last executing test programs: 14m33.056514934s ago: executing program 1 (id=2151): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x96, 0xa0, 0x10, 0x1943, 0x2257, 0x91ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x54, 0xad}}]}}]}}, 0x0) 14m31.124838997s ago: executing program 1 (id=2155): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@cache_readahead}]}}) 14m29.890350383s ago: executing program 1 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x96, 0xa0, 0x10, 0x1943, 0x2257, 0x91ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x54, 0xad}}]}}]}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 14m26.388995296s ago: executing program 1 (id=2163): syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000101010100000000000000000200000014001980080001000500000008000200a500433a180001801400018008000100ac14148b080002007f000001"], 0x40}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000000a00000000000000000000000000006eb0dd07c9eeea8eb74a4fba25de95ba3d7dcccfb9a4a553c75975613835131421a4607e77c8a5957ab43663586f6ca6b634f08d63806d1b7c86de4907fd376fa40da5c0d25618725f7603e9b5119b980f129867997c1c6555af7142259e15f9bdbb41139ab533b0087925f800c5"], 0x14}}, 0x0) close(0x3) 14m22.02476369s ago: executing program 4 (id=2173): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000002a00)}) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 14m22.024264335s ago: executing program 4 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x96, 0xa0, 0x10, 0x1943, 0x2257, 0x91ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x54, 0xad}}]}}]}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 14m20.480504692s ago: executing program 1 (id=2178): socket$nl_route(0x10, 0x3, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x54, 0x40, 0x7, {0x5, 0x4}, {0x5, 0x6}, @cond=[{0x5, 0x10, 0x4, 0x8, 0x1, 0x2}, {0x3, 0x1, 0xf, 0x1, 0x4f0b, 0x9}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x2a3e11fe21f2cc57, &(0x7f0000000480)="d34a2b85545aeb0fb54b0761a2733d6e53e273c9e6571f308340defe50a0be1e8b7c1276af5101cf392e8f7bce081893ad60f59845bc010f7753892e4ebdc4b7e1abc14dc7dd42f52d11cba9bac1505df5cfa3c035a617fc7509e129d30a9381a3dd0cf9856441a6dcd04c536759ecef1bf24a699524887dc2f5060c452a", 0x7e, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000008600)=0x1, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 14m18.99959562s ago: executing program 1 (id=2180): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x32, 0x5, 0x3c, 0x8f, 0x805, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x7f, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x1, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x8001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x4, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398f4, @void}, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) inotify_init1(0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 14m18.960718689s ago: executing program 4 (id=2182): r0 = epoll_create(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c00)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) sendmsg$key(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x2, 0x17, 0x2, 0x5, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x40010) 14m17.519559426s ago: executing program 4 (id=2185): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000000b0601028000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c7e4e6b8300000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa04000880"], 0x78}, 0x1, 0x0, 0x0, 0x24048810}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c000180060006000806000004"], 0x528}}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0xfffd, @multicast1}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000280)={{0x2, 0x4e23, @empty}, {}, 0x6a, {0x2, 0x0, @broadcast}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x2, 0x10) 14m16.520060375s ago: executing program 4 (id=2187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xff, 0x7, 0x0, 0x8, 0x3, 0x3e, 0xf, 0x1e0, 0x40, 0x329, 0x4, 0xd619, 0x38, 0x3, 0x23d, 0x4e88, 0x6}, [{0x60000004, 0x2, 0x3ff, 0xe, 0x80000001, 0x8001, 0x2, 0x6}, {0x5, 0x6, 0x0, 0x7, 0x6, 0x7, 0x2242, 0x2}, {0x2, 0x8000, 0x9, 0x8000000000000000, 0xcdd, 0x8, 0xcb, 0x8000}], "6ea5b90cdfaab8d30c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x600, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) unshare(0x22020400) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) 14m15.466028149s ago: executing program 4 (id=2188): syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000101010100000000000000000200000014001980080001000500000008000200a500433a180001801400018008000100ac14148b080002007f000001"], 0x40}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000000a00000000000000000000000000006eb0dd07c9eeea8eb74a4fba25de95ba3d7dcccfb9a4a553c75975613835131421a4607e77c8a5957ab43663586f6ca6b634f08d63806d1b7c86de4907fd376fa40da5c0d25618725f7603e9b5119b980f129867997c1c6555af7142259e15f9bdbb41139ab533b0087925f800c5"], 0x14}}, 0x0) close(0x3) 14m3.64941832s ago: executing program 32 (id=2180): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x32, 0x5, 0x3c, 0x8f, 0x805, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x7f, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x1, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x8001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x4, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398f4, @void}, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) inotify_init1(0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 14m0.276287294s ago: executing program 33 (id=2188): syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000101010100000000000000000200000014001980080001000500000008000200a500433a180001801400018008000100ac14148b080002007f000001"], 0x40}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000000a00000000000000000000000000006eb0dd07c9eeea8eb74a4fba25de95ba3d7dcccfb9a4a553c75975613835131421a4607e77c8a5957ab43663586f6ca6b634f08d63806d1b7c86de4907fd376fa40da5c0d25618725f7603e9b5119b980f129867997c1c6555af7142259e15f9bdbb41139ab533b0087925f800c5"], 0x14}}, 0x0) close(0x3) 9m4.267487746s ago: executing program 2 (id=3030): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @in={0x2, 0x4e24, @multicast2}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, @isdn={0x22, 0x5, 0xfa, 0x5, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2a, 0x1}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1bb}, {&(0x7f0000000040)="b22377eea7b6d3460287c9966016342f6d666b973077", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509f", 0xd1}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8m46.258256948s ago: executing program 2 (id=3037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000500)={0x20140200, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300), {0x12}, &(0x7f0000000340)=""/169, 0xa9, &(0x7f0000000400)=""/74, &(0x7f0000000480)=[r0], 0x1, {r3}}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) write$tun(r4, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val, {0x8864}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0xfffffdef) sendto$unix(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x800, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 8m45.501269022s ago: executing program 2 (id=3086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x32, 0x5, 0x3c, 0x8f, 0x805, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x7f, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x1, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x8001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x4, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398f4, @void}, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) inotify_init1(0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 8m41.538662362s ago: executing program 2 (id=3098): unshare(0x40600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = fsopen(0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/nf_conntrack_expect\x00') lseek(r2, 0x8000, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x1, 0x4) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="25aabb1da216e454ac8c4cb3dcb92d63707573657420"], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0xffffff84, 0xffffffff}, 0x1c) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 8m39.214569875s ago: executing program 2 (id=3103): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="181b000000000000000000000000000071140c00000000009500000000000300fa6f4f71e77a97cf361227f37fdfedef9fb588d81687a236b6d1a2da9ae7eb38b8f4c354d246654f4e0f003c6f3c9c"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f00000003c0)={0xa, 0x4e24, @multicast2}, 0x10) r4 = syz_open_procfs(r0, &(0x7f00000001c0)='net/sctp\x00') ioctl$NBD_CLEAR_QUE(r4, 0xab05) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) accept$alg(r6, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) 8m38.267168075s ago: executing program 2 (id=3109): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x32, 0x5, 0x3c, 0x8f, 0x805, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x7f, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x1, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x8001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x4, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398f4, @void}, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) inotify_init1(0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 8m36.830668646s ago: executing program 34 (id=3109): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x32, 0x5, 0x3c, 0x8f, 0x805, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x7f, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x1, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x8001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x4, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398f4, @void}, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) inotify_init1(0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 4m50.326507008s ago: executing program 5 (id=3917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x419e}, {r1, 0x6080}], 0x2, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000002c0)=0x206646) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000280)=0x8fe) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000002980)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) 4m48.627122262s ago: executing program 5 (id=3921): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000004000000000000000000000000010100", @ANYRES32, @ANYBLOB="004b2055f4434400"/20, @ANYRES32=0x0, @ANYBLOB="000000000300"/24, @ANYRES32=r0, @ANYBLOB], 0x50) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f00000005c0)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[], 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231306e53f47000000002a9401070200000083000000020b09017a150b5d8c3dda"], 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000101010200000000000000000a00009a0500000000000063"], 0x28}}, 0x0) r5 = getpid() r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x7, 0xffffff01, 0x26, 0x6, 0xfffff101, 0x7}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x2f, 0x28, {0x28, 0x22, "33655401bcec963342dcbdaa9af2ef3d5fee63d22934120e5aa2c025dd0dfc67571411137f93"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0x6, 0x99, "4e6a143736207866fa648259fd50b4552f44e34c0d40a18d80f640a4c33e447e638cb76f2695d34dc015e762b4024faedddf25b7576324c356da85a94f8c2097d040375a5a84694f1e36c0cf9f1bcd103cebe59a692980f3abc2eda19275d76df71d60d5769fc3ce47564ad2d7123146bc511fd539f6c2f4df86920f63b5a2a469c76b3402ffa4fbb6ec19d2703a0bc015b001843426f3f2e8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x101, 0x6, 0x3, 0x1b, 0x7, 0x0, 0x4, 0x3, 0x3, 0x8, 0x5, 0x5}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prlimit64(r5, 0xf, 0x0, &(0x7f0000000080)) 4m45.78267752s ago: executing program 7 (id=3932): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x4, 0x4e22, 0x400, 0x2, 0x0, 0x0, 0x32, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0xffffffffffffffff, 0x73, 0x8}, {0x3, 0x0, 0x40000000000000, 0x9}, 0x2e61, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@private2, 0x0, 0x2, 0x0, 0x0, 0xf606, 0x0, 0xffffffff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xff}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfa}, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="1e00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000008000000000000000353fd4dd479cb793bbce85ab2b9feff67a78cc7ab3b85c7e8c2460d4184b9007b28f21a7f49a8fcbf9e57d274fb777f430caa73e2e1f6f9021e0e7c6cf2c9b9ddeaf0af7344319c38e724853bfd09e39b89faf163400c7dbc9a165342b9dac0396476682264df3a7fb44d9df7333a31b2a4e22efc08b784efbef2d060a1921493d1b2e38efc82a056181405e43553686580000", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r2], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f00000003c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{&(0x7f0000000840)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000780)="5a2b1e7f84cb2513c4e2", 0xa}, {&(0x7f00000009c0)="af3929ac013b1fffc6d2f9dc60b347e07811f24809b3377a74c1f96f16fa1672b2e31844f40e64e4f14cd2eff8dc90b087aa", 0x32}, {&(0x7f0000000a00)="98822b38403f7c413f50b81b4e5d386a4b41f1100952b8679d2ec0ec0aee0d0f4614b8af9407e51718c9626ea3d8b7187a0f10dd7d76e7e0d502eded07", 0x3d}, {&(0x7f0000000a40)="e06ee3ce17dccdb90a518e6e3c0aa256df8f41b9ef05000000ff2c3c70e73bdf5c64608dc590cd8b8cfb838d9d5332d2a9a8f096e02e1cc5da028b0398fe4b5adda56a561180599210ad697640bd98f73db45b0f493b48a91aab32a02f7bba7d7496e557f4dfe9e195b5c4c4495454310629a5c3e2e8c49e5579", 0x7a}, {&(0x7f0000000ac0)="b83b2947a8a2a7aafb34416d5f812fc69afb640387a704422789bcce3f9a193ff5ee8403ee84af4e6415f92eff92bf3e42817c1d0f27ec7de50cdf6279bd5b51e9c92a0b97e32f43feb6af2b91dec6cba58822d05a8c55a109223c31e45fe1822f1de8e8341074d2d32f6edbe664c6f4598df3582fd29af5969a02f0c62906a834f2b0aede00db61aca3265770ce904943dc564429be6c69bff2934450c2ad94f01a63e3ea22fb2fd0f8f4ae9ac34c9c016a55aba478126931e02b7b5db9b9e628cdbe6139df9d3af20ffb5a9ec2411abf9cbbe989d5b4d5b84795742e2d5212ff2882143b24a2321b", 0xe9}, {&(0x7f0000000bc0)="e4b564c2abacdbac784a0769985e1371cfc27380d68fa37c8772d81fec3d4c2ea6277d2fbc139728e2fcf9860458f570852b6002a2b7bada29807fa6a94794df2fefc8df2b2039b5fe03fbf3d6103ead1c8cb8c111c537d35dbc60d844e3e43c1990840d2d0e1422f2a561130ff3137c791440d126d1a7a15425b26866eb982c6493990a2e315907e8fae36dae33e3b6bc5f75b93c63412ad3a4939464ac951863780d1eed29011492", 0xa9}], 0x6, &(0x7f0000004ac0)=ANY=[@ANYBLOB="88000000000000002900000039000000000e0040000000000000000000000000000000000000000100000000000000000000000000000001ff020000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000aaff010000000000000000000000000001000000000000000000000000000000001400000000000000290000000b0000000000000100000000280000000000000029000000390000008802010100000000fc0200000000000000000000000000006800000000000000290000003700000033090000000000000104000000000401f7000100c204000010000001000001000401080730000000010aae00000800000000000000010000000000000006000000000000000200000000000000f131526400000000000000580000000000000029000000040000003b08000000000000050208ca0103000000050200060401e600010004010907280000000008ff0500ffffff7f000000000c000000000000000100000000000000710000000000000028000000000000002900000036000000330100000000000001070000000000000000000000000000380100000000000029000000360000000423000000000000000100c910fe88000000000000000000000000000105020d080502800000010008e7183498f7c2134a6500d01095cec31f80cc51cf65c50308ce22331643dfed4028b4439ab549cdff7d56137d88357b27c99e6adf3dff49a3b55039be1ee37591844eef26cd4d7909b7492a54ccd9d50d3c737da6e839c1718ab43f89d13e0d57eec2d452d099c8ac8336b6a1a9b03159771839f1345024e4fe2807284222bd27b65336adb81f6f4077629f48c8ae438893700b722b0a584516370db611fbe67f1837007b11470ec6c0750c97d12c0f6a461dad3193d86ce5476efc46f57692caef74540d19a2be9039f02974b6e560ac9cb8c054d451408c86ea11de856ae53650e07e38b9bd2054b43dc2e69d5daa7d928665feafc9ff11000100c910fe880000000000000000000000000101000027e9ab4ab85c8bbcd7c516bfca70849dd4ccff88aa9c9d4ecaf20d5725611f8063a12f4459337531b20d25bdf5098f2190d3df89859aa770a03dfd8bd7560c0bad43fea9b6aa08c2faeabae6e801d5651a77be3b3c3bb84d8e0576fc50e012958c4719d89b4b7e646272ab6dce674c65c08a5e2e8bb68f1229d1d37552194179bf8ddd2653bd36efc8c06851759bd506eca3b1e6e6fe277de63ee1d5e2c7b252"], 0x2e8}}, {{&(0x7f0000001000)={0xa, 0x4e20, 0x81, @mcast1, 0x10}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001040)="3e58d6233e787c4925d59feaf0286ea6f5182e69f4674f97a9dce91b7281bc2b9598b77b33600c", 0x27}, {&(0x7f0000000d00)="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", 0x129}, {&(0x7f0000001180)="e3cfa8c947c3dfe03a239543554b7bb529710c5b1afda54a34f25e593e5b0123e97bef1e5a450a6461cb7e4796ff1065524ce181b2b30befb4cae1cb5e92f9fbe2b3f7787257b95f1b622f11d4ab2c382706a346fb994b68ee0ec22f77618ab6c430b9020bcc0291d5c4", 0x6a}, {&(0x7f0000001200)="2f18", 0x2}], 0x4, &(0x7f0000004780)=ANY=[@ANYBLOB="14000000000000002900000008000000e10a000000000000f80100000000000029000000370000005e3b000000000000074800000000107b000007000000000000000500000000000000090f00000000000008000000000000000900000000000000070000000000000067d000000000000408000000000000000401074772a45fcb5b61c9bc8a4bb1c16afb511ba647d59b5801726bacbef1aa0ab39da858413883205c7469d7c34fe7f5cc9573bce2e36a5b368588d79b7e43f3dac40781fe6e13a78f9708a4717b191639dc15ce4ffe37fb7813b356882b339cfeec68cd950ca8b97386f89826f929e6b5165cb31b2d010600000000000040bb8776cae274e31b1979753a7c156e646f230e0b0f35937c6e00efd299e4c432cee1cacc2dfab839775f67a363ed7149933cf924c8cd3f0bc5759c480098778e18cc1932705f31e3eb49c2254330ec3b5a1202a2c0c17a6549df9a072bc4f257a75313bdae42548c7de0a226a832ba40f220b0d082ec0cf5681bc0dfd1b75646856ae9a2982521957f93fa1c912d3231c709d207ea8d44d8ba1090c8e02f4f449ea149342fd84ddc06b91f5d6544df3d8ac0581f438157d147800fe010d0b1be772259271faf0738000000010c0101000200000000000000010400000000000006000000000000000600000000000000ff07000000000000ffffff7f000000000001000e15cacb563e9ce065112f3b47a39fb3d8eb6939a141c4000000000000140000000000000029000000080000000b000000000000001400000000000000290000000b0000000000000900000000780000000000000029000000390000007311e50900000000fe8000000000000000000000000000aa00000000000000000000000000000001fe880000000000000000000000000101fc020000000000000000000000000001fc000000000000000000000000000000200100000000000000000000000000021400000000000000290000000b0000000000960000000000608380171cf991213979eaa12dbb66f6a2b8e5e0951b95806050c9216e4f9c25dca99a9b57938d4f2ef116c7c99bc068811431a31aa78ee795"], 0x2d0}}, {{&(0x7f0000001580)={0xa, 0x4e23, 0x9, @local, 0x3000000}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000e40)="240dbad780e768da7b7b9220279dbff49ba94eb54f27310ca3d025211dcbacd3492b0bc9b9ecd1b10eb90bb6cf442325d98f19b6bdd8c7518252942d4ff41c2cb92b8ea740fd16b7ac150ce59f7a2a531cc6bf915f8cdde7ae9095de2e1feb571f9654a9c8ce18db3d2072c478a4eeb175bcbeece83f3786cbea58c73def3e51f56863920673e7a1e0d147345f2b2d9da038d11eb034e4ac30cc10d8a71cec30e90fe5d21a195d2e4d4debb2b306b728611731131b1370baced394d8c64d9a55ec60912964d4fe6ebf761ef2438636ec2345d13b731bd495bb5f53bcf6b7747cbf1b609d5b8bb66e847adbcd5e7a1aa3435827d9fa46cc972692f998e4b012dc1b34f8021739c52e447c1fbc7d99fca2c58bcea756e806dadf0b255d78a08795f29fc6eb82ad8255250b0e41e7b7134745064887bca47b640617f07969c80700000000000000000010b36c4bcabdc066522708841c74f4a64a0947fdfb85e36f23db621a8c5ec73b0bbf4baab2a9429b99960a516201127e8a70016b66ee775acdc7b5014433d6b29b75bf9a4238a965277e0951e79c1cfab57b893d643132164c90b2b494bb30379ae18fe129f973e18bf3778c300fa046c7eac3d9f082a5", 0xe5}, {&(0x7f00000016c0)="62f0331d78c4a29c302b03e186c0c814a804cda0e0413fbbc303bc1fb5539bb1cf2ac1886466196e1ab78a29d76fba02be3fae6102f169edee53e2c514b7ca94f9151ab95e17f074a18937d03e5635d1498602cedb1274106133a11b587d9941b6cb312e357bb80f83619a20a24ebd7ee099a662b708be9828a1b145aeb00cf84c87b1148999f76e22c38a5c6611ca1046f54fb908796c6ab793f42acf28dded113b26d32365a037e67f7291698f047b79a6f1f07b1579c4e9ba8d69f7ea9d43013090f4b22bea0fecc57045dad2b5754efe4242f2214f639d9d5bd1ab2fe0ee35", 0xe1}, {&(0x7f00000017c0)="bfdd5afb7216651a347a534b65911d8f5c579db7eec358f611ad6b80aeb438d058a90c8140d3fdb841029c7f1ca975d3d151af0bd5d16cc8a4402ee52019209f146715fbbec594184f42464011b441ee3f4c5304b773df4aed22d942c614103c4ae062814fdc6a757bce2091e2627782a8df1a799e3a478a2cb304e3242fdecc43b46194b167707f7c8d37569ece0c893c9461dd1d3e381b070b2838fa72bacdff77fc59417656016de0bdb0c972a9cfe0356d40992d8c444838c2d8c952ab1ffd2c9f45f9d04ab20396795f3fa66975c740915a62f264110c93e220413938517d59fd27557e98", 0xe7}, {&(0x7f00000018c0)="41bdda56da5834cb07272f5f8ae8eac8842b310deb2a822aa81b4df56599c14689e70477ddb159a67f3bccba4bc5456217f48337b0cdc34104ce84ff9bff13fddd548f948753eab6d859cf2c85b0bef92bfd964ebd91e6410b7dde6aaa33153f951a461f6401780aed58cb6a56be7c2341b4ff87d33432c6833f28fd451bbd08f76ffd2667cd330155df406a3d0700caaf8281157fef464a7c4aa5a11bce4af5c7ade8f1cfbf0e836f25986e8725d2173e06815f5671ef55027b94a7670f8ac10ee777a8d4bcbf6965ebac243c6bb83875b7c5e42c07e6d1a90ec9d1fecb9a7e0a0c5e", 0xe3}], 0x4}}, {{&(0x7f0000001a00)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2c0}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001a40)="e89bf0593bf125c806c4476c95dc8e458c6a63f12b3929ebbabbf0fab4d8ca2181c6f3a4ef945faf421f34c19f339b232a4b0116fade65ba3f4cb4544add919b75282be23c06ed89116893eab141df8520893a7ed4c5c51f3f716083746e7afcd890b0b236a4a91b3a3c5562f62dcb9d730723dfd305606e31848b38cf6fa7461d17308bd07d720380f356c92888a62436f6c0773f8395b23d237e0a9d49cc2cf7e85140f555521c126ac00e78dbe8c60990e427237e2eea2c86", 0xba}, {&(0x7f0000001b00)="574fbbc24d96bd435abaef74f154326304d4fb87e51e9c22", 0x18}], 0x2, &(0x7f0000001b80)=[@rthdr={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0x0, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x24}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x78}}, {{&(0x7f0000001c00)={0xa, 