+0x9/0x30 [ 2582.410619][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2582.410645][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2582.410666][ C0] ? pv_native_safe_halt+0x13/0x20 [ 2582.410690][ C0] ? default_idle+0x13/0x20 [ 2582.410707][ C0] ? default_idle_call+0x74/0xb0 [ 2582.410725][ C0] ? do_idle+0x1e8/0x510 [ 2582.410750][ C0] ? cpu_startup_entry+0x44/0x60 [ 2582.410776][ C0] ? rest_init+0x2de/0x300 [ 2582.410794][ C0] ? start_kernel+0x47d/0x500 [ 2582.410817][ C0] ? x86_64_start_reservations+0x24/0x30 [ 2582.410835][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 2582.410851][ C0] ? common_startup_64+0x13e/0x147 [ 2582.410885][ C0] ? skb_release_data+0x62d/0x7c0 [ 2582.410913][ C0] kasan_save_free_info+0x46/0x50 [ 2582.410940][ C0] __kasan_slab_free+0x62/0x70 [ 2582.410960][ C0] kmem_cache_free+0x18f/0x400 [ 2582.410984][ C0] skb_release_data+0x62d/0x7c0 [ 2582.411012][ C0] consume_skb+0x9e/0xf0 [ 2582.411032][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 2582.411062][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2582.411089][ C0] ? nf_ip_checksum+0x13c/0x510 [ 2582.411115][ C0] nft_synproxy_do_eval+0x345/0x570 [ 2582.411144][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2582.411168][ C0] ? queue_work_on+0x115/0x270 [ 2582.411195][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2582.411221][ C0] ? queue_work_on+0x1ed/0x270 [ 2582.411252][ C0] nft_do_chain+0x40c/0x1920 [ 2582.411275][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2582.411301][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2582.411326][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2582.411355][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 2582.411396][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 2582.411424][ C0] nft_do_chain_inet+0x25d/0x340 [ 2582.411448][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2582.411472][ C0] ? ipt_do_table+0x2a3/0x1630 [ 2582.411494][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 2582.411526][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2582.411551][ C0] nf_hook_slow+0xc2/0x220 [ 2582.411573][ C0] NF_HOOK+0x206/0x3a0 [ 2582.411593][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2582.411614][ C0] ? NF_HOOK+0x9a/0x3a0 [ 2582.411632][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2582.411650][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2582.411674][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2582.411695][ C0] ? skb_dst+0x4f/0xd0 [ 2582.411727][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 2582.411748][ C0] NF_HOOK+0x30c/0x3a0 [ 2582.411768][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2582.411787][ C0] ? NF_HOOK+0x9a/0x3a0 [ 2582.411804][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2582.411822][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 2582.411842][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2582.411867][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2582.411885][ C0] __netif_receive_skb+0x143/0x380 [ 2582.411919][ C0] ? process_backlog+0x2d5/0x14f0 [ 2582.411938][ C0] process_backlog+0x60e/0x14f0 [ 2582.411955][ C0] ? __lock_acquire+0xab9/0xd20 [ 2582.411985][ C0] ? __pfx_process_backlog+0x10/0x10 [ 2582.412008][ C0] __napi_poll+0xc4/0x480 [ 2582.412023][ C0] ? net_rx_action+0x46d/0xe30 [ 2582.412042][ C0] net_rx_action+0x707/0xe30 [ 2582.412060][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2582.412093][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2582.412130][ C0] handle_softirqs+0x286/0x870 [ 2582.412156][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 2582.412184][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2582.412211][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2582.412232][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2582.412256][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2582.412285][ C0] irq_exit_rcu+0x9/0x30 [ 2582.412308][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2582.412333][ C0] [ 2582.412339][ C0] [ 2582.412346][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2582.412365][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2582.412390][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 55 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2582.412405][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 2582.412419][ C0] RAX: 75e5fae1ee3d2800 RBX: ffffffff81974f68 RCX: 75e5fae1ee3d2800 [ 2582.412433][ C0] RDX: 0000000000000001 RSI: ffffffff8d96d7bc RDI: ffffffff8be1af40 [ 2582.412446][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 2582.412459][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fdef0 [ 2582.412472][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 2582.412486][ C0] ? do_idle+0x1e8/0x510 [ 2582.412517][ C0] default_idle+0x13/0x20 [ 2582.412533][ C0] default_idle_call+0x74/0xb0 [ 2582.412550][ C0] do_idle+0x1e8/0x510 [ 2582.412578][ C0] ? __pfx_do_idle+0x10/0x10 [ 2582.412612][ C0] cpu_startup_entry+0x44/0x60 [ 2582.412651][ C0] rest_init+0x2de/0x300 [ 2582.412671][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2582.412690][ C0] start_kernel+0x47d/0x500 [ 2582.412734][ C0] x86_64_start_reservations+0x24/0x30 [ 2582.412752][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2582.412770][ C0] common_startup_64+0x13e/0x147 [ 2582.412797][ C0] [ 2583.281879][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2583.296495][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2587.197016][T18795] Bluetooth: hci1: command 0x0406 tx timeout