0x4e24, 0x200, @local, 0x2}, 0x1c, &(0x7f0000004080)=[{&(0x7f0000001c40)="45a501ee5c4b985e6cd35778fe0429bc8da11ccca0c31f43358d30f9f423cb3bff73418da01242a75440", 0x2a}, {&(0x7f0000001c80)="5848376a1fcad3c7a585df635b6c21ccf1772b6e1b356078bd0585fcf525a9285b28089fa087e70313da5a52f29e81d3fe9becdd32437b2460ca5e0ed21ab9f6caed50c4f2def6eada718f9e02719e80", 0x50}, {&(0x7f0000001d00)="7d183aab89e1774f9952c138eee177369be01aea88cf924c7334bcc6457fffa49321072a0a09ef157c4a9841ea03faa9cd57d78ff7805d408283b83490ae5d29d301fa63541820f2012a1f051e9a83e95b4b6d992cac1e634bf0ea64e0a620454c4a1f0bfda7e7abb99e5cef0eec7f6e6d74d455a8ea6736cef214ba02a2dc206f79b409307604cd414157d88abf699de10b892df6431c426d36a45543998333c8ec6d3d53d235", 0xa7}, {&(0x7f0000001dc0)="281c9c24bfa26b2ae4162c929391bc103d6a26b02259fa250865c421e077052c613169398753bab4a8a0c369e93fafe8afe09a221000d3c0224edba7026eba0134beb6959dcf87015c8e7d3a5aa8c4c811666e4b14cbe15f680622cd16777d2713da326bb895860338c3e508b53d15b99233987255e6b097b9ab9a3b0636f68e6ff91ba7762c6f31950f4ee9dcf475ea7c1dcc23d269511374efbf8350dbb38604ac8a59d7e5cff737f123cc58a4", 0xae}, {&(0x7f0000001e80)="42832937cdb6884255ea6da274b668025424ee1efb2e1253b0ef24cb66daa4cbe2c67704d7be293722ec662dc2f1bd67050f3506e0f56b019928cd99ee820958f291c49833f5fb48f001de44678bb5480080c138e561042906a18e663b4aac984285cc8bb3186a61", 0x68}, {&(0x7f0000001f00)="e4f1fe10045584383924652f99bf002c7775aaa14b69629263cdf9bba304ec5cc856130660aee5c4de9da2f08dc311fbea37fceafa29e181d19c42c98efda1bfe2afe81ce762bfb6827febab332faca8ac7ad2ea49e0cca99727b1bc63b081", 0x5f}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="07364206570208f57697bd36d91a20ccf7ba99b3159adb05a3b46b23d71055364a4f04074e5f1d07311d831022cbec9b5347c6ea67b435ab7e755d2144ffbc50801c12efe6eeeeb3d72c1a0afe1702", 0x4f}, {&(0x7f0000003000)="d5e106eea17e21023bb63f5ded53e3c41ade9952c41e50962e1abea6e2153854b0469fc898ea49e576cf484e3ee149baf0f43cc2df698176cef01e622588e73965443bcaa5b9888b6fdf97a2b7d070cbf091cf8473d55efaef4f935c567257dcbe82f3633863adb65d6e367b1fcf", 0x6e}, {&(0x7f0000003080)="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", 0x1000}], 0xa, &(0x7f0000004500)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86}}], 0x5, 0x20000800) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12020, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x7, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1424]}, 0x608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000880)='cq_drain_complete\x00', r2, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4m45.067652359s ago: executing program 7 (id=3933): clock_getres(0xa00, 0x0) r0 = inotify_init() r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x34}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x20007113, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 4m44.918873353s ago: executing program 5 (id=3935): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) syz_io_uring_setup(0x3b07, &(0x7f0000000380)={0x0, 0x5747, 0x3e00, 0x0, 0xffffffff}, 0x0, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f0000001000/0x4000)=nil}) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x98, 0x54, 0x100, 0x0, 0xfffffffa, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x2, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x2, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x3, {@ip4=@loopback}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 4m44.918440252s ago: executing program 7 (id=3936): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c3c3fb795653942218ceb7a0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r1, 0x1, 0xf, 0x0, &(0x7f0000000200)) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) unshare(0x2c020400) (async, rerun: 32) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) (rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x4090) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x6) (async) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 4m44.719034724s ago: executing program 5 (id=3939): syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x8}}}, 0x14) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 4m43.547062531s ago: executing program 5 (id=3943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x34, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x28c, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xcb, 0x73}}}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x7, 0x12, 0x6c, 0x48, 0x3, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0xfff7, 0x6b, 0x5, 0xb79, 0x9, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x2, 0x1, 0x4, 0x3, 0x5, 0x1]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x1}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x7}, {0x0, 0x4}, {0x7}, {0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x101, 0x100, 0x7ff, 0x4, 0x4, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x13, 0x18, 0x4, 0x6, 0x3, 0x6, 0x4, 0xb, 0x30, 0x36, 0x60, 0x36, 0x48, 0x9, 0x9, 0x12, 0x48, 0x1, 0x3, 0xb, 0xb, 0x16, 0x1b, 0x1b, 0x5, 0x1, 0x36, 0xb, 0xc, 0x2, 0x4, 0x2]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x5, 0x5, 0x0, 0x400, 0xf801, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x4, 0x5, 0x1, 0x744, 0xa4, 0x4, 0x101]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x0, 0x3, 0xa408, 0x8, 0x4, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x81, 0xe, 0xef57, 0x0, 0x5, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x2}, {0x5}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x7}, {0x5, 0x9}, {0x7}, {0x4, 0xa}, {0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xbb4d, 0x7, 0x0, 0x4, 0x101, 0x8d61, 0x765]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0xeb, 0x1, 0x3, 0x0, 0xfff8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7, 0xec, 0x9, 0x0, 0x6, 0x9, 0xb]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0xb, 0x24, 0x1, 0xc, 0x30, 0x3, 0x4, 0x6c, 0x9, 0x4, 0xc, 0x18, 0x6, 0x3, 0x18, 0xb, 0xb, 0x1, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x7, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x3}, {0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x4}, {0x5, 0x9}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x8}, {0x0, 0x5}, {0x3}, {0x1, 0x9}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x9, 0x1b, 0x1b, 0x1b, 0x3a, 0x5, 0x6c, 0x33, 0x5, 0x18, 0x1, 0x48, 0x60, 0xc, 0x12, 0x18, 0xb, 0x6, 0x2, 0x1b, 0x18, 0x6c, 0x2, 0x9, 0x9, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x6, 0x1b, 0x3, 0x36, 0xc, 0x24, 0x12, 0x1, 0x48, 0x0, 0x6, 0x9, 0x36, 0xc, 0x2, 0x6, 0x5, 0x24, 0x30, 0x48, 0xb, 0xc, 0x24, 0x36, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4080) 4m42.691589679s ago: executing program 5 (id=3948): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x45) ioctl$TIOCSTI(r0, 0x5437, 0x0) 4m42.010303157s ago: executing program 35 (id=3948): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x45) ioctl$TIOCSTI(r0, 0x5437, 0x0) 4m41.711567134s ago: executing program 7 (id=3953): syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x8}}}, 0x14) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 4m40.651991107s ago: executing program 7 (id=3955): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) pwritev2(r0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4b}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f0000000300)) pipe2$watch_queue(0x0, 0x80) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x56) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x101003, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x100}, 0x1}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) getsockopt$sock_buf(r4, 0x1, 0xa, &(0x7f00000002c0)=""/105, &(0x7f0000000080)=0x69) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x97, 0x0, 0x7}) r8 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r8, 0x0) 4m40.241937193s ago: executing program 7 (id=3957): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rcu_utilization\x00', r2}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000240)) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)=0x36b) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084149, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x810, r4, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000002c0)={0x6, 'ipvlan1\x00', {0x30000}, 0x3}) fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r11 = syz_open_procfs(r9, &(0x7f0000000000)='map_files\x00') getdents64(r11, &(0x7f00000000c0)=""/44, 0x2c) getdents(r11, &(0x7f0000000040)=""/44, 0x2c) 4m39.977145352s ago: executing program 36 (id=3957): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rcu_utilization\x00', r2}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000240)) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)=0x36b) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084149, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x810, r4, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000002c0)={0x6, 'ipvlan1\x00', {0x30000}, 0x3}) fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r11 = syz_open_procfs(r9, &(0x7f0000000000)='map_files\x00') getdents64(r11, &(0x7f00000000c0)=""/44, 0x2c) getdents(r11, &(0x7f0000000040)=""/44, 0x2c) 10.666277669s ago: executing program 8 (id=4968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x34, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x288, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xcb, 0x73}}}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x7, 0x12, 0x6c, 0x48, 0x3, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0xfff7, 0x6b, 0x5, 0xb79, 0x9, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x2, 0x1, 0x4, 0x3, 0x5, 0x1]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x1}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x7}, {0x0, 0x4}, {0x7}, {0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x101, 0x100, 0x7ff, 0x4, 0x4, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x13, 0x18, 0x4, 0x6, 0x3, 0x6, 0x4, 0xb, 0x30, 0x36, 0x60, 0x36, 0x48, 0x9, 0x9, 0x12, 0x48, 0x1, 0x3, 0xb, 0xb, 0x16, 0x1b, 0x1b, 0x5, 0x1, 0x36, 0xb, 0xc, 0x2, 0x4, 0x2]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x5, 0x5, 0x0, 0x400, 0xf801, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x4, 0x5, 0x1, 0x744, 0xa4, 0x4, 0x101]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x0, 0x3, 0xa408, 0x8, 0x4, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x81, 0xe, 0xef57, 0x0, 0x5, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x2}, {0x5}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x7}, {0x5, 0x9}, {0x7}, {0x4, 0xa}, {0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xbb4d, 0x7, 0x0, 0x4, 0x101, 0x8d61, 0x765]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0xeb, 0x1, 0x3, 0x0, 0xfff8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7, 0xec, 0x9, 0x0, 0x6, 0x9, 0xb]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0xb, 0x24, 0x1, 0xc, 0x30, 0x3, 0x4, 0x6c, 0x9, 0x4, 0xc, 0x18, 0x6, 0x3, 0x18, 0xb, 0xb, 0x1, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x7, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x3}, {0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x4}, {0x5, 0x9}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x8}, {0x0, 0x5}, {0x3}, {0x1, 0x9}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x9, 0x1b, 0x1b, 0x3a, 0x5, 0x33, 0x5, 0x18, 0x1, 0x48, 0x60, 0xc, 0x12, 0x18, 0x2, 0x1b, 0x6c, 0x2, 0x9, 0x9, 0x30, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x6, 0x1b, 0x3, 0x36, 0xc, 0x24, 0x12, 0x1, 0x48, 0x0, 0x6, 0x9, 0x36, 0xc, 0x2, 0x6, 0x5, 0x24, 0x30, 0x48, 0xb, 0xc, 0x24, 0x36, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000041}, 0x4080) 9.740964274s ago: executing program 6 (id=4970): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) mount$afs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000880)={[{}, {@flock_write}], [{@fowner_gt={'fowner>', r0}}, {@obj_role={'obj_role', 0x3d, '\t\x1b\x1c\x1e\xc3h$\xb0^\xd9\x15\xdfn\x00\x00\xac\xca\'\xef\xb0*\x13j=\xda\xfd$p\xa5\xda\x94<\x15\xdaY\x1cD\xf6\xf3\x98\xc6\x9e\x88\x9c\xe4\r9!\a\x16\xa9\b\x00\x00\x00\x00\x00\x00\xbe\xed\x00\x00\x00M*\xc1}\x11@\xa1W\xa6\x8e&\x97\x8c\xa2\xd3*d\x00\x00\x00\x00\x00\x00\x00\x00\x007\x00\x00\x00\xa2\xfd\'\xaen\x90\rzt\x85\x9a0?\x16\"\x99e\xea\r:\xa9J\xa3\xd7\xc6\x8aB\xc4\xe4s-\xfd\xe4\x18\x00\xdfo\xbf\xc3\x80v\x16\xa2UDL\x04\xdb\xe9\xc1`\v\xb1X\xd6\x89\xf7\x89Q\xc1jr\xcd\f\xba\xf5\x9a\x1dP\x99\x12=\xd4\xa4\x99h\x03;\xd8\xf8\n\xc6\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/nullb0\x00'}}, {@flag='ro'}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) fadvise64(r1, 0x0, 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0xfffffffffffffff6, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x3, 0xb, 0x13ec, 0x1}, 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000d00)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xd9\x15\xdfn\x00\x00\xac\xca\'\xef\xb0*\x13j=\xda\xfd$p\xa5\xda\x94<\x15\xdaY\x1cD\xf6\xf3\x98\xc6\x9e\x88\x9c\xe4\r9!\a\x16\xa9\b\x00\x00\x00\x00\x00\x00\xbe\xed\x00\x00\x00M*\xc1}\x11@\xa1W\xa6\x8e&\x97\x8c\xa2\xd3*d\x00\x00\x00\x00\x00\x00\x00\x00\x007\x00\x00\x00\xa2\xfd\'\xaen\x90\rzt\x85\x9a0?\x16\"\x99e\xea\r:\xa9J\xa3\xd7\xc6\x8aB\xc4\xe4s-\xfd\xe4\x18\x00\xdfo\xbf\xc3\x80v\x16\xa2UDL\x04\xdb\xe9\xc1`\v\xb1X\xd6\x89\xf7\x89Q\xc1jr\xcd\f\xba\xf5\x9a\x1dP\x99\x12=\xd4\xa4\x99h\x03;\xd8\xf8\n\xc6\x00'/189}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xcdr\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj\x130\x0e\xe4\x86\xf0\x1c\v\x1b3\xb6\xd4%1\x16=]\x91\xa0\xfd\x1a@\x8d\x16\xa6\xa6\xc0_O\"^\xb5:?T\x96\x00\xd6\x1fC6$)\x9c\xdf\xf7\x0e8q:[\x89\xf5\xde\x82\x11\xa1\xed\x88\xb7\x84\xdc\xd7;\xcb\x1fn1\xf8\xb3\xfb{\x106a\xde\xe1\x94\xfc\x1a\x1d\xffP\xd0KKv.\x1a\xa2\x1f\n\xc6\x97\x99\xd0.\x93i\xfaCF|-\xe1Pp0t\x9fM\xa5Zr\xce\xcdjO\x9c\xaa\xe1\xa9\'\npuG\x15B\xdd\x90\x156\x14D\n\x9a\xda\xb5\x8aAu\xd6\xf9\f\xcav\xae\xa8\x9a\xcdj\xcd\x8f\xec\x89\xcf>\x99\f/\xe3\xe7\xf6\xfc\x99\xad\x8e\xd3[\xe3\x9e'}]}, 0x4a5) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsm_get_self_attr(0x64, &(0x7f0000000380)={0x0, 0x0, 0x20}, &(0x7f00000003c0)=0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x1405, 0xc24, 0x70bd27, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 9.624130907s ago: executing program 8 (id=4971): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x15, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x4c, &(0x7f0000000000), &(0x7f00000000c0)=0xffbb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x7, 0x0}, 0x8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10, r0}, 0x18) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, r4, 0x0}]) r6 = memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x4) ftruncate(r6, 0x40000001) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xb, &(0x7f0000000440)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x1, 0x6, 0x6, 0x1, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x0, &(0x7f0000000600)=[0x1, r4, 0x1], &(0x7f0000000640), 0x10, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x2, 0x10, 0x2}) 8.796451701s ago: executing program 8 (id=4974): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1bb}, {&(0x7f0000000040)="b22377eea7b6d3460287c9966016342f6d666b973077", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e", 0xb2}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8.531826157s ago: executing program 6 (id=4975): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x96, 0xa0, 0x10, 0x1943, 0x2257, 0x91ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x54, 0xad}}]}}]}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 8.431394663s ago: executing program 3 (id=4977): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d0000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f0000000180)) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r8, 0x40101288, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x2, @pix={0x0, 0x0, 0x56595559}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) r9 = syz_open_pts(0xffffffffffffffff, 0x60c40) dup3(r9, 0xffffffffffffffff, 0x0) 7.542271337s ago: executing program 8 (id=4979): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4188aec6, &(0x7f00000012c0)={0x0, 0x0, @ioapic}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 6.645389555s ago: executing program 3 (id=4982): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) unshare(0x22020600) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x130, 0x130, 0x220, 0x220, 0x2b8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x7e}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'ip6_vti0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4815}, 0x240480d4) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000002f40)=""/4080, 0xff0}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x2) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905030e0000000000072501", @ANYRES64=0x0], 0x0) 5.508832395s ago: executing program 6 (id=4984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x6485, &(0x7f0000000080)={0x0, 0x3d0f, 0x400, 0x2, 0x344}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}}, 0x20000080) mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0) mount(&(0x7f0000002a40)=@nullb, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0)='squashfs\x00', 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) 5.207846496s ago: executing program 0 (id=4986): io_uring_setup(0x5cb3, &(0x7f0000000180)={0x0, 0x1}) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$media(&(0x7f0000000040), 0x80, 0x109000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x1, 0x0, &(0x7f00000010c0)=[{}], 0x6, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000880), 0x3, 0x0, &(0x7f0000000780)=[{}, {}, {}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r2, 0xfffff000, &(0x7f0000000000)) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x40800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x16, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf300}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x2, 0x8, 0xc, 0x3}, @exit, @generic={0x0, 0x1, 0xb, 0x0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x1, 0xdd, &(0x7f0000000a40)=""/221, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x6, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000bc0)=[{0x0, 0x1, 0x2, 0x9}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000f40)=ANY=[@ANYBLOB="7d1100005abb4f4b918517ffaf02fe14ddb12a0ba0637516d83320191f73a8474bd4cde2ce0bd912c420ee877a83ed13e6f4445b179010a534f7c7e8b91de4b83a21f7d428c81fe3c6d0b6f10f575795637b69fc155dca3486804e8c2883bd4eccaa001f1dfdbaaae690d95f6cdc3c7c0f9f2d442ce765f90bbc7333dc997c02639968c19b52d99a55ea48cef9da6cd932d6cf1fad6dc5c2692296884763daa0e108ca8dff7789997a72507fb9b2b794b113f8780a5c0bca1f09ad8feeaf00"/200, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000003d120000080000001800000005000000000000000a000000"], 0x0, 0x0, 0xec, &(0x7f0000000340)=""/236, 0x41100, 0x45, '\x00', r4, 0x18, r5, 0x8, &(0x7f00000008c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x5, 0x46f}, 0x10, 0x174bd, r6, 0x3, 0x0, &(0x7f0000000cc0)=[{0x4, 0x1, 0x4, 0xa}, {0x3, 0x1, 0x0, 0x3}, {0x1, 0x4, 0x0, 0x2}], 0x10, 0x6, @void, @value}, 0x94) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000ec0)={&(0x7f0000000e00), 0x0, r7}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001400)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000240), {[{{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 0x2, 0x10, {@mac=@local, {[0xff, 0xff, 0x0, 0x80, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, {[0xff, 0xff]}}, 0x9, 0x8, 0xfff9, 0x94, 0x7, 0x800, 'batadv0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x0, 0x110}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @local, @loopback, 0x4, 0x1}}}, {{@arp={@broadcast, @rand_addr=0x64010101, 0x0, 0xff000000, 0xd, 0x6, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff]}}, 0x4f11, 0x0, 0xfffb, 0x8, 0x80, 0xff, 'tunl0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @rand_addr=0x64010101, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @multicast2, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000200)=0x2) r9 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r9, &(0x7f0000000080)={'@', 0x20, 0xfc}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r3) 5.035603415s ago: executing program 6 (id=4987): ioperm(0xc210, 0x4, 0x5) mount$9p_virtio(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180), 0x4000, &(0x7f0000000480)=ANY=[@ANYBLOB="2c00000000007f020000f6f40000"]) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x300) 4.748924446s ago: executing program 6 (id=4988): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xaea2, &(0x7f0000000040)={[{0x6, 0x9, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x0, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x1, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x29f1, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0x8e, 0xffffffffffffffb5}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.7481614s ago: executing program 0 (id=4989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1bb}, {&(0x7f0000000040)="b22377eea7b6d3460287c9966016342f6d666b973077", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e", 0xb2}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.74767263s ago: executing program 9 (id=4990): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x48400) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)="ec088069ff8f00", 0x7}], 0x1) write$UHID_INPUT(r1, &(0x7f0000000a80)={0x8, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = accept4(r3, 0x0, 0x0, 0x80000) sendfile(r5, r1, 0x0, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008"], 0x0) 4.303547012s ago: executing program 9 (id=4991): ioperm(0x1, 0x8, 0x8000000000000001) syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x7bf4, 0x80}, &(0x7f0000002480), &(0x7f00000002c0)) 4.291903469s ago: executing program 9 (id=4992): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e1e, @multicast1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000001800128008000100677265000c00028008000100", @ANYRES32=r6, @ANYBLOB="98f9b1dd28a607dce15f08317e2ef94ef5380a4835b6e9fda02f8432f8cad6537c096adffc7163615b990d0e7c136f433d735f7fcdf6a8c09e82236ff0c81c42209bf48d3792916b83307fcdaae1e927bf7839ad606dde3aa0b2d18a468d320447e1aa7402c5389e261c6d471d391a1896def145c747f44441e65a588e1c45bc3af647f0a18d13fc9d3219091e174b48a119475721259750f9eb0beeadf7088177cffb0828fc1f3fe22778b7aa22018f46d76cc59905d930ba899b2caa953987e4f2e49750e5464e1d8718eb34b8f9ebab662f6e33d068a30d0bc1b3e75505"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r6, @ANYBLOB="000000800000000014001280080001006772650008e6028024b9d5e527d6a8b661559b28bdc19c9b0f191c70aa557504f52af8ff5e22beda27ee8388c7394383ea663fef8a36c09257c70aa7e489a19b3ec8ee634b60040c0fcbb5356d2931fb3f8bda574c169e83bb72efb104fd163c3add378a12026c016572de852f0a6211b90c6c2bad5d9c7c5fa9fabcddd8eb6bda7a589cc55fe9643b3d21af2c8c66572a852255ea6c6b60e1f3434249bf79d3d61e3268908af7221f55548a2cdbe1abb820a1885f9a"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.761609879s ago: executing program 9 (id=4993): socket$inet(0x2, 0x5, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x808000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) preadv(r3, 0x0, 0x0, 0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000060000090f000700756e636f6e66696e656400001400030000000000000000000000ffffac14140014000200fe80000000000000000000ffff00000008007f9bf7a80001"], 0x54}, 0x2, 0x34005}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'virt_wifi0\x00', @random="00ffffff8d0a"}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000003980)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0xca, 0x2, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xd88}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0xc, 0x3}}}}}]}}]}}, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 3.692809905s ago: executing program 8 (id=4994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="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", 0x1bb}, {&(0x7f0000000040)="b22377eea7b6d3460287c9966016342f6d666b973077", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa277", 0x4b}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.635660256s ago: executing program 0 (id=4995): r0 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000b40)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000040)="b8", 0x1) 3.547374412s ago: executing program 3 (id=4996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0xb8, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x8f, 0xd, 0x1, 0x0, "019134079041dcc1242bc5b386e073db05e52d0c8dc093f35ab81ecb23c23c1f0ed2ae92ecc1f88f2c1a97c9af71f060fb5fd74bc83946c38991a64d7f5d12991e5b91939efaf35e2024113222a26fe940ab757bc8828f23243a6c950f5459c5e8e6954100cdab95e461f3efbcd208fba76dec7ed60a0eabd535bcc004f479738567db18522dcea2c8755c"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "19ebd380655f1ffb6a91065b6ec09735dd67b8ae072bdf89ffb4ca"}]}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x1, 0xabcf, 0x1, 0x0, 0x0, [{{r0}, 0x9}]}) 3.495734559s ago: executing program 0 (id=4997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x6485, &(0x7f0000000080)={0x0, 0x3d0f, 0x400, 0x2, 0x344}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}}, 0x20000080) mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0) mount(&(0x7f0000002a40)=@nullb, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0)='squashfs\x00', 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) 3.407374148s ago: executing program 3 (id=4998): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f0000005740)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x80, 0x0}}], 0x1, 0x803) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) connect$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x3}}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x410000022) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b48, &(0x7f0000002340)) 3.37860619s ago: executing program 0 (id=4999): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) dup3(r2, r2, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x2}, 0x18) close(r4) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRESOCT=r5, @ANYBLOB="8b0404000000000030001280020000000000000076650000201047282b092e8880000000000000000000000040000001060005004e200000"], 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() 2.887873082s ago: executing program 9 (id=5000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122, 0x0) r1 = socket$inet(0x2, 0x1, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = open(0x0, 0x1, 0x0) fstat(r6, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r7, &(0x7f0000000280)='!', 0x1}]) chdir(&(0x7f0000000080)='./file1\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r9, 0xffffffff80000501, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f0000000680)=@ethtool_gstrings={0x15}}) 1.241347981s ago: executing program 8 (id=5001): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x314, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r4 = io_uring_setup(0x1de0, &(0x7f0000001040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x1c, 0x20000048, 0x0) syz_fuse_handle_req(r2, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10440, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r2, 0x80000) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.238725684s ago: executing program 3 (id=5002): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) setreuid(0x0, r3) write$binfmt_script(r2, &(0x7f0000020180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000b, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x1000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 732.743025ms ago: executing program 6 (id=5003): syz_open_dev$video(0x0, 0x485, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000054d564b000000e90000000000000000"]) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0x2, 0x80400, 0x2004, 0x800}) socket$inet_udp(0x2, 0x2, 0x0) sendto$isdn(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8aa4819727cacc018737f83d6c14cb9b8997873a31631743b066331848b50fc922028117d48bb949623e158c16fc00"/57], 0x39, 0x8800, &(0x7f0000000080)={0x22, 0x1, 0xd3, 0x1, 0x8}, 0x6) r7 = add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, 0x0, 0xffffffffffffffff) r8 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) 731.476988ms ago: executing program 9 (id=5004): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x2c}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x96, 0xa0, 0x10, 0x1943, 0x2257, 0x91ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x54, 0xad}}]}}]}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 162.242269ms ago: executing program 3 (id=5005): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4188aec6, &(0x7f00000012c0)={0x0, 0x0, @ioapic}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 0s ago: executing program 0 (id=5006): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}, {&(0x7f0000000800)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551087ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0e262b9354a7db169109b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a19c3a646fbd5bc79dadd977983eb0587e61bbc7a2d3f3fc63e5704464ed8e57027a8dc835d5f71cf96a13d0a6440492610145b7f71a28bbc1834493d9c63412a741186a0d3a3d18e00f622045954020e1d4bf3c51439ec5ea6c35004bb016ec740a9c2bbccd7daec478949021a69ce9a14bcff85d518579526d616f3ed024cf414e6673b800dc8e6d690b48d3c7430cdd4f51fa4707cad5d91f17a4bd1d72839f8cc3e155239b30c9fca6ac331621f45ae30b730736915456dd4e252c41449f33b07009c3d66163e23d1cabd19c8060364d5739f93af6a370c37780ae15b6d03d1330de6eb9d5e8c5bfb4b349951e9", 0x1bb}, {&(0x7f0000000040)="b22377eea7b6d3460287c9966016342f6d666b973077", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2e", 0xb4}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): sector [ 1493.484801][T20933] exFAT-fs (nbd8): failed to recognize exfat type [ 1494.558771][T20940] 9pnet_fd: Insufficient options for proto=fd [ 1494.569245][T14769] Bluetooth: hci5: command 0x0c1a tx timeout [ 1495.812657][T20952] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4184'. [ 1496.305526][T20965] FAULT_INJECTION: forcing a failure. [ 1496.305526][T20965] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.318382][T20965] CPU: 0 UID: 0 PID: 20965 Comm: syz.8.4189 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1496.329171][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1496.339239][T20965] Call Trace: [ 1496.342519][T20965] [ 1496.345445][T20965] dump_stack_lvl+0x241/0x360 [ 1496.350134][T20965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.355353][T20965] ? __pfx__printk+0x10/0x10 [ 1496.359964][T20965] should_fail_ex+0x3b0/0x4e0 [ 1496.364645][T20965] should_failslab+0xac/0x100 [ 1496.369334][T20965] ? skb_clone+0x20c/0x390 [ 1496.373779][T20965] kmem_cache_alloc_noprof+0x70/0x380 [ 1496.379178][T20965] skb_clone+0x20c/0x390 [ 1496.383441][T20965] __netlink_deliver_tap+0x3cc/0x7f0 [ 1496.388726][T20965] ? netlink_deliver_tap+0x2e/0x1b0 [ 1496.393915][T20965] netlink_deliver_tap+0x19d/0x1b0 [ 1496.399048][T20965] netlink_unicast+0x7c4/0x990 [ 1496.403804][T20965] ? __pfx_netlink_unicast+0x10/0x10 [ 1496.409079][T20965] ? __phys_addr_symbol+0x5d/0x70 [ 1496.414122][T20965] ? __phys_addr_symbol+0x2f/0x70 [ 1496.419136][T20965] ? __check_object_size+0x47a/0x730 [ 1496.424417][T20965] netlink_sendmsg+0x8e4/0xcb0 [ 1496.429178][T20965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1496.434459][T20965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1496.439730][T20965] __sock_sendmsg+0x221/0x270 [ 1496.444404][T20965] ____sys_sendmsg+0x52a/0x7e0 [ 1496.449161][T20965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1496.454439][T20965] ? __fget_files+0x2a/0x410 [ 1496.459020][T20965] ? __fget_files+0x2a/0x410 [ 1496.463603][T20965] __sys_sendmsg+0x269/0x350 [ 1496.468183][T20965] ? __pfx_lock_release+0x10/0x10 [ 1496.473225][T20965] ? __pfx___sys_sendmsg+0x10/0x10 [ 1496.478338][T20965] ? __pfx_vfs_write+0x10/0x10 [ 1496.483111][T20965] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1496.489431][T20965] ? do_syscall_64+0x100/0x230 [ 1496.494190][T20965] ? do_syscall_64+0xb6/0x230 [ 1496.498861][T20965] do_syscall_64+0xf3/0x230 [ 1496.503358][T20965] ? clear_bhb_loop+0x35/0x90 [ 1496.508025][T20965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.513912][T20965] RIP: 0033:0x7fd9d2185d29 [ 1496.518319][T20965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.537917][T20965] RSP: 002b:00007fd9d2f89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.546331][T20965] RAX: ffffffffffffffda RBX: 00007fd9d2376080 RCX: 00007fd9d2185d29 [ 1496.554294][T20965] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 1496.562286][T20965] RBP: 00007fd9d2f89090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.570244][T20965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.578206][T20965] R13: 0000000000000000 R14: 00007fd9d2376080 R15: 00007ffca3fec7e8 [ 1496.586181][T20965] [ 1496.628906][T20965] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4189'. [ 1498.390767][T20983] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4192'. [ 1498.400153][T20983] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1499.188962][T20991] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4194'. [ 1499.492460][T20997] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4195'. [ 1499.501524][T20997] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1500.242880][T21007] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4199'. [ 1500.380385][T21007] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4199'. [ 1501.708458][T10456] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1502.206141][T21031] overlayfs: workdir and upperdir must reside under the same mount [ 1502.241153][T21032] netlink: 216 bytes leftover after parsing attributes in process `syz.8.4204'. [ 1502.262115][T21032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4204'. [ 1502.266504][T21033] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 1502.281206][T10456] usb 10-1: Using ep0 maxpacket: 16 [ 1502.306645][T10456] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1502.331875][T10456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.361128][T10456] usb 10-1: Product: syz [ 1502.365903][T10456] usb 10-1: Manufacturer: syz [ 1502.370614][T10456] usb 10-1: SerialNumber: syz [ 1502.391636][T10456] usb 10-1: config 0 descriptor?? [ 1502.418820][T10456] s2255 10-1:0.0: Could not find bulk-in endpoint [ 1502.453169][T10456] Sensoray 2255 driver load failed: 0xfffffff4 [ 1502.491653][T10456] s2255 10-1:0.0: probe with driver s2255 failed with error -12 [ 1502.603765][T21047] syz.6.4209: attempt to access beyond end of device [ 1502.603765][T21047] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1502.616765][T21047] exFAT-fs (nbd6): unable to read boot sector [ 1502.624070][T21047] exFAT-fs (nbd6): failed to read boot sector [ 1502.630450][T21047] exFAT-fs (nbd6): failed to recognize exfat type [ 1502.677047][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.863715][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.902269][T10456] usb 10-1: USB disconnect, device number 5 [ 1503.381786][T21059] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1503.388330][T21059] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1503.396437][T21059] vhci_hcd vhci_hcd.0: Device attached [ 1503.424115][T21060] vhci_hcd: connection closed [ 1503.428089][ T6028] vhci_hcd: stop threads [ 1503.451716][ T6028] vhci_hcd: release socket [ 1503.459061][ T6028] vhci_hcd: disconnect device [ 1504.352917][T21075] fuse: Bad value for 'fd' [ 1505.055549][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4223'. [ 1505.821190][T21105] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4227'. [ 1505.830668][T21105] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1507.848925][T21130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3991866543 (7983733086 ns) > initial count (4279149104 ns). Using initial count to start timer. [ 1508.531954][ T6383] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1508.671990][ T6383] usb 10-1: device descriptor read/64, error -71 [ 1508.922081][ T6383] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1509.062215][ T6383] usb 10-1: device descriptor read/64, error -71 [ 1509.402211][ T6383] usb usb10-port1: attempt power cycle [ 1509.418226][T21159] 9pnet_fd: Insufficient options for proto=fd [ 1509.520724][T21163] netlink: 'syz.6.4245': attribute type 21 has an invalid length. [ 1509.542740][T21163] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4245'. [ 1509.682928][T17246] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1509.952249][ T6383] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1510.064858][ T6383] usb 10-1: device descriptor read/8, error -71 [ 1510.085898][T17246] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1510.095779][T17246] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1510.106293][T17246] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1510.123638][T17246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.162275][T17246] usb 9-1: config 0 descriptor?? [ 1510.207762][T17246] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1510.302274][ T6383] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1510.372563][ T6383] usb 10-1: device descriptor read/8, error -71 [ 1510.482649][ T6383] usb usb10-port1: unable to enumerate USB device [ 1510.538343][T21169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1510.547250][T21169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1510.556732][T21169] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1510.563898][T21169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1510.807083][T17246] spca561 9-1:0.0: probe with driver spca561 failed with error -22 [ 1510.823426][T17246] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1510.837768][T17246] usb 9-1: MIDIStreaming interface descriptor not found [ 1511.329282][T17246] usb 9-1: USB disconnect, device number 8 [ 1511.426667][T21183] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4250'. [ 1511.608798][T21183] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4250'. [ 1511.719108][T21190] Cannot find map_set index 0 as target [ 1512.432036][ T5835] Bluetooth: hci1: command 0x041b tx timeout [ 1512.724407][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 1512.724445][T18061] Bluetooth: hci5: command 0x0c1a tx timeout [ 1512.730476][T14769] Bluetooth: hci3: command 0x0c1a tx timeout [ 1512.834220][T21211] sctp: [Deprecated]: syz.0.4256 (pid 21211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1512.834220][T21211] Use struct sctp_sack_info instead [ 1515.079380][T21236] 9pnet_fd: Insufficient options for proto=fd [ 1515.494263][T21244] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1515.624749][T21238] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4265'. [ 1515.736517][T21238] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4265'. [ 1515.774663][T21238] Cannot find map_set index 0 as target [ 1516.682180][T17246] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1516.849343][T17246] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1516.862971][T17246] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1516.873504][T17246] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1516.883524][T17246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.929763][T17246] usb 9-1: config 0 descriptor?? [ 1517.284208][T17246] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1517.794162][T17246] spca561 9-1:0.0: probe with driver spca561 failed with error -22 [ 1517.815521][T17246] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1517.823319][T17246] usb 9-1: MIDIStreaming interface descriptor not found [ 1518.386705][T21273] Bluetooth: hci4: Frame reassembly failed (-84) [ 1518.394627][T17614] Bluetooth: hci4: Frame reassembly failed (-84) [ 1518.418938][T17614] Bluetooth: hci4: Frame reassembly failed (-84) [ 1518.452455][T17246] usb 9-1: USB disconnect, device number 9 [ 1518.483005][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4273'. [ 1519.228889][T21278] syz.0.4274 (21278): drop_caches: 2 [ 1519.344213][T21288] FAULT_INJECTION: forcing a failure. [ 1519.344213][T21288] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.388682][T21288] CPU: 1 UID: 0 PID: 21288 Comm: syz.8.4277 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1519.399476][T21288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1519.409527][T21288] Call Trace: [ 1519.412798][T21288] [ 1519.415723][T21288] dump_stack_lvl+0x241/0x360 [ 1519.420401][T21288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.425594][T21288] ? __pfx__printk+0x10/0x10 [ 1519.430174][T21288] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1519.435710][T21288] ? __pfx___might_resched+0x10/0x10 [ 1519.440991][T21288] should_fail_ex+0x3b0/0x4e0 [ 1519.445683][T21288] should_failslab+0xac/0x100 [ 1519.450387][T21288] ? ptlock_alloc+0x20/0x70 [ 1519.454889][T21288] kmem_cache_alloc_noprof+0x70/0x380 [ 1519.460259][T21288] ptlock_alloc+0x20/0x70 [ 1519.464601][T21288] pte_alloc_one+0xd3/0x510 [ 1519.469112][T21288] ? __pfx_pte_alloc_one+0x10/0x10 [ 1519.474218][T21288] ? __pfx_validate_chain+0x10/0x10 [ 1519.479411][T21288] __pte_alloc+0x79/0x3c0 [ 1519.483739][T21288] ? __pfx___pte_alloc+0x10/0x10 [ 1519.488672][T21288] handle_pte_fault+0x4d3e/0x5ed0 [ 1519.493690][T21288] ? __lock_acquire+0x1397/0x2100 [ 1519.498713][T21288] ? mark_lock+0x9a/0x360 [ 1519.503039][T21288] ? __pfx_handle_pte_fault+0x10/0x10 [ 1519.508404][T21288] ? __lock_acquire+0x1397/0x2100 [ 1519.513433][T21288] ? __pfx_lock_acquire+0x10/0x10 [ 1519.518445][T21288] ? count_memcg_event_mm+0x3c2/0x420 [ 1519.523816][T21288] ? do_raw_spin_lock+0x14f/0x370 [ 1519.528842][T21288] handle_mm_fault+0x1053/0x1ad0 [ 1519.533783][T21288] ? __pfx_handle_mm_fault+0x10/0x10 [ 1519.539064][T21288] ? __pfx_find_vma+0x10/0x10 [ 1519.543747][T21288] ? vma_is_secretmem+0xd/0x50 [ 1519.548544][T21288] ? check_vma_flags+0x4fa/0x5a0 [ 1519.553510][T21288] __get_user_pages+0x1c82/0x49e0 [ 1519.558571][T21288] ? mark_lock+0x9a/0x360 [ 1519.562909][T21288] ? __pfx___get_user_pages+0x10/0x10 [ 1519.568276][T21288] ? __pfx_down_read_killable+0x10/0x10 [ 1519.573820][T21288] __gup_longterm_locked+0xe64/0x17f0 [ 1519.579190][T21288] ? mark_lock+0x9a/0x360 [ 1519.583513][T21288] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1519.589481][T21288] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1519.595292][T21288] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1519.601635][T21288] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 1519.607628][T21288] ? gup_fast_fallback+0x207e/0x29c0 [ 1519.612929][T21288] gup_fast_fallback+0x2266/0x29c0 [ 1519.618033][T21288] ? finish_task_switch+0x1e5/0x870 [ 1519.623265][T21288] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1519.628733][T21288] ? __pfx___schedule+0x10/0x10 [ 1519.633578][T21288] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1519.639549][T21288] ? mark_lock+0x9a/0x360 [ 1519.643871][T21288] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1519.649843][T21288] ? is_valid_gup_args+0x124/0x200 [ 1519.654946][T21288] pin_user_pages_fast+0xcc/0x160 [ 1519.659979][T21288] ? lockdep_hardirqs_on+0x99/0x150 [ 1519.665185][T21288] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1519.670830][T21288] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 1519.676377][T21288] iov_iter_extract_pages+0x3bb/0x5c0 [ 1519.681752][T21288] extract_iter_to_sg+0xea6/0x2650 [ 1519.686854][T21288] ? crypto_poly1305_update+0x1fe/0x2e0 [ 1519.692396][T21288] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1519.697933][T21288] ? unpin_user_page+0xe0/0x1e0 [ 1519.702771][T21288] ? __pfx_unpin_user_page+0x10/0x10 [ 1519.708042][T21288] ? __local_bh_enable_ip+0x168/0x200 [ 1519.713406][T21288] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1519.719134][T21288] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1519.724360][T21288] ? __asan_memset+0x23/0x50 [ 1519.728966][T21288] hash_sendmsg+0x513/0x1110 [ 1519.733564][T21288] ? __pfx_hash_sendmsg+0x10/0x10 [ 1519.738580][T21288] __sock_sendmsg+0x221/0x270 [ 1519.743254][T21288] ____sys_sendmsg+0x52a/0x7e0 [ 1519.748030][T21288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1519.753307][T21288] ? __fget_files+0x2a/0x410 [ 1519.757886][T21288] ? __fget_files+0x2a/0x410 [ 1519.762469][T21288] __sys_sendmmsg+0x36a/0x720 [ 1519.767143][T21288] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1519.772338][T21288] ? __pfx_lock_release+0x10/0x10 [ 1519.777372][T21288] ? kstrtouint_from_user+0x128/0x190 [ 1519.782797][T21288] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1519.788714][T21288] ? ksys_write+0x22a/0x2b0 [ 1519.793223][T21288] ? __pfx_lock_release+0x10/0x10 [ 1519.798253][T21288] ? vfs_write+0x730/0xd30 [ 1519.802670][T21288] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1519.808324][T21288] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1519.814310][T21288] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1519.820669][T21288] ? do_syscall_64+0x100/0x230 [ 1519.825444][T21288] __x64_sys_sendmmsg+0xa0/0xb0 [ 1519.830294][T21288] do_syscall_64+0xf3/0x230 [ 1519.834812][T21288] ? clear_bhb_loop+0x35/0x90 [ 1519.839499][T21288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.845390][T21288] RIP: 0033:0x7fd9d2185d29 [ 1519.849793][T21288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.869391][T21288] RSP: 002b:00007fd9d2faa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1519.877807][T21288] RAX: ffffffffffffffda RBX: 00007fd9d2375fa0 RCX: 00007fd9d2185d29 [ 1519.885781][T21288] RDX: 0000000000000001 RSI: 0000000020003100 RDI: 0000000000000006 [ 1519.893753][T21288] RBP: 00007fd9d2faa090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.901725][T21288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.909696][T21288] R13: 0000000000000000 R14: 00007fd9d2375fa0 R15: 00007ffca3fec7e8 [ 1519.917678][T21288] [ 1519.970477][T21299] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4279'. [ 1519.990857][T21299] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4279'. [ 1520.062307][T21299] Cannot find map_set index 0 as target [ 1520.511513][T14769] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1520.519439][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 1521.574625][T17246] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1521.792751][T17246] usb 9-1: Using ep0 maxpacket: 16 [ 1521.833647][T17246] usb 9-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1521.887268][T17246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.300659][T17246] usb 9-1: Product: syz [ 1522.307770][T17246] usb 9-1: Manufacturer: syz [ 1522.364900][T17246] usb 9-1: SerialNumber: syz [ 1522.385064][T17246] usb 9-1: config 0 descriptor?? [ 1522.441864][T21329] 9pnet_fd: Insufficient options for proto=fd [ 1522.448666][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1522.602480][T17246] s2255 9-1:0.0: Could not find bulk-in endpoint [ 1522.849377][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.861565][T17246] Sensoray 2255 driver load failed: 0xfffffff4 [ 1522.868981][T17246] s2255 9-1:0.0: probe with driver s2255 failed with error -12 [ 1522.880613][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.951455][T17055] usb 9-1: USB disconnect, device number 10 [ 1522.994005][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1523.004619][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1523.020055][ T9] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1523.031112][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.172294][ T9] usb 10-1: config 0 descriptor?? [ 1523.323467][T21335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1523.332833][T21335] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1523.596281][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1524.659478][ T9] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 1524.670243][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1524.677567][ T9] usb 10-1: MIDIStreaming interface descriptor not found [ 1525.019191][T21354] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4293'. [ 1525.392861][T17614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.409236][ T58] usb 10-1: USB disconnect, device number 10 [ 1525.437565][T17614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.638067][T21356] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4294'. [ 1525.712572][T21357] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4294'. [ 1526.046684][T21366] Can't find a SQUASHFS superblock on nullb0 [ 1526.114587][T21356] Cannot find map_set index 0 as target [ 1526.361477][T21368] 9pnet_fd: Insufficient options for proto=fd [ 1527.201642][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4302'. [ 1527.211151][T21383] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1527.475827][T21390] i2c i2c-0: Invalid block write size 34 [ 1528.091957][ T6383] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1528.120010][T14769] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1528.312252][ T6383] usb 9-1: Using ep0 maxpacket: 16 [ 1528.388940][ T6383] usb 9-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1528.422525][T21399] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1528.461977][T21399] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1528.480696][ T6383] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.529242][ T6383] usb 9-1: Product: syz [ 1528.555135][ T6383] usb 9-1: Manufacturer: syz [ 1528.576166][ T6383] usb 9-1: SerialNumber: syz [ 1528.647967][ T6383] usb 9-1: config 0 descriptor?? [ 1528.695559][ T6383] s2255 9-1:0.0: Could not find bulk-in endpoint [ 1528.712713][ T6383] Sensoray 2255 driver load failed: 0xfffffff4 [ 1528.719018][ T6383] s2255 9-1:0.0: probe with driver s2255 failed with error -12 [ 1529.306895][T17614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.327712][T17614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.377743][T10456] usb 9-1: USB disconnect, device number 11 [ 1529.383997][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1529.409721][T21415] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1529.431895][T21415] Cannot find map_set index 0 as target [ 1529.529868][T21420] 9pnet_fd: Insufficient options for proto=fd [ 1530.109410][T21430] gre1: entered allmulticast mode [ 1530.181955][T14769] Bluetooth: hci3: command 0x0c1a tx timeout [ 1531.157891][T21445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4317'. [ 1531.167391][T21445] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1531.488079][T21448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1531.588079][T21450] sctp: [Deprecated]: syz.3.4320 (pid 21450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1531.588079][T21450] Use struct sctp_sack_info instead [ 1532.509457][T21459] sctp: [Deprecated]: syz.3.4322 (pid 21459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1532.509457][T21459] Use struct sctp_sack_info instead [ 1532.535663][T21460] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4321'. [ 1534.299068][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.351588][T21472] 9pnet_fd: Insufficient options for proto=fd [ 1534.352833][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.620158][T21475] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4328'. [ 1534.673338][T21475] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4328'. [ 1534.715181][T21475] Cannot find map_set index 0 as target [ 1535.169480][T21484] sctp: [Deprecated]: syz.8.4330 (pid 21484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1535.169480][T21484] Use struct sctp_sack_info instead [ 1536.142241][T21490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4331'. [ 1536.678085][T21494] gre2: entered promiscuous mode [ 1536.683201][T21494] gre2: entered allmulticast mode [ 1536.744868][T21498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1537.001952][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1537.232995][T21508] sctp: [Deprecated]: syz.0.4337 (pid 21508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1537.232995][T21508] Use struct sctp_sack_info instead [ 1538.335253][ T9] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1538.344462][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.352693][ T9] usb 9-1: Product: syz [ 1538.360445][ T9] usb 9-1: Manufacturer: syz [ 1538.370542][ T9] usb 9-1: SerialNumber: syz [ 1538.523274][ T9] usb 9-1: config 0 descriptor?? [ 1538.611965][ T6383] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1538.848122][ T6383] usb 7-1: Using ep0 maxpacket: 16 [ 1538.871275][ T6383] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1538.886723][ T6383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.012534][T21520] 9pnet_fd: Insufficient options for proto=fd [ 1539.364190][ T6383] usb 7-1: Product: syz [ 1539.374969][ T6383] usb 7-1: Manufacturer: syz [ 1539.410928][ T6383] usb 7-1: SerialNumber: syz [ 1539.481648][ T6383] usb 7-1: config 0 descriptor?? [ 1539.872819][T21524] 9pnet_fd: Insufficient options for proto=fd [ 1540.074974][ T5842] usb 9-1: USB disconnect, device number 12 [ 1540.313968][T21530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1540.328301][T21530] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1540.339109][T21530] Cannot find map_set index 0 as target [ 1540.361673][T17614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.369777][T17614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.641871][ T58] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1540.746018][T21537] 9pnet_fd: Insufficient options for proto=fd [ 1540.802096][ T58] usb 10-1: Using ep0 maxpacket: 16 [ 1540.822096][ T58] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1540.830470][ T58] usb 10-1: config 0 has no interface number 0 [ 1540.837517][ T58] usb 10-1: too many endpoints for config 0 interface 1 altsetting 91: 73, using maximum allowed: 30 [ 1540.850072][ T58] usb 10-1: config 0 interface 1 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 1540.867692][ T58] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1540.925841][ T58] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1540.937496][ T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.951922][ T58] usb 10-1: Product: syz [ 1540.959684][ T58] usb 10-1: Manufacturer: syz [ 1540.967645][ T58] usb 10-1: SerialNumber: syz [ 1541.048745][ T58] usb 10-1: config 0 descriptor?? [ 1541.365101][ T58] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1541.566976][ T6383] usb 7-1: can't set config #0, error -71 [ 1541.584224][ T6383] usb 7-1: USB disconnect, device number 56 [ 1542.013899][T21528] sctp: [Deprecated]: syz.9.4343 (pid 21528) Use of int in max_burst socket option deprecated. [ 1542.013899][T21528] Use struct sctp_assoc_value instead [ 1542.122301][ T58] gspca_spca1528: reg_w err -71 [ 1542.144474][ T58] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1542.219661][ T58] usb 10-1: USB disconnect, device number 11 [ 1542.833504][ T5830] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1543.359996][T21553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1543.427516][T21553] @: renamed from vlan0 (while UP) [ 1543.452253][ T5830] usb 9-1: Using ep0 maxpacket: 16 [ 1543.465799][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1543.486784][ T5830] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1543.509375][ T5830] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 1543.532844][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1543.557029][ T5830] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1543.580118][ T5830] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1543.601619][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1543.620298][ T5830] usb 9-1: Product: syz [ 1543.628798][ T5830] usb 9-1: Manufacturer: syz [ 1543.638161][ T5830] usb 9-1: SerialNumber: syz [ 1543.650790][ T5830] usb 9-1: config 0 descriptor?? [ 1543.663804][ T5830] usb 9-1: NFC: intf ffff8880784f1000 id ffffffff8f2fccc0 [ 1544.783626][T21571] 9pnet_fd: Insufficient options for proto=fd [ 1545.144523][ T5830] usb 9-1: USB disconnect, device number 13 [ 1545.648586][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1546.104016][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.856716][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1546.887127][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1546.917414][ T9] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1546.937680][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.340496][ T9] usb 7-1: config 0 descriptor?? [ 1547.348708][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1547.393270][T21596] FAULT_INJECTION: forcing a failure. [ 1547.393270][T21596] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.430586][T21596] CPU: 0 UID: 0 PID: 21596 Comm: syz.3.4365 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1547.441380][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1547.451443][T21596] Call Trace: [ 1547.454735][T21596] [ 1547.457668][T21596] dump_stack_lvl+0x241/0x360 [ 1547.462352][T21596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1547.467550][T21596] ? __pfx__printk+0x10/0x10 [ 1547.472140][T21596] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 1547.478031][T21596] ? __pfx___might_resched+0x10/0x10 [ 1547.483322][T21596] should_fail_ex+0x3b0/0x4e0 [ 1547.488008][T21596] should_failslab+0xac/0x100 [ 1547.492688][T21596] ? __get_vm_area_node+0x132/0x2d0 [ 1547.497883][T21596] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 1547.503604][T21596] __get_vm_area_node+0x132/0x2d0 [ 1547.508643][T21596] __vmalloc_node_range_noprof+0x344/0x1380 [ 1547.514535][T21596] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1547.520078][T21596] ? mark_lock+0x9a/0x360 [ 1547.524425][T21596] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1547.530768][T21596] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1547.536311][T21596] __vmalloc_noprof+0x79/0x90 [ 1547.540985][T21596] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1547.546531][T21596] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1547.551902][T21596] ? bpf_prog_alloc+0x28/0x1b0 [ 1547.556673][T21596] bpf_prog_alloc+0x3a/0x1b0 [ 1547.561280][T21596] bpf_prog_load+0x7f7/0x20f0 [ 1547.565962][T21596] ? __pfx_bpf_prog_load+0x10/0x10 [ 1547.571072][T21596] ? __pfx___might_resched+0x10/0x10 [ 1547.576375][T21596] ? __might_fault+0xc6/0x120 [ 1547.581055][T21596] __sys_bpf+0x4ee/0x810 [ 1547.585296][T21596] ? __pfx___sys_bpf+0x10/0x10 [ 1547.590062][T21596] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1547.596039][T21596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1547.602362][T21596] ? do_syscall_64+0x100/0x230 [ 1547.607128][T21596] __x64_sys_bpf+0x7c/0x90 [ 1547.611544][T21596] do_syscall_64+0xf3/0x230 [ 1547.616047][T21596] ? clear_bhb_loop+0x35/0x90 [ 1547.620718][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.626617][T21596] RIP: 0033:0x7f5e51785d29 [ 1547.631029][T21596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.650627][T21596] RSP: 002b:00007f5e5251a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1547.659037][T21596] RAX: ffffffffffffffda RBX: 00007f5e51975fa0 RCX: 00007f5e51785d29 [ 1547.667006][T21596] RDX: 0000000000000080 RSI: 0000000020000500 RDI: 0000000000000005 [ 1547.674972][T21596] RBP: 00007f5e5251a090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.682942][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.690906][T21596] R13: 0000000000000000 R14: 00007f5e51975fa0 R15: 00007ffdaf3eeee8 [ 1547.698880][T21596] [ 1547.706650][T17055] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1547.719301][T21596] warn_alloc: 2 callbacks suppressed [ 1547.719311][T21596] syz.3.4365: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1547.822797][ T9] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1547.842110][T21596] CPU: 1 UID: 0 PID: 21596 Comm: syz.3.4365 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1547.852911][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1547.862611][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1547.862967][T21596] Call Trace: [ 1547.862979][T21596] [ 1547.869904][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 1547.873154][T21596] dump_stack_lvl+0x241/0x360 [ 1547.873192][T21596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1547.892957][T21596] ? __pfx__printk+0x10/0x10 [ 1547.897571][T21596] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1547.904011][T21596] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1547.910543][T21596] warn_alloc+0x278/0x410 [ 1547.914904][T21596] ? __pfx_warn_alloc+0x10/0x10 [ 1547.917333][ T9] usb 7-1: USB disconnect, device number 57 [ 1547.919760][T21596] ? __kasan_kmalloc+0x23/0xb0 [ 1547.930417][T21596] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 1547.936422][T21596] ? __get_vm_area_node+0x280/0x2d0 [ 1547.941641][T21596] __vmalloc_node_range_noprof+0x369/0x1380 [ 1547.947556][T21596] ? mark_lock+0x9a/0x360 [ 1547.951927][T21596] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1547.958277][T21596] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1547.963824][T21596] __vmalloc_noprof+0x79/0x90 [ 1547.968500][T21596] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1547.974046][T21596] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1547.979414][T21596] ? bpf_prog_alloc+0x28/0x1b0 [ 1547.984188][T21596] bpf_prog_alloc+0x3a/0x1b0 [ 1547.988801][T21596] bpf_prog_load+0x7f7/0x20f0 [ 1547.993485][T21596] ? __pfx_bpf_prog_load+0x10/0x10 [ 1547.998609][T21596] ? __pfx___might_resched+0x10/0x10 [ 1548.003924][T21596] ? __might_fault+0xc6/0x120 [ 1548.008606][T21596] __sys_bpf+0x4ee/0x810 [ 1548.012848][T21596] ? __pfx___sys_bpf+0x10/0x10 [ 1548.017619][T21596] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1548.023596][T21596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1548.029919][T21596] ? do_syscall_64+0x100/0x230 [ 1548.034689][T21596] __x64_sys_bpf+0x7c/0x90 [ 1548.039112][T21596] do_syscall_64+0xf3/0x230 [ 1548.043624][T21596] ? clear_bhb_loop+0x35/0x90 [ 1548.048301][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.054199][T21596] RIP: 0033:0x7f5e51785d29 [ 1548.058611][T21596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.078225][T21596] RSP: 002b:00007f5e5251a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1548.086646][T21596] RAX: ffffffffffffffda RBX: 00007f5e51975fa0 RCX: 00007f5e51785d29 [ 1548.094622][T21596] RDX: 0000000000000080 RSI: 0000000020000500 RDI: 0000000000000005 [ 1548.102592][T21596] RBP: 00007f5e5251a090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.110563][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.118532][T21596] R13: 0000000000000000 R14: 00007f5e51975fa0 R15: 00007ffdaf3eeee8 [ 1548.126521][T21596] [ 1548.136571][T17055] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1548.171938][T21596] Mem-Info: [ 1548.175080][T21596] active_anon:334 inactive_anon:6575 isolated_anon:0 [ 1548.175080][T21596] active_file:28482 inactive_file:35970 isolated_file:0 [ 1548.175080][T21596] unevictable:768 dirty:223 writeback:0 [ 1548.175080][T21596] slab_reclaimable:7469 slab_unreclaimable:119738 [ 1548.175080][T21596] mapped:32615 shmem:4296 pagetables:720 [ 1548.175080][T21596] sec_pagetables:0 bounce:0 [ 1548.175080][T21596] kernel_misc_reclaimable:0 [ 1548.175080][T21596] free:1288330 free_pcp:8984 free_cma:0 [ 1548.221078][T17055] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1548.238036][T17055] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1548.250014][T21596] Node 0 active_anon:1336kB inactive_anon:26300kB active_file:113852kB inactive_file:143880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130460kB dirty:888kB writeback:0kB shmem:15648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11672kB pagetables:2880kB sec_pagetables:0kB all_unreclaimable? no [ 1548.283281][T17055] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.293350][T17055] usb 9-1: config 0 descriptor?? [ 1548.298727][T21596] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1548.342537][T17055] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1548.355080][T21596] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.422518][T21596] lowmem_reserve[]: 0 2492 2493 0 0 [ 1548.427994][T21596] Node 0 DMA32 free:1260324kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1332kB inactive_anon:26264kB active_file:113072kB inactive_file:143828kB unevictable:1536kB writepending:888kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:2500kB local_pcp:1448kB free_cma:0kB [ 1548.508682][T21596] lowmem_reserve[]: 0 0 0 0 0 [ 1548.520309][T21596] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1548.679171][T21596] lowmem_reserve[]: 0 0 0 0 0 [ 1548.689667][T21596] Node 1 Normal free:3877436kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:33804kB local_pcp:18012kB free_cma:0kB [ 1548.720790][T21596] lowmem_reserve[]: 0 0 0 0 0 [ 1548.726237][T21596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1548.740452][T21596] Node 0 DMA32: 3*4kB (UME) 298*8kB (UME) 653*16kB (UME) 1015*32kB (UME) 688*64kB (UME) 207*128kB (UME) 83*256kB (UME) 53*512kB (UM) 31*1024kB (UME) 12*2048kB (UME) 250*4096kB (UM) = 1244556kB [ 1548.766690][T21596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1549.427949][T21596] Node 1 Normal: 7*4kB (UME) 7*8kB (ME) 11*16kB (UME) 109*32kB (UME) 86*64kB (UME) 33*128kB (UME) 8*256kB (UE) 9*512kB (UE) 3*1024kB (UM) 2*2048kB (UE) 940*4096kB (M) = 3877540kB [ 1549.450708][T21596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1549.460847][T17055] spca561 9-1:0.0: probe with driver spca561 failed with error -22 [ 1549.469939][T17055] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1549.497354][T17055] usb 9-1: MIDIStreaming interface descriptor not found [ 1549.525968][T21596] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1549.612216][T21596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.053068][T21596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.071934][T21596] 68753 total pagecache pages [ 1550.102019][T21596] 0 pages in swap cache [ 1550.106202][T21596] Free swap = 124732kB [ 1550.201965][T21596] Total swap = 124996kB [ 1550.206232][T21596] 2097051 pages RAM [ 1550.338709][T21596] 0 pages HighMem/MovableOnly [ 1550.360131][ T58] usb 9-1: USB disconnect, device number 14 [ 1550.371935][T21596] 427010 pages reserved [ 1550.392979][T21596] 0 pages cma reserved [ 1550.618960][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.671871][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.700578][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.723827][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.743785][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.774625][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.782170][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.812792][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.830445][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.851167][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.867751][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.891924][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.909595][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.925657][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.952398][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1550.972321][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.022785][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.030263][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.099772][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.249410][T21647] 9pnet_fd: Insufficient options for proto=fd [ 1551.682565][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.763920][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.772575][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.790247][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.813596][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.832062][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.856733][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.871410][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.894813][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.912044][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.931901][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.941666][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.963020][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.979422][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.010198][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.037048][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.045811][T21646] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1552.052092][T21646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1552.058264][T21646] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1552.072982][T21646] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1552.074462][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.336704][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.365127][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.385431][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.431245][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.514184][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.700833][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.757953][T17055] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1552.798769][T17055] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1553.178323][T21660] Can't find a SQUASHFS superblock on nullb0 [ 1553.653633][T21653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1553.659673][T21653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1553.691008][T21653] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1553.707914][T21653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1553.798817][T21665] 9pnet_fd: Insufficient options for proto=fd [ 1554.422157][T14769] Bluetooth: hci1: command 0x041b tx timeout [ 1554.648787][T21673] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1554.702157][ T6691] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1554.940192][ T6691] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1555.032640][ T6691] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1555.132882][ T6691] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1555.160539][ T6691] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.247781][ T6691] usb 10-1: config 0 descriptor?? [ 1555.366226][ T6691] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1555.708726][T14769] Bluetooth: hci5: command 0x0c1a tx timeout [ 1555.715783][T14769] Bluetooth: hci3: command 0x0c1a tx timeout [ 1555.783969][T14769] Bluetooth: hci2: command 0x040f tx timeout [ 1555.895446][ T6691] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 1556.140892][T21679] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1556.162578][T21679] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1556.172683][T21679] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1556.179655][T21679] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1556.180200][ T6691] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1556.211997][ T6691] usb 10-1: MIDIStreaming interface descriptor not found [ 1556.862337][T21701] Can't find a SQUASHFS superblock on nullb0 [ 1556.883564][ T5842] usb 10-1: USB disconnect, device number 12 [ 1557.346478][T14769] Bluetooth: hci1: command 0x041b tx timeout [ 1557.501101][T21707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4395'. [ 1557.522804][T21707] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4395'. [ 1557.571501][T21707] Cannot find map_set index 0 as target [ 1557.638025][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.647108][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.195400][T14769] Bluetooth: hci2: command 0x040f tx timeout [ 1558.201535][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 1558.201630][T18061] Bluetooth: hci3: command 0x0c1a tx timeout [ 1558.355302][T21725] futex_wake_op: syz.6.4396 tries to shift op by -1; fix this program [ 1559.185510][T21732] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4403'. [ 1559.205339][T21732] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4403'. [ 1559.225604][T21732] Cannot find map_set index 0 as target [ 1559.235950][T17276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.261613][T17276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.342194][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 1560.877351][T21752] FAULT_INJECTION: forcing a failure. [ 1560.877351][T21752] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.890120][T21752] CPU: 1 UID: 0 PID: 21752 Comm: syz.3.4407 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1560.900885][T21752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1560.910941][T21752] Call Trace: [ 1560.914209][T21752] [ 1560.917124][T21752] dump_stack_lvl+0x241/0x360 [ 1560.921798][T21752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1560.927001][T21752] ? __pfx__printk+0x10/0x10 [ 1560.931581][T21752] ? __kmalloc_cache_noprof+0x48/0x390 [ 1560.937034][T21752] ? __pfx___might_resched+0x10/0x10 [ 1560.942316][T21752] should_fail_ex+0x3b0/0x4e0 [ 1560.946991][T21752] should_failslab+0xac/0x100 [ 1560.951663][T21752] __kmalloc_cache_noprof+0x70/0x390 [ 1560.956937][T21752] ? alloc_pipe_info+0xeb/0x4d0 [ 1560.961786][T21752] alloc_pipe_info+0xeb/0x4d0 [ 1560.966468][T21752] splice_direct_to_actor+0xa9e/0xc80 [ 1560.971835][T21752] ? __pfx___schedule+0x10/0x10 [ 1560.976681][T21752] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1560.982650][T21752] ? __pfx_direct_splice_actor+0x10/0x10 [ 1560.988285][T21752] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1560.994190][T21752] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1561.000173][T21752] do_splice_direct+0x289/0x3e0 [ 1561.005025][T21752] ? __pfx_do_splice_direct+0x10/0x10 [ 1561.010387][T21752] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1561.016275][T21752] ? bpf_lsm_file_permission+0x9/0x10 [ 1561.021644][T21752] ? security_file_permission+0x74/0x280 [ 1561.027285][T21752] ? rw_verify_area+0x1c3/0x6f0 [ 1561.032128][T21752] do_sendfile+0x564/0x8a0 [ 1561.036539][T21752] ? __pfx_do_sendfile+0x10/0x10 [ 1561.041465][T21752] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1561.047785][T21752] __se_sys_sendfile64+0x17c/0x1e0 [ 1561.052930][T21752] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1561.058586][T21752] do_syscall_64+0xf3/0x230 [ 1561.063097][T21752] ? clear_bhb_loop+0x35/0x90 [ 1561.067763][T21752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.073648][T21752] RIP: 0033:0x7f5e51785d29 [ 1561.078050][T21752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1561.097650][T21752] RSP: 002b:00007f5e524d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1561.106060][T21752] RAX: ffffffffffffffda RBX: 00007f5e51976160 RCX: 00007f5e51785d29 [ 1561.114021][T21752] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 1561.121978][T21752] RBP: 00007f5e524d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.129957][T21752] R10: 0000000000089ffc R11: 0000000000000246 R12: 0000000000000001 [ 1561.137915][T21752] R13: 0000000000000000 R14: 00007f5e51976160 R15: 00007ffdaf3eeee8 [ 1561.145897][T21752] [ 1561.608463][ T5830] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1561.987295][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1562.009875][ T5830] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1562.041864][ T5830] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1562.058822][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.071945][ T5830] usb 7-1: config 0 descriptor?? [ 1562.080372][ T5830] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1562.593304][ T5830] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1562.605573][ T5830] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1562.618258][ T5830] usb 7-1: MIDIStreaming interface descriptor not found [ 1562.948800][T21768] No such timeout policy "syz1" [ 1563.086802][ T9] usb 7-1: USB disconnect, device number 58 [ 1563.231919][ T5842] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1563.383296][ T5842] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1563.402054][ T5842] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1563.448322][ T5842] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1563.476436][ T5842] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1563.491007][ T5842] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1563.508260][ T5842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1563.534787][ T5842] usb 10-1: SerialNumber: syz [ 1563.629586][T21770] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1563.697497][T21770] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1563.814259][ T5842] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 1564.070715][ T5842] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1564.085356][ T5842] usb 10-1: USB disconnect, device number 13 [ 1564.405053][T21789] sctp: [Deprecated]: syz.3.4419 (pid 21789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1564.405053][T21789] Use struct sctp_sack_info instead [ 1564.662576][T14769] Bluetooth: hci2: command 0x040f tx timeout [ 1566.162078][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4420'. [ 1566.509708][T12240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.559147][T12240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.973830][T21815] 9pnet_fd: Insufficient options for proto=fd [ 1567.873405][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4429'. [ 1568.582114][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 1568.924210][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4434'. [ 1570.496440][T21858] syz.6.4438: attempt to access beyond end of device [ 1570.496440][T21858] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1570.509408][T21858] exFAT-fs (nbd6): unable to read boot sector [ 1570.515589][T21858] exFAT-fs (nbd6): failed to read boot sector [ 1570.521944][T21858] exFAT-fs (nbd6): failed to recognize exfat type [ 1571.830887][T21879] 9pnet_fd: Insufficient options for proto=fd [ 1572.201873][ T5830] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1572.508628][ T5830] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1572.531484][ T5830] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1572.541600][ T5830] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1572.659335][T21888] 9pnet_fd: Insufficient options for proto=fd [ 1572.849326][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.035216][ T5830] usb 10-1: config 0 descriptor?? [ 1573.063539][ T5830] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1573.597838][ T5830] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 1573.698636][ T5830] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1573.765775][ T5830] usb 10-1: MIDIStreaming interface descriptor not found [ 1573.872587][ T5835] Bluetooth: hci1: command 0x041b tx timeout [ 1575.295815][T17055] usb 10-1: USB disconnect, device number 14 [ 1575.645569][T21917] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1576.624977][T21925] program syz.8.4462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1576.936546][T21935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1577.103164][T21937] 9pnet_fd: Insufficient options for proto=fd [ 1578.342614][T17246] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1578.582308][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 1578.665641][T17246] usb 9-1: device descriptor read/64, error -71 [ 1578.952029][T17246] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1579.092673][T17246] usb 9-1: device descriptor read/64, error -71 [ 1579.235939][T17246] usb usb9-port1: attempt power cycle [ 1579.530061][T21966] autofs: Unknown parameter 'ث4F/SU9֡@Xe [ 1579.530061][T21966] w?yrP:@՚gCm> @eVX΁YlI3tfEԉܖʍ%ɱ͊BFbeuaBV@2S#tT@bA*e0x0000000000000003' [ 1579.612087][T17246] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1579.964634][T17246] usb 9-1: device descriptor read/8, error -71 [ 1580.319776][T21977] 9pnet_fd: Insufficient options for proto=fd [ 1580.341220][T17246] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1580.363493][T17246] usb 9-1: device descriptor read/8, error -71 [ 1580.852903][T17246] usb usb9-port1: unable to enumerate USB device [ 1581.462197][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 1582.422111][T10456] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1582.470071][T22000] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1582.732275][T10456] usb 9-1: Using ep0 maxpacket: 16 [ 1582.896820][T10456] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.964633][T10456] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1583.048715][T10456] usb 9-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1583.060702][T10456] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.123506][T10456] usb 9-1: Product: syz [ 1583.127732][T10456] usb 9-1: Manufacturer: syz [ 1583.143883][T10456] usb 9-1: SerialNumber: syz [ 1583.161049][T10456] usb 9-1: config 0 descriptor?? [ 1583.239850][T22009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4490'. [ 1583.272137][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1583.445409][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1583.969410][ T9] usb 10-1: config 0 has no interfaces? [ 1583.977387][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1583.986898][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.995354][ T9] usb 10-1: Product: syz [ 1584.000315][ T9] usb 10-1: Manufacturer: syz [ 1584.005412][ T9] usb 10-1: SerialNumber: syz [ 1584.006368][T17246] usb 9-1: USB disconnect, device number 19 [ 1584.018311][ T9] usb 10-1: config 0 descriptor?? [ 1584.502068][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 1584.791891][T17246] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1584.942247][T17246] usb 7-1: Using ep0 maxpacket: 16 [ 1584.953088][T17246] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1584.964230][T17246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.972357][T17246] usb 7-1: Product: syz [ 1584.976509][T17246] usb 7-1: Manufacturer: syz [ 1584.981087][T17246] usb 7-1: SerialNumber: syz [ 1584.988991][T17246] usb 7-1: config 0 descriptor?? [ 1584.997434][T17246] s2255 7-1:0.0: Could not find bulk-in endpoint [ 1585.005703][T17246] Sensoray 2255 driver load failed: 0xfffffff4 [ 1585.012073][T17246] s2255 7-1:0.0: probe with driver s2255 failed with error -12 [ 1585.205720][T17276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.214313][T17276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.223291][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1585.233406][T17246] usb 7-1: USB disconnect, device number 59 [ 1585.393481][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1585.401595][ T9] usb 9-1: config 207 has too many interfaces: 143, using maximum allowed: 32 [ 1585.410612][ T9] usb 9-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.421024][ T9] usb 9-1: config 207 has 0 interfaces, different from the descriptor's value: 143 [ 1585.432268][ T9] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1585.441388][ T9] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1585.449823][ T9] usb 9-1: Product: syz [ 1585.454111][ T9] usb 9-1: SerialNumber: syz [ 1585.669262][ T9] usb 9-1: USB disconnect, device number 20 [ 1585.928461][T22024] loop2: detected capacity change from 0 to 7 [ 1585.937619][T22024] Dev loop2: unable to read RDB block 7 [ 1585.943501][T22024] loop2: unable to read partition table [ 1585.949391][T22024] loop2: partition table beyond EOD, truncated [ 1585.955750][T22024] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1586.002196][ T9] usb 10-1: USB disconnect, device number 15 [ 1586.317178][T22037] syz.3.4497: attempt to access beyond end of device [ 1586.317178][T22037] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1586.330485][T22037] exFAT-fs (nbd3): unable to read boot sector [ 1586.336617][T22037] exFAT-fs (nbd3): failed to read boot sector [ 1586.342911][T22037] exFAT-fs (nbd3): failed to recognize exfat type [ 1586.492609][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4500'. [ 1586.511582][T22043] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4500'. [ 1586.552043][T22043] Cannot find map_set index 0 as target [ 1587.299668][T17276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.320888][T17276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.338306][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1587.633786][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1587.656083][ T9] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1587.670735][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.689868][ T9] usb 10-1: Product: syz [ 1587.695019][ T9] usb 10-1: Manufacturer: syz [ 1587.699808][ T9] usb 10-1: SerialNumber: syz [ 1587.713160][ T9] usb 10-1: config 0 descriptor?? [ 1587.736501][ T9] s2255 10-1:0.0: Could not find bulk-in endpoint [ 1587.802734][ T9] Sensoray 2255 driver load failed: 0xfffffff4 [ 1587.819300][ T9] s2255 10-1:0.0: probe with driver s2255 failed with error -12 [ 1587.944965][T12098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.961389][T12098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.990254][ T9] usb 10-1: USB disconnect, device number 16 [ 1588.574586][T22071] random: crng reseeded on system resumption [ 1588.734823][ T9] IPVS: starting estimator thread 0... [ 1588.842089][T22079] IPVS: using max 20 ests per chain, 48000 per kthread [ 1589.635802][T22094] syz.8.4512: attempt to access beyond end of device [ 1589.635802][T22094] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1589.649302][T22094] exFAT-fs (nbd8): unable to read boot sector [ 1589.654037][T22091] ALSA: seq fatal error: cannot create timer (-22) [ 1589.655527][T22094] exFAT-fs (nbd8): failed to read boot sector [ 1589.669241][T22094] exFAT-fs (nbd8): failed to recognize exfat type [ 1589.998427][T22100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1590.134287][T22100] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1590.162293][T22107] FAULT_INJECTION: forcing a failure. [ 1590.162293][T22107] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.176543][T10456] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1590.188779][T22100] Cannot find map_set index 0 as target [ 1590.261531][T22107] CPU: 0 UID: 0 PID: 22107 Comm: syz.9.4516 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1590.272337][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1590.282407][T22107] Call Trace: [ 1590.285697][T22107] [ 1590.288639][T22107] dump_stack_lvl+0x241/0x360 [ 1590.293344][T22107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1590.298561][T22107] ? __pfx__printk+0x10/0x10 [ 1590.303174][T22107] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1590.308565][T22107] ? __pfx___might_resched+0x10/0x10 [ 1590.313873][T22107] ? rcu_is_watching+0x15/0xb0 [ 1590.318662][T22107] should_fail_ex+0x3b0/0x4e0 [ 1590.323371][T22107] should_failslab+0xac/0x100 [ 1590.328077][T22107] __kmalloc_node_noprof+0xe1/0x4d0 [ 1590.333299][T22107] ? seq_lseek+0x52/0x240 [ 1590.337644][T22107] ? __kvmalloc_node_noprof+0x72/0x190 [ 1590.343139][T22107] __kvmalloc_node_noprof+0x72/0x190 [ 1590.348453][T22107] traverse+0xd6/0x550 [ 1590.352555][T22107] seq_lseek+0x126/0x240 [ 1590.356819][T22107] proc_reg_llseek+0x1c6/0x2a0 [ 1590.361598][T22107] __x64_sys_lseek+0x14c/0x1e0 [ 1590.366359][T22107] do_syscall_64+0xf3/0x230 [ 1590.370866][T22107] ? clear_bhb_loop+0x35/0x90 [ 1590.375562][T22107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.381479][T22107] RIP: 0033:0x7f13b4185d29 [ 1590.385912][T22107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.405529][T22107] RSP: 002b:00007f13b4ff1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 1590.413952][T22107] RAX: ffffffffffffffda RBX: 00007f13b4375fa0 RCX: 00007f13b4185d29 [ 1590.421918][T22107] RDX: 0000000000000000 RSI: 0000000000000067 RDI: 0000000000000003 [ 1590.429883][T22107] RBP: 00007f13b4ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.437849][T22107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.445813][T22107] R13: 0000000000000000 R14: 00007f13b4375fa0 R15: 00007fff51ad4968 [ 1590.453794][T22107] [ 1590.456870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1590.555870][T10456] usb 7-1: Using ep0 maxpacket: 8 [ 1590.572573][T10456] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1590.594157][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1590.621970][T10456] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1590.659907][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1590.691233][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1590.744439][T10456] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1590.752871][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1590.813914][T10456] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1590.851010][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1590.867657][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1590.895993][T10456] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1590.903888][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1590.925554][T10456] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1590.946873][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1590.958286][T10456] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1590.973655][T10456] usb 7-1: string descriptor 0 read error: -22 [ 1590.980632][T10456] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1590.989833][T10456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.025294][T10456] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1592.152060][T10456] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1592.435592][T10456] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1592.538446][T10456] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1592.555150][ T5830] usb 7-1: USB disconnect, device number 60 [ 1592.566503][T10456] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1592.584761][T10456] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.595010][T10456] usb 10-1: config 0 descriptor?? [ 1592.606707][T10456] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1594.260172][T10456] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 1594.472801][T10456] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1594.480390][T10456] usb 10-1: MIDIStreaming interface descriptor not found [ 1595.572293][T22157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4529'. [ 1595.582751][T22157] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4529'. [ 1595.592502][T22157] Cannot find map_set index 0 as target [ 1595.896620][ T9] usb 10-1: USB disconnect, device number 17 [ 1596.704594][T22178] FAULT_INJECTION: forcing a failure. [ 1596.704594][T22178] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.739758][T22178] CPU: 0 UID: 0 PID: 22178 Comm: syz.3.4535 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1596.750552][T22178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1596.760632][T22178] Call Trace: [ 1596.763928][T22178] [ 1596.766874][T22178] dump_stack_lvl+0x241/0x360 [ 1596.771570][T22178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1596.771996][T12857] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1596.776756][T22178] ? __pfx__printk+0x10/0x10 [ 1596.776787][T22178] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1596.776808][T22178] ? __pfx___might_resched+0x10/0x10 [ 1596.800263][T22178] should_fail_ex+0x3b0/0x4e0 [ 1596.804953][T22178] should_failslab+0xac/0x100 [ 1596.809661][T22178] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1596.815484][T22178] ? __alloc_skb+0x1c3/0x440 [ 1596.820093][T22178] __alloc_skb+0x1c3/0x440 [ 1596.824523][T22178] ? __pfx___alloc_skb+0x10/0x10 [ 1596.829563][T22178] ? netlink_autobind+0xd6/0x2f0 [ 1596.834525][T22178] ? netlink_autobind+0x2b0/0x2f0 [ 1596.839558][T22178] netlink_sendmsg+0x638/0xcb0 [ 1596.844327][T22178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1596.849618][T22178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1596.854899][T22178] __sock_sendmsg+0x221/0x270 [ 1596.859581][T22178] ____sys_sendmsg+0x52a/0x7e0 [ 1596.864348][T22178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1596.869630][T22178] ? __fget_files+0x2a/0x410 [ 1596.874222][T22178] ? __fget_files+0x2a/0x410 [ 1596.878815][T22178] __sys_sendmsg+0x269/0x350 [ 1596.883406][T22178] ? __pfx___sys_sendmsg+0x10/0x10 [ 1596.888532][T22178] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1596.893822][T22178] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1596.899721][T22178] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1596.906052][T22178] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1596.912375][T22178] ? __irq_exit_rcu+0x105/0x220 [ 1596.917225][T22178] ? do_syscall_64+0xb6/0x230 [ 1596.921907][T22178] do_syscall_64+0xf3/0x230 [ 1596.926409][T22178] ? clear_bhb_loop+0x35/0x90 [ 1596.931082][T22178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.936977][T22178] RIP: 0033:0x7f5e51785d29 [ 1596.941388][T22178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.961000][T22178] RSP: 002b:00007f5e5251a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1596.969421][T22178] RAX: ffffffffffffffda RBX: 00007f5e51975fa0 RCX: 00007f5e51785d29 [ 1596.977388][T22178] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1596.985354][T22178] RBP: 00007f5e5251a090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.993319][T22178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.001280][T22178] R13: 0000000000000000 R14: 00007f5e51975fa0 R15: 00007ffdaf3eeee8 [ 1597.009259][T22178] [ 1597.172114][T12857] usb 10-1: Using ep0 maxpacket: 16 [ 1597.184656][T12857] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1597.203618][T12857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.214490][T12857] usb 10-1: Product: syz [ 1597.222373][T12857] usb 10-1: Manufacturer: syz [ 1597.231991][T12857] usb 10-1: SerialNumber: syz [ 1597.965539][T22194] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4538'. [ 1598.000749][T22194] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1598.010494][T22194] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1598.612603][T12857] usb 10-1: config 0 descriptor?? [ 1598.626916][T12857] s2255 10-1:0.0: Could not find bulk-in endpoint [ 1598.638897][T12857] Sensoray 2255 driver load failed: 0xfffffff4 [ 1598.652231][T12857] s2255 10-1:0.0: probe with driver s2255 failed with error -12 [ 1598.858008][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.868139][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.892464][T12857] usb 10-1: USB disconnect, device number 18 [ 1599.554814][T22204] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4542'. [ 1599.664465][T22210] Cannot find map_set index 0 as target [ 1599.694254][T22206] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4542'. [ 1599.726808][T22211] syz.3.4543: attempt to access beyond end of device [ 1599.726808][T22211] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1599.739663][T22211] exFAT-fs (nbd3): unable to read boot sector [ 1599.746372][T22211] exFAT-fs (nbd3): failed to read boot sector [ 1599.752554][T22211] exFAT-fs (nbd3): failed to recognize exfat type [ 1601.671890][ T5830] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1602.029514][ T5830] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1602.061921][ T5830] usb 10-1: config 0 has no interface number 0 [ 1602.076071][ T5830] usb 10-1: too many endpoints for config 0 interface 1 altsetting 48: 48, using maximum allowed: 30 [ 1602.091014][ T5830] usb 10-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1602.109193][ T5830] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1602.124274][ T5830] usb 10-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 1602.133892][ T5830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.149251][ T5830] usb 10-1: Product: syz [ 1602.165433][ T5830] usb 10-1: Manufacturer: syz [ 1602.175508][T22246] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4555'. [ 1602.184904][ T5830] usb 10-1: SerialNumber: syz [ 1602.211627][ T5830] usb 10-1: config 0 descriptor?? [ 1602.225329][T22246] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4555'. [ 1602.241426][T22246] Cannot find map_set index 0 as target [ 1602.444510][ T5830] usb 10-1: disable ehci-hcd to run US-144 [ 1602.457367][ T5830] usb 10-1: USB disconnect, device number 19 [ 1602.594741][T22255] syz.8.4557: attempt to access beyond end of device [ 1602.594741][T22255] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1602.607507][T22255] exFAT-fs (nbd8): unable to read boot sector [ 1602.613604][T22255] exFAT-fs (nbd8): failed to read boot sector [ 1602.619654][T22255] exFAT-fs (nbd8): failed to recognize exfat type [ 1603.508200][T22270] Can't find a SQUASHFS superblock on nullb0 [ 1604.496388][T22281] Can't find a SQUASHFS superblock on nullb0 [ 1605.782974][T22296] Can't find a SQUASHFS superblock on nullb0 [ 1606.344326][T22305] Can't find a SQUASHFS superblock on nullb0 [ 1607.544646][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.631986][ T6691] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1607.811939][ T6691] usb 10-1: Using ep0 maxpacket: 32 [ 1609.364255][T22348] netlink: 'syz.6.4585': attribute type 4 has an invalid length. [ 1609.398104][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1609.398143][ T29] audit: type=1326 audit(1737359995.248:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22346 comm="syz.6.4585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1d7185d29 code=0x0 [ 1609.581401][ T6691] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1609.603452][ T6691] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1609.616073][ T6691] usb 10-1: can't read configurations, error -71 [ 1611.144026][T22368] syz.9.4590: attempt to access beyond end of device [ 1611.144026][T22368] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1611.156891][T22368] exFAT-fs (nbd9): unable to read boot sector [ 1611.163054][T22368] exFAT-fs (nbd9): failed to read boot sector [ 1611.169419][T22368] exFAT-fs (nbd9): failed to recognize exfat type [ 1614.225361][T22389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1614.231387][T22389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1614.293002][T22389] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1614.364677][T22389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1614.402034][T22401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4600'. [ 1614.509330][T22406] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4600'. [ 1614.857705][T22415] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1614.872681][T22415] File: /dev/nullb0 PID: 22415 Comm: syz.8.4603 [ 1616.015663][T22423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4605'. [ 1616.262252][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 1616.262397][T14769] Bluetooth: hci1: command 0x041b tx timeout [ 1616.341846][T14769] Bluetooth: hci5: command 0x0c1a tx timeout [ 1616.421936][T14769] Bluetooth: hci2: command 0x040f tx timeout [ 1617.536073][T22443] 9pnet_fd: Insufficient options for proto=fd [ 1618.173406][T22456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1618.239100][T22456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1618.264099][T22456] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1618.282405][T22456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1618.762193][ T58] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1618.951903][ T58] usb 9-1: Using ep0 maxpacket: 16 [ 1619.002388][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.019492][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.043442][ T58] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1619.053908][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.070928][ T58] usb 9-1: config 0 descriptor?? [ 1619.079222][T22477] loop7: detected capacity change from 0 to 16384 [ 1619.151468][T22477] blk_print_req_error: 38 callbacks suppressed [ 1619.151487][T22477] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1619.186640][T22480] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1619.203916][T22477] buffer_io_error: 4 callbacks suppressed [ 1619.203933][T22477] Buffer I/O error on dev loop7, logical block 1, async page read [ 1619.233960][T22480] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1619.240807][T22477] Dev loop7: unable to read RDB block 8 [ 1619.249814][T22477] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1619.260695][T22477] Buffer I/O error on dev loop7, logical block 3, async page read [ 1619.268704][T22477] loop7: unable to read partition table [ 1619.274752][T22477] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 1619.302677][T22484] syz.9.4622: attempt to access beyond end of device [ 1619.302677][T22484] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1619.315543][T22484] exFAT-fs (nbd9): unable to read boot sector [ 1619.321638][T22484] exFAT-fs (nbd9): failed to read boot sector [ 1619.327810][T22484] exFAT-fs (nbd9): failed to recognize exfat type [ 1619.343777][T22464] 9pnet_fd: Insufficient options for proto=fd [ 1619.356268][ T58] usbhid 9-1:0.0: can't add hid device: -71 [ 1619.362675][ T58] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1619.374444][ T58] usb 9-1: USB disconnect, device number 21 [ 1619.426729][T22477] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 1619.612091][T22477] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1619.616386][T22487] 9pnet_fd: Insufficient options for proto=fd [ 1619.672679][T22477] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 1619.859709][T22477] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 1619.868192][T22477] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 1619.907631][T22477] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 1619.944600][T22477] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 1620.010930][T22477] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 1620.261992][T14769] Bluetooth: hci3: command 0x0c1a tx timeout [ 1620.268183][T14769] Bluetooth: hci1: command 0x041b tx timeout [ 1620.342482][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 1620.344702][T14769] Bluetooth: hci5: command 0x0c1a tx timeout [ 1620.393480][T22503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1620.422443][ T58] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1620.547162][T22511] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1620.605513][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1620.648235][ T58] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1620.689143][ T58] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1620.731397][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.742539][T12857] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1620.774138][T22515] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4632'. [ 1620.783125][ T58] usb 7-1: config 0 descriptor?? [ 1620.786086][ T58] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1620.795891][T22515] netlink: 'syz.9.4632': attribute type 25 has an invalid length. [ 1620.912577][T12857] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.947521][T22516] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1621.086629][T22515] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.096353][T22515] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.105922][T22515] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.114811][T22515] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1621.200936][T17055] IPVS: starting estimator thread 0... [ 1621.228646][T12857] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.250229][T12857] usb 9-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1621.266902][T12857] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.417437][ T58] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1621.426306][ T58] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1621.433892][T22519] IPVS: using max 26 ests per chain, 62400 per kthread [ 1621.715586][T22525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1621.732277][T22525] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1621.741967][T22525] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1622.836329][T12857] usb 9-1: config 0 descriptor?? [ 1622.926952][ T58] usb 7-1: MIDIStreaming interface descriptor not found [ 1622.967655][ T58] usb 7-1: USB disconnect, device number 61 [ 1623.075640][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4636'. [ 1623.168815][T22508] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4631'. [ 1623.187509][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4631'. [ 1623.213026][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4631'. [ 1623.476896][T22543] overlayfs: failed to clone upperpath [ 1623.554943][T12857] zeroplus 0003:0C12:0030.0011: unbalanced delimiter at end of report description [ 1623.565681][T12857] zeroplus 0003:0C12:0030.0011: parse failed [ 1623.571944][T12857] zeroplus 0003:0C12:0030.0011: probe with driver zeroplus failed with error -22 [ 1623.686703][T22545] netlink: 'syz.0.4641': attribute type 21 has an invalid length. [ 1623.694702][T22545] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4641'. [ 1623.705454][T22545] netlink: 'syz.0.4641': attribute type 5 has an invalid length. [ 1623.718118][T22545] netlink: 'syz.0.4641': attribute type 6 has an invalid length. [ 1623.728207][T22545] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4641'. [ 1623.778284][T17055] usb 9-1: USB disconnect, device number 22 [ 1623.975578][T22549] FAULT_INJECTION: forcing a failure. [ 1623.975578][T22549] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.989485][T22549] CPU: 1 UID: 0 PID: 22549 Comm: syz.9.4642 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1624.000352][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1624.010420][T22549] Call Trace: [ 1624.013708][T22549] [ 1624.016647][T22549] dump_stack_lvl+0x241/0x360 [ 1624.021347][T22549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1624.026566][T22549] ? __pfx__printk+0x10/0x10 [ 1624.031174][T22549] ? __kmalloc_cache_noprof+0x48/0x390 [ 1624.036645][T22549] ? __pfx___might_resched+0x10/0x10 [ 1624.041954][T22549] should_fail_ex+0x3b0/0x4e0 [ 1624.046655][T22549] should_failslab+0xac/0x100 [ 1624.051354][T22549] __kmalloc_cache_noprof+0x70/0x390 [ 1624.056653][T22549] ? snd_pcm_oss_change_params_locked+0x1b6/0x3d60 [ 1624.063172][T22549] snd_pcm_oss_change_params_locked+0x1b6/0x3d60 [ 1624.069522][T22549] ? mark_lock+0x9a/0x360 [ 1624.073871][T22549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1624.079868][T22549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1624.086213][T22549] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1624.093016][T22549] ? snd_pcm_oss_make_ready+0xcd/0x350 [ 1624.098514][T22549] snd_pcm_oss_make_ready+0x11d/0x350 [ 1624.103912][T22549] snd_pcm_oss_set_trigger+0x6a/0x730 [ 1624.109300][T22549] ? __might_fault+0xaa/0x120 [ 1624.114000][T22549] ? __might_fault+0xc6/0x120 [ 1624.118701][T22549] snd_pcm_oss_ioctl+0xda9/0xff0 [ 1624.123657][T22549] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1624.129141][T22549] ? __se_sys_ioctl+0x51/0x170 [ 1624.133923][T22549] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1624.139395][T22549] __se_sys_ioctl+0xf5/0x170 [ 1624.144005][T22549] do_syscall_64+0xf3/0x230 [ 1624.148535][T22549] ? clear_bhb_loop+0x35/0x90 [ 1624.153226][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.159149][T22549] RIP: 0033:0x7f13b4185d29 [ 1624.163584][T22549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.183217][T22549] RSP: 002b:00007f13b4faf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.191661][T22549] RAX: ffffffffffffffda RBX: 00007f13b4376160 RCX: 00007f13b4185d29 [ 1624.199650][T22549] RDX: 0000000020000000 RSI: 0000000040045010 RDI: 0000000000000007 [ 1624.207639][T22549] RBP: 00007f13b4faf090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.215625][T22549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.223607][T22549] R13: 0000000000000000 R14: 00007f13b4376160 R15: 00007fff51ad4968 [ 1624.231608][T22549] [ 1624.423879][T22551] overlayfs: failed to clone upperpath [ 1626.172615][T22563] 9pnet_fd: Insufficient options for proto=fd [ 1627.032665][T22576] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4652'. [ 1628.058761][T22590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1628.075129][T22590] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1628.085019][T22590] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1628.099083][T17055] page_pool_release_retry() stalled pool shutdown: id 75, 51 inflight 61 sec [ 1628.101280][ T29] audit: type=1326 audit(1737360013.858:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22568 comm="syz.8.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d2185d29 code=0x7fc00000 [ 1629.053726][ T58] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1629.503654][ T58] usb 9-1: Using ep0 maxpacket: 16 [ 1629.573740][ T58] usb 9-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1629.721630][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.762848][T22594] netlink: set zone limit has 4 unknown bytes [ 1629.769379][ T58] usb 9-1: Product: syz [ 1629.774829][ T58] usb 9-1: Manufacturer: syz [ 1629.779451][ T58] usb 9-1: SerialNumber: syz [ 1629.786264][ T58] usb 9-1: config 0 descriptor?? [ 1629.795193][ T58] s2255 9-1:0.0: Could not find bulk-in endpoint [ 1629.801622][ T58] Sensoray 2255 driver load failed: 0xfffffff4 [ 1629.808585][ T58] s2255 9-1:0.0: probe with driver s2255 failed with error -12 [ 1630.370817][T22605] Can't find a SQUASHFS superblock on nullb0 [ 1630.556515][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.580559][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.674583][ T5830] usb 9-1: USB disconnect, device number 23 [ 1631.132118][ T58] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1631.377212][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.431412][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.474956][ T58] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1631.545058][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.702705][ T58] usb 7-1: config 0 descriptor?? [ 1632.697490][T22638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1632.837793][T10456] usb 7-1: USB disconnect, device number 62 [ 1633.033468][T17055] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1633.356468][T17055] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.443835][T17055] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1633.853340][T17055] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1633.874122][T17055] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1633.887958][T17055] usb 10-1: SerialNumber: syz [ 1634.207360][T22656] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4676'. [ 1634.222375][T22656] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1634.232324][T22656] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1634.723760][T17055] usb 10-1: 0:2 : does not exist [ 1634.916572][T12240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.939652][T12240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.957674][T22667] Can't find a SQUASHFS superblock on nullb0 [ 1635.495011][T22668] Can't find a SQUASHFS superblock on nullb0 [ 1636.333739][T17246] usb 10-1: USB disconnect, device number 22 [ 1639.829970][T22706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1642.463189][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4700'. [ 1642.849623][T22746] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1643.194103][T10456] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1643.325861][T22767] netlink: del zone limit has 4 unknown bytes [ 1643.361924][T10456] usb 7-1: Using ep0 maxpacket: 16 [ 1643.383373][T10456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.414705][T10456] usb 7-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1643.444031][T10456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.467344][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.468748][T10456] usb 7-1: config 0 descriptor?? [ 1643.495710][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.587046][T22772] netlink: 332 bytes leftover after parsing attributes in process `syz.8.4710'. [ 1643.597165][T22772] netlink: 'syz.8.4710': attribute type 3 has an invalid length. [ 1643.605546][T22772] netlink: 'syz.8.4710': attribute type 3 has an invalid length. [ 1643.646570][T22775] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4712'. [ 1643.657328][T22775] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4712'. [ 1643.667174][T22775] Cannot find map_set index 0 as target [ 1643.985381][T22779] tracefs: Unknown parameter 'd' [ 1644.036746][T10456] usbhid 7-1:0.0: can't add hid device: -71 [ 1644.043634][T10456] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1644.341367][T10456] usb 7-1: USB disconnect, device number 63 [ 1644.889719][T22796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1644.956461][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4718'. [ 1645.135296][T22809] netlink: 1284 bytes leftover after parsing attributes in process `syz.8.4724'. [ 1645.145694][T22809] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1645.166221][T22809] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 1645.308275][T22813] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4725'. [ 1645.319594][T22813] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4725'. [ 1645.329907][T22813] Cannot find map_set index 0 as target [ 1645.767415][T10456] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1645.962441][T10456] usb 10-1: Using ep0 maxpacket: 16 [ 1645.994898][T10456] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1646.006797][T10456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.120988][T10456] usb 10-1: Product: syz [ 1646.211592][T10456] usb 10-1: Manufacturer: syz [ 1646.254840][T10456] usb 10-1: SerialNumber: syz [ 1646.341077][T10456] usb 10-1: config 0 descriptor?? [ 1646.349864][T10456] s2255 10-1:0.0: Could not find bulk-in endpoint [ 1646.356435][T10456] Sensoray 2255 driver load failed: 0xfffffff4 [ 1646.363137][T10456] s2255 10-1:0.0: probe with driver s2255 failed with error -12 [ 1646.371874][T12857] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1646.571866][T12857] usb 9-1: Using ep0 maxpacket: 8 [ 1646.598083][T12857] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1646.608458][T12857] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.616926][T12857] usb 9-1: Product: syz [ 1646.626734][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.627792][T12857] usb 9-1: Manufacturer: syz [ 1646.643885][T12857] usb 9-1: SerialNumber: syz [ 1646.652656][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.661575][T12857] usb 9-1: config 0 descriptor?? [ 1646.685697][T12857] gspca_main: se401-2.14.0 probing 047d:5003 [ 1646.687269][T10456] usb 10-1: USB disconnect, device number 23 [ 1646.882904][T22830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1646.909247][T22830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1646.920719][ T29] audit: type=1804 audit(1737360032.768:459): pid=22831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.4731" name="/newroot/153/bus/cgroup.controllers" dev="overlay" ino=908 res=1 errno=0 [ 1646.948918][T22830] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1646.968599][T22830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1646.974631][ T29] audit: type=1800 audit(1737360032.768:460): pid=22831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.4731" name="cgroup.controllers" dev="overlay" ino=908 res=0 errno=0 [ 1647.166721][T12857] gspca_se401: Wrong descriptor type [ 1647.378630][T12857] usb 9-1: USB disconnect, device number 24 [ 1647.475881][T22857] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4740'. [ 1647.491143][T22859] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1648.421842][T14769] Bluetooth: hci1: command 0x041b tx timeout [ 1648.581903][T12857] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1648.771836][T12857] usb 7-1: Using ep0 maxpacket: 16 [ 1648.795564][T12857] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1648.822281][T12857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.842491][T12857] usb 7-1: Product: syz [ 1648.846677][T12857] usb 7-1: Manufacturer: syz [ 1648.851283][T12857] usb 7-1: SerialNumber: syz [ 1648.883948][T12857] usb 7-1: config 0 descriptor?? [ 1648.903801][T12857] s2255 7-1:0.0: Could not find bulk-in endpoint [ 1648.910215][T12857] Sensoray 2255 driver load failed: 0xfffffff4 [ 1648.931985][T10456] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1648.941896][T12857] s2255 7-1:0.0: probe with driver s2255 failed with error -12 [ 1648.981996][T14769] Bluetooth: hci3: command 0x0c1a tx timeout [ 1648.982350][T18061] Bluetooth: hci5: command 0x0c1a tx timeout [ 1648.994714][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 1649.102076][T10456] usb 10-1: Using ep0 maxpacket: 16 [ 1649.126456][T10456] usb 10-1: config 0 has an invalid interface number: 68 but max is 0 [ 1649.142548][T10456] usb 10-1: config 0 has no interface number 0 [ 1649.153731][T10456] usb 10-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1649.156664][T16359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.167747][T10456] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1649.193287][T10456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.206828][T10456] usb 10-1: Product: syz [ 1649.216361][T16359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.216406][T10456] usb 10-1: Manufacturer: syz [ 1649.249564][ T9] usb 7-1: USB disconnect, device number 64 [ 1649.255763][T10456] usb 10-1: SerialNumber: syz [ 1649.279456][T10456] usb 10-1: config 0 descriptor?? [ 1649.295594][T22878] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1649.549913][T10456] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1649.634544][T22878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.770312][T22878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.859197][ T6383] usb 10-1: USB disconnect, device number 24 [ 1649.868236][T12240] usb 10-1: Failed to submit usb control message: -71 [ 1649.902176][T12240] usb 10-1: unable to send the bmi data to the device: -71 [ 1649.937973][T12240] usb 10-1: unable to get target info from device [ 1649.954777][T12240] usb 10-1: could not get target info (-71) [ 1649.960791][T12240] usb 10-1: could not probe fw (-71) [ 1650.251443][T22903] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1652.431355][T22929] syz.3.4760: attempt to access beyond end of device [ 1652.431355][T22929] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1652.445043][T22929] qnx6: unable to read the first superblock [ 1652.452021][T22929] syz.3.4760: attempt to access beyond end of device [ 1652.452021][T22929] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1652.465109][T22929] qnx6: unable to read the first superblock [ 1652.471100][T22929] qnx6: unable to read the first superblock [ 1653.343578][ T29] audit: type=1326 audit(1737360039.198:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b4185d29 code=0x7ffc0000 [ 1653.491843][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4768'. [ 1653.500968][T22942] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1653.826185][ T29] audit: type=1326 audit(1737360039.198:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b4185d29 code=0x7ffc0000 [ 1653.911908][ T29] audit: type=1326 audit(1737360039.198:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13b4185d29 code=0x7ffc0000 [ 1653.975775][ T29] audit: type=1326 audit(1737360039.198:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b4185d29 code=0x7ffc0000 [ 1654.028038][ T29] audit: type=1326 audit(1737360039.198:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b4185d29 code=0x7ffc0000 [ 1654.058132][ T29] audit: type=1326 audit(1737360039.198:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13b4185d29 code=0x7ffc0000 [ 1654.164943][T22946] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1654.286320][ T29] audit: type=1326 audit(1737360039.698:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b4185d29 code=0x7ffc0000 [ 1654.335095][ T29] audit: type=1326 audit(1737360039.698:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13b417cce7 code=0x7ffc0000 [ 1654.358517][ T29] audit: type=1326 audit(1737360039.698:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13b4121f29 code=0x7ffc0000 [ 1654.380835][ T29] audit: type=1326 audit(1737360039.698:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22937 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13b417cce7 code=0x7ffc0000 [ 1654.663378][T22949] nfs: Deprecated parameter 'nointr' [ 1656.149973][T22954] 9pnet_fd: Insufficient options for proto=fd [ 1656.173823][T22959] fuse: Unknown parameter 'rootlode' [ 1656.185113][T22959] netlink: 'syz.6.4771': attribute type 5 has an invalid length. [ 1656.193010][T22959] netlink: 380 bytes leftover after parsing attributes in process `syz.6.4771'. [ 1657.142243][T22966] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4775'. [ 1657.152743][T22966] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4775'. [ 1658.442062][T22981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1658.451064][T22981] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1658.481863][T10456] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1658.540310][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1658.666644][T10456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1658.696963][T10456] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1658.714152][T10456] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1658.723817][T10456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.741571][T10456] usb 7-1: config 0 descriptor?? [ 1658.757619][T10456] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1658.900003][T22994] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4785'. [ 1659.011943][T22999] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1659.151837][ T58] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1659.273072][T10456] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1659.289355][T10456] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1659.301424][T10456] usb 7-1: MIDIStreaming interface descriptor not found [ 1659.301982][ T58] usb 9-1: Using ep0 maxpacket: 8 [ 1659.320064][ T58] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1659.340142][ T58] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1659.360207][ T58] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1659.380554][ T58] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1659.411803][ T58] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1659.431139][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.533173][ T9] usb 7-1: USB disconnect, device number 65 [ 1659.690009][ T58] usb 9-1: usb_control_msg returned -32 [ 1659.707820][ T58] usbtmc 9-1:16.0: can't read capabilities [ 1661.083775][T23019] Can't find a SQUASHFS superblock on nullb0 [ 1661.198854][T23026] FAULT_INJECTION: forcing a failure. [ 1661.198854][T23026] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.211654][T23026] CPU: 1 UID: 0 PID: 23026 Comm: syz.9.4795 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1661.222432][T23026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1661.232498][T23026] Call Trace: [ 1661.235788][T23026] [ 1661.238727][T23026] dump_stack_lvl+0x241/0x360 [ 1661.243433][T23026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1661.248651][T23026] ? __pfx__printk+0x10/0x10 [ 1661.253259][T23026] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1661.258822][T23026] ? __pfx___might_resched+0x10/0x10 [ 1661.264136][T23026] should_fail_ex+0x3b0/0x4e0 [ 1661.268839][T23026] should_failslab+0xac/0x100 [ 1661.273535][T23026] ? security_file_alloc+0x32/0x310 [ 1661.278745][T23026] kmem_cache_alloc_noprof+0x70/0x380 [ 1661.284134][T23026] security_file_alloc+0x32/0x310 [ 1661.289174][T23026] init_file+0x91/0x280 [ 1661.293349][T23026] alloc_empty_file+0xb8/0x1d0 [ 1661.298124][T23026] alloc_file_pseudo+0x1da/0x290 [ 1661.303080][T23026] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1661.308554][T23026] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1661.314388][T23026] anon_inode_getfile+0xc8/0x180 [ 1661.319349][T23026] iommufd_test+0xa74/0x4270 [ 1661.323964][T23026] ? __pfx_iommufd_test+0x10/0x10 [ 1661.329001][T23026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1661.334996][T23026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1661.341341][T23026] ? lockdep_hardirqs_on+0x99/0x150 [ 1661.346567][T23026] ? __pfx_iommufd_test+0x10/0x10 [ 1661.351607][T23026] ? iommufd_fops_ioctl+0x488/0x5a0 [ 1661.356822][T23026] iommufd_fops_ioctl+0x4d6/0x5a0 [ 1661.361862][T23026] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1661.367433][T23026] ? __fget_files+0x2a/0x410 [ 1661.372039][T23026] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1661.377597][T23026] __se_sys_ioctl+0xf5/0x170 [ 1661.382206][T23026] do_syscall_64+0xf3/0x230 [ 1661.386730][T23026] ? clear_bhb_loop+0x35/0x90 [ 1661.391419][T23026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.397332][T23026] RIP: 0033:0x7f13b4185d29 [ 1661.401850][T23026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1661.421471][T23026] RSP: 002b:00007f13b4faf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.429902][T23026] RAX: ffffffffffffffda RBX: 00007f13b4376160 RCX: 00007f13b4185d29 [ 1661.437884][T23026] RDX: 0000000020000180 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 1661.445866][T23026] RBP: 00007f13b4faf090 R08: 0000000000000000 R09: 0000000000000000 [ 1661.453849][T23026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1661.461833][T23026] R13: 0000000000000000 R14: 00007f13b4376160 R15: 00007fff51ad4968 [ 1661.469829][T23026] [ 1662.058452][T17246] usb 9-1: USB disconnect, device number 25 [ 1662.594862][T23041] Can't find a SQUASHFS superblock on nullb0 [ 1662.772732][T23032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1662.822070][T23032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1662.828353][T23032] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1662.863585][T23032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1662.931867][T23035] Process accounting resumed [ 1663.752215][ T9] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1664.101840][ T5835] Bluetooth: hci1: command 0x041b tx timeout [ 1664.126197][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1664.144534][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1664.181894][ T9] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1664.211525][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.253013][ T9] usb 9-1: config 0 descriptor?? [ 1664.366779][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1664.566076][T23058] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1665.156259][ T9] spca561 9-1:0.0: probe with driver spca561 failed with error -22 [ 1665.165492][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1665.169778][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 1665.173149][ T9] usb 9-1: MIDIStreaming interface descriptor not found [ 1665.179245][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 1665.191835][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 1665.426535][T23069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4808'. [ 1665.436990][T23069] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4808'. [ 1665.447148][T23069] SET target dimension over the limit! [ 1665.475758][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.504731][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.358258][T17246] usb 9-1: USB disconnect, device number 26 [ 1667.128389][T23094] sp0: Synchronizing with TNC [ 1667.801438][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4822'. [ 1667.821926][T23111] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4822'. [ 1667.849511][T23111] tc_dump_action: action bad kind [ 1668.686124][T23120] 9pnet_fd: Insufficient options for proto=fd [ 1669.083968][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.317020][T23125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4826'. [ 1669.548382][T23136] Bluetooth: hci4: Frame reassembly failed (-84) [ 1669.586796][T23137] Can't find a SQUASHFS superblock on nullb0 [ 1669.596924][ T58] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1669.905435][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.939599][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1670.050798][ T58] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1670.136328][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.157143][ T58] usb 9-1: config 0 descriptor?? [ 1670.817187][T23144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4833'. [ 1670.826407][T23144] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1670.992838][ T58] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 1671.666597][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 1671.673424][T18061] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1672.288551][T23173] 9pnet_fd: Insufficient options for proto=fd [ 1672.685093][ T58] hid-led 0003:0FC5:B080.0013: probe with driver hid-led failed with error -71 [ 1672.699654][ T58] usb 9-1: USB disconnect, device number 27 [ 1672.822699][T23174] ip6tnl0: entered allmulticast mode [ 1673.564084][T23191] syz.8.4846: attempt to access beyond end of device [ 1673.564084][T23191] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1673.577648][T23191] exFAT-fs (nbd8): unable to read boot sector [ 1673.583827][T23191] exFAT-fs (nbd8): failed to read boot sector [ 1673.589975][T23191] exFAT-fs (nbd8): failed to recognize exfat type [ 1674.012958][T23184] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4845'. [ 1674.022225][T23184] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1674.383170][T23206] 9pnet_fd: Insufficient options for proto=fd [ 1674.591865][ T6383] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1674.661838][T12857] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1674.662070][T23217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1674.777809][ T6383] usb 9-1: Using ep0 maxpacket: 16 [ 1674.797560][ T6383] usb 9-1: config index 0 descriptor too short (expected 42098, got 18) [ 1674.806337][ T6383] usb 9-1: config 191 has too many interfaces: 218, using maximum allowed: 32 [ 1674.817437][T23225] syz.3.4858: attempt to access beyond end of device [ 1674.817437][T23225] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1674.830242][T23225] exFAT-fs (nbd3): unable to read boot sector [ 1674.836376][T23225] exFAT-fs (nbd3): failed to read boot sector [ 1674.842500][T23225] exFAT-fs (nbd3): failed to recognize exfat type [ 1674.853507][T12857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1674.871990][ T6383] usb 9-1: config 191 has an invalid descriptor of length 170, skipping remainder of the config [ 1674.882572][T12857] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1674.901946][ T6383] usb 9-1: config 191 has 0 interfaces, different from the descriptor's value: 218 [ 1674.921791][T12857] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1674.930944][T12857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.955104][ T6383] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1674.964661][ T6383] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.982812][T12857] usb 10-1: config 0 descriptor?? [ 1674.988047][ T6383] usb 9-1: Product: syz [ 1675.013798][T12857] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1675.020115][ T6383] usb 9-1: Manufacturer: syz [ 1675.025070][ T6383] usb 9-1: SerialNumber: syz [ 1675.464667][T23226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.473914][T23226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.552276][T12857] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 1675.561328][T12857] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1675.591646][T12857] usb 10-1: MIDIStreaming interface descriptor not found [ 1676.123398][T17246] usb 10-1: USB disconnect, device number 25 [ 1676.751255][ T5835] Bluetooth: hci4: sending frame failed (-49) [ 1676.753363][T23244] Bluetooth: hci4: Frame reassembly failed (-84) [ 1676.764983][T18061] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1677.440363][ T6383] usb 9-1: USB disconnect, device number 28 [ 1677.501896][T23253] netlink: 'syz.0.4866': attribute type 1 has an invalid length. [ 1677.512207][T23257] netlink: 'syz.0.4866': attribute type 1 has an invalid length. [ 1677.600360][T23253] bond1: entered promiscuous mode [ 1677.613609][T23253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1678.074310][T23264] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4869'. [ 1678.129519][T23262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1678.153123][T23262] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1678.164112][T23262] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1678.180258][T23262] bond1: (slave ip6gre1): making interface the new active one [ 1678.190247][T23262] ip6gre1: entered promiscuous mode [ 1678.206081][T23262] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1678.391509][T23273] 9pnet_fd: Insufficient options for proto=fd [ 1678.414310][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.424435][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.883493][T17246] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 1678.891419][ T6383] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1679.082856][T17246] usb 9-1: Invalid ep0 maxpacket: 64 [ 1679.118240][ T6383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1679.168178][ T6383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1679.303994][T17246] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 1679.311664][ T6383] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1679.322039][ T6383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.332000][ T6383] usb 7-1: config 0 descriptor?? [ 1679.339628][ T6383] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1679.472138][T17246] usb 9-1: Invalid ep0 maxpacket: 64 [ 1679.497901][T17246] usb usb9-port1: attempt power cycle [ 1679.852498][T17246] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 1679.863273][ T6383] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1679.885530][ T6383] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1679.902241][T17246] usb 9-1: Invalid ep0 maxpacket: 64 [ 1679.908507][ T6383] usb 7-1: MIDIStreaming interface descriptor not found [ 1680.038382][T17246] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 1680.083565][T17246] usb 9-1: Invalid ep0 maxpacket: 64 [ 1680.106911][ T6691] usb 7-1: USB disconnect, device number 66 [ 1680.113371][T17246] usb usb9-port1: unable to enumerate USB device [ 1680.180616][T23300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1681.039758][T23314] Can't find a SQUASHFS superblock on nullb0 [ 1682.612123][T23339] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4894'. [ 1682.627899][T23339] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1682.637592][T23339] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1683.674935][T23343] 9pnet_fd: Insufficient options for proto=fd [ 1684.131859][T23353] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1686.734523][T23389] 9pnet_fd: Insufficient options for proto=fd [ 1687.348044][T23413] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4914'. [ 1687.365211][T23413] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1687.374947][T23413] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1688.559793][T23430] 9pnet_fd: Insufficient options for proto=fd [ 1688.823233][ T9] page_pool_release_retry() stalled pool shutdown: id 75, 51 inflight 121 sec [ 1689.649521][T23437] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1689.745475][T23441] fuse: Unknown parameter '' [ 1689.796819][T23441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1691.565194][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4930'. [ 1692.212011][T23467] Can't find a SQUASHFS superblock on nullb0 [ 1692.968734][T23481] 9pnet_fd: Insufficient options for proto=fd [ 1693.775657][T23495] syz.3.4938: attempt to access beyond end of device [ 1693.775657][T23495] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1693.788707][T23495] exFAT-fs (nbd3): unable to read boot sector [ 1693.794982][T23495] exFAT-fs (nbd3): failed to read boot sector [ 1693.801140][T23495] exFAT-fs (nbd3): failed to recognize exfat type [ 1693.947669][T23498] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4937'. [ 1693.964202][T23498] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1693.973913][T23498] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1694.480222][T23502] netlink: 'syz.9.4941': attribute type 1 has an invalid length. [ 1695.148577][T23514] Can't find a SQUASHFS superblock on nullb0 [ 1696.596274][ T6383] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1696.871918][ T6383] usb 7-1: Using ep0 maxpacket: 16 [ 1696.892312][ T6383] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1696.995482][ T6383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.996150][T23535] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1697.030578][ T6383] usb 7-1: Product: syz [ 1697.052184][ T6383] usb 7-1: Manufacturer: syz [ 1697.074290][ T6383] usb 7-1: SerialNumber: syz [ 1697.137529][ T6383] usb 7-1: config 0 descriptor?? [ 1697.165481][ T6383] s2255 7-1:0.0: Could not find bulk-in endpoint [ 1697.184222][ T6383] Sensoray 2255 driver load failed: 0xfffffff4 [ 1697.197512][ T6383] s2255 7-1:0.0: probe with driver s2255 failed with error -12 [ 1697.452202][T17276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.475711][T17276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.514231][T17055] usb 7-1: USB disconnect, device number 67 [ 1698.174827][T23559] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1698.509476][T23572] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4962'. [ 1698.525117][T23572] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1698.534826][T23572] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1699.372560][T23579] Can't find a SQUASHFS superblock on nullb0 [ 1700.652454][T23585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1700.674480][T23585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1700.741279][T23585] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1700.782748][T23585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1701.281940][T23597] 9pnet_fd: Insufficient options for proto=fd [ 1702.375938][T23605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4972'. [ 1702.661920][T18061] Bluetooth: hci1: command 0x041b tx timeout [ 1702.741934][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 1702.748115][T18061] Bluetooth: hci5: command 0x0c1a tx timeout [ 1702.821825][T18061] Bluetooth: hci2: command 0x040f tx timeout [ 1703.282208][T17055] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1703.496728][T17055] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1703.564481][T17055] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 1703.652098][T17055] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1703.692100][T10456] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1703.743210][T17055] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1703.761784][T17055] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.773678][T17055] usb 10-1: Product: syz [ 1703.777957][T17055] usb 10-1: Manufacturer: syz [ 1703.794299][T17055] usb 10-1: SerialNumber: syz [ 1703.804502][T23616] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1703.901775][T10456] usb 7-1: Using ep0 maxpacket: 16 [ 1703.911483][T10456] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1703.927166][T10456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.946107][T10456] usb 7-1: Product: syz [ 1703.950346][T10456] usb 7-1: Manufacturer: syz [ 1703.969522][T10456] usb 7-1: SerialNumber: syz [ 1704.034927][T23632] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1704.096330][T10456] usb 7-1: config 0 descriptor?? [ 1704.248437][T23636] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1704.291209][T10456] s2255 7-1:0.0: Could not find bulk-in endpoint [ 1704.298387][ T3592] Bluetooth: hci4: Frame reassembly failed (-84) [ 1704.318319][T10456] Sensoray 2255 driver load failed: 0xfffffff4 [ 1704.349242][T10456] s2255 7-1:0.0: probe with driver s2255 failed with error -12 [ 1704.591408][T23641] 9pnet_fd: Insufficient options for proto=fd [ 1704.661991][T17276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.673973][T23616] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1704.691391][T17276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.708324][T10456] usb 7-1: USB disconnect, device number 68 [ 1704.935352][T17055] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1704.957834][T17055] cdc_ncm 10-1:1.0: setting rx_max = 16384 [ 1705.153595][T17055] cdc_ncm 10-1:1.0: setting tx_max = 16384 [ 1705.559229][T17055] cdc_ncm 10-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1706.229900][T23665] Can't find a SQUASHFS superblock on nullb0 [ 1706.342243][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 1706.351913][T18061] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1706.636437][T23615] block nbd9: shutting down sockets [ 1706.736126][T17055] usb 10-1: USB disconnect, device number 26 [ 1706.746578][T17055] cdc_ncm 10-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 1706.898833][T23677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1707.348680][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4992'. [ 1709.548343][T23720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4999'. [ 1709.558941][T23720] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4864) [ 1709.568569][T23720] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1710.681913][T10456] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1711.280285][T10456] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.311299][T10456] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.322621][T10456] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1711.340840][T10456] usb 9-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 1711.350323][T10456] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.360447][T10456] usb 9-1: config 0 descriptor?? [ 1711.512204][T17055] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1711.602027][T23732] [ 1711.604367][T23732] ====================================================== [ 1711.611359][T23732] WARNING: possible circular locking dependency detected [ 1711.618362][T23732] 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 Not tainted [ 1711.625463][T23732] ------------------------------------------------------ [ 1711.632470][T23732] syz.6.5003/23732 is trying to acquire lock: [ 1711.638520][T23732] ffff8880345e14e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 1711.647395][T23732] [ 1711.647395][T23732] but task is already holding lock: [ 1711.654745][T23732] ffff888143b97e78 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 1711.664045][T23732] [ 1711.664045][T23732] which lock already depends on the new lock. [ 1711.664045][T23732] [ 1711.674434][T23732] [ 1711.674434][T23732] the existing dependency chain (in reverse order) is: [ 1711.683436][T23732] [ 1711.683436][T23732] -> #6 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1711.691249][T23732] lock_acquire+0x1ed/0x550 [ 1711.696277][T23732] __mutex_lock+0x1ac/0xee0 [ 1711.701297][T23732] blk_mq_init_sched+0x3fa/0x830 [ 1711.706750][T23732] elevator_init_mq+0x20e/0x320 [ 1711.712112][T23732] add_disk_fwnode+0x10d/0xf80 [ 1711.717387][T23732] sd_probe+0xba6/0x1100 [ 1711.722145][T23732] really_probe+0x2b8/0xad0 [ 1711.727161][T23732] __driver_probe_device+0x1a2/0x390 [ 1711.732959][T23732] driver_probe_device+0x50/0x430 [ 1711.738493][T23732] __device_attach_driver+0x2d6/0x530 [ 1711.744375][T23732] bus_for_each_drv+0x24e/0x2e0 [ 1711.749737][T23732] __device_attach_async_helper+0x22d/0x300 [ 1711.756143][T23732] async_run_entry_fn+0xa8/0x420 [ 1711.761611][T23732] process_scheduled_works+0xa66/0x1840 [ 1711.767690][T23732] worker_thread+0x870/0xd30 [ 1711.772814][T23732] kthread+0x2f0/0x390 [ 1711.777399][T23732] ret_from_fork+0x4b/0x80 [ 1711.782329][T23732] ret_from_fork_asm+0x1a/0x30 [ 1711.787617][T23732] [ 1711.787617][T23732] -> #5 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1711.796485][T23732] lock_acquire+0x1ed/0x550 [ 1711.801505][T23732] blk_queue_enter+0xe1/0x600 [ 1711.806698][T23732] blk_mq_alloc_request+0x4fa/0xaa0 [ 1711.812412][T23732] scsi_execute_cmd+0x16c/0x10e0 [ 1711.817859][T23732] read_capacity_16+0x2b4/0x1450 [ 1711.823311][T23732] sd_revalidate_disk+0x1013/0xbce0 [ 1711.829024][T23732] sd_probe+0x9fa/0x1100 [ 1711.833789][T23732] really_probe+0x2b8/0xad0 [ 1711.838804][T23732] __driver_probe_device+0x1a2/0x390 [ 1711.844597][T23732] driver_probe_device+0x50/0x430 [ 1711.850129][T23732] __device_attach_driver+0x2d6/0x530 [ 1711.856012][T23732] bus_for_each_drv+0x24e/0x2e0 [ 1711.861379][T23732] __device_attach_async_helper+0x22d/0x300 [ 1711.867787][T23732] async_run_entry_fn+0xa8/0x420 [ 1711.873239][T23732] process_scheduled_works+0xa66/0x1840 [ 1711.879300][T23732] worker_thread+0x870/0xd30 [ 1711.884398][T23732] kthread+0x2f0/0x390 [ 1711.888976][T23732] ret_from_fork+0x4b/0x80 [ 1711.893903][T23732] ret_from_fork_asm+0x1a/0x30 [ 1711.899185][T23732] [ 1711.899185][T23732] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 1711.906827][T23732] lock_acquire+0x1ed/0x550 [ 1711.911842][T23732] __mutex_lock+0x1ac/0xee0 [ 1711.916861][T23732] nbd_set_size+0x2e0/0x8f0 [ 1711.921878][T23732] nbd_ioctl+0x5dc/0xf40 [ 1711.926631][T23732] blkdev_ioctl+0x57d/0x6a0 [ 1711.931650][T23732] __se_sys_ioctl+0xf5/0x170 [ 1711.936752][T23732] do_syscall_64+0xf3/0x230 [ 1711.941784][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.948195][T23732] [ 1711.948195][T23732] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1711.956804][T23732] lock_acquire+0x1ed/0x550 [ 1711.961819][T23732] blk_mq_submit_bio+0x1536/0x2390 [ 1711.967439][T23732] __submit_bio+0x2c6/0x560 [ 1711.972454][T23732] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1711.978599][T23732] block_read_full_folio+0x9b3/0xae0 [ 1711.984393][T23732] filemap_read_folio+0x148/0x3b0 [ 1711.989924][T23732] filemap_get_pages+0x18ca/0x2080 [ 1711.995562][T23732] filemap_read+0x452/0xf50 [ 1712.000578][T23732] blkdev_read_iter+0x2d8/0x430 [ 1712.005941][T23732] vfs_read+0x991/0xb70 [ 1712.010606][T23732] ksys_read+0x18f/0x2b0 [ 1712.015358][T23732] do_syscall_64+0xf3/0x230 [ 1712.020376][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.026790][T23732] [ 1712.026790][T23732] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1712.035304][T23732] lock_acquire+0x1ed/0x550 [ 1712.040318][T23732] down_read+0xb1/0xa40 [ 1712.044982][T23732] filemap_fault+0xb3e/0x1490 [ 1712.050165][T23732] __do_fault+0x135/0x390 [ 1712.055006][T23732] handle_pte_fault+0xfcf/0x5ed0 [ 1712.060460][T23732] handle_mm_fault+0x1053/0x1ad0 [ 1712.065904][T23732] exc_page_fault+0x459/0x8b0 [ 1712.071093][T23732] asm_exc_page_fault+0x26/0x30 [ 1712.076459][T23732] [ 1712.076459][T23732] -> #1 (&vma->vm_lock->lock){++++}-{4:4}: [ 1712.084457][T23732] lock_acquire+0x1ed/0x550 [ 1712.089478][T23732] down_write+0x99/0x220 [ 1712.094232][T23732] vma_link+0x28c/0x500 [ 1712.098908][T23732] insert_vm_struct+0x2f7/0x410 [ 1712.104276][T23732] alloc_bprm+0x5a6/0xa30 [ 1712.109122][T23732] kernel_execve+0x99/0xa50 [ 1712.114137][T23732] kernel_init+0xed/0x2b0 [ 1712.118982][T23732] ret_from_fork+0x4b/0x80 [ 1712.123910][T23732] ret_from_fork_asm+0x1a/0x30 [ 1712.129190][T23732] [ 1712.129190][T23732] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 1712.136746][T23732] validate_chain+0x18ef/0x5920 [ 1712.142116][T23732] __lock_acquire+0x1397/0x2100 [ 1712.147475][T23732] lock_acquire+0x1ed/0x550 [ 1712.152487][T23732] __might_fault+0xc6/0x120 [ 1712.157502][T23732] _copy_from_user+0x2a/0xc0 [ 1712.162608][T23732] blk_trace_ioctl+0x1ad/0x9a0 [ 1712.167882][T23732] blkdev_ioctl+0x40c/0x6a0 [ 1712.172895][T23732] __se_sys_ioctl+0xf5/0x170 [ 1712.177997][T23732] do_syscall_64+0xf3/0x230 [ 1712.183018][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.189428][T23732] [ 1712.189428][T23732] other info that might help us debug this: [ 1712.189428][T23732] [ 1712.199640][T23732] Chain exists of: [ 1712.199640][T23732] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 1712.199640][T23732] [ 1712.213979][T23732] Possible unsafe locking scenario: [ 1712.213979][T23732] [ 1712.221417][T23732] CPU0 CPU1 [ 1712.226769][T23732] ---- ---- [ 1712.232121][T23732] lock(&q->debugfs_mutex); [ 1712.236700][T23732] lock(&q->q_usage_counter(queue)#50); [ 1712.244855][T23732] lock(&q->debugfs_mutex); [ 1712.251957][T23732] rlock(&mm->mmap_lock); [ 1712.256363][T23732] [ 1712.256363][T23732] *** DEADLOCK *** [ 1712.256363][T23732] [ 1712.264490][T23732] 1 lock held by syz.6.5003/23732: [ 1712.269585][T23732] #0: ffff888143b97e78 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 1712.279328][T23732] [ 1712.279328][T23732] stack backtrace: [ 1712.285202][T23732] CPU: 0 UID: 0 PID: 23732 Comm: syz.6.5003 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1712.295947][T23732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1712.305988][T23732] Call Trace: [ 1712.309258][T23732] [ 1712.312180][T23732] dump_stack_lvl+0x241/0x360 [ 1712.316854][T23732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1712.322043][T23732] ? __pfx__printk+0x10/0x10 [ 1712.326628][T23732] print_circular_bug+0x13a/0x1b0 [ 1712.331648][T23732] check_noncircular+0x36a/0x4a0 [ 1712.336581][T23732] ? __pfx_check_noncircular+0x10/0x10 [ 1712.342038][T23732] ? lockdep_lock+0x123/0x2b0 [ 1712.346710][T23732] validate_chain+0x18ef/0x5920 [ 1712.351560][T23732] ? is_bpf_text_address+0x26/0x2a0 [ 1712.356762][T23732] ? 0xffffffffa0000950 [ 1712.360907][T23732] ? 0xffffffffa0000950 [ 1712.365049][T23732] ? __pfx_validate_chain+0x10/0x10 [ 1712.370239][T23732] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1712.376389][T23732] ? kernel_text_address+0xa7/0xe0 [ 1712.381494][T23732] ? mark_lock+0x9a/0x360 [ 1712.385817][T23732] ? __lock_acquire+0x1397/0x2100 [ 1712.390834][T23732] ? string+0x26a/0x2b0 [ 1712.394991][T23732] ? widen_string+0x3a/0x310 [ 1712.399570][T23732] ? string+0x26a/0x2b0 [ 1712.403718][T23732] ? bdev_name+0x2b1/0x3c0 [ 1712.408132][T23732] ? mark_lock+0x9a/0x360 [ 1712.412455][T23732] __lock_acquire+0x1397/0x2100 [ 1712.417304][T23732] lock_acquire+0x1ed/0x550 [ 1712.421799][T23732] ? __might_fault+0xaa/0x120 [ 1712.426470][T23732] ? __pfx_lock_acquire+0x10/0x10 [ 1712.431485][T23732] ? __pfx___might_resched+0x10/0x10 [ 1712.436766][T23732] ? snprintf+0xda/0x120 [ 1712.440999][T23732] ? __pfx___mutex_lock+0x10/0x10 [ 1712.446021][T23732] ? blk_trace_ioctl+0xec/0x9a0 [ 1712.450863][T23732] ? __pfx_snprintf+0x10/0x10 [ 1712.455531][T23732] ? __might_fault+0xaa/0x120 [ 1712.460199][T23732] __might_fault+0xc6/0x120 [ 1712.464692][T23732] ? __might_fault+0xaa/0x120 [ 1712.469360][T23732] _copy_from_user+0x2a/0xc0 [ 1712.473946][T23732] blk_trace_ioctl+0x1ad/0x9a0 [ 1712.478703][T23732] ? tomoyo_path_number_perm+0x6f9/0x860 [ 1712.484330][T23732] ? tomoyo_path_number_perm+0x206/0x860 [ 1712.489954][T23732] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1712.495228][T23732] ? smack_log+0x123/0x540 [ 1712.499639][T23732] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1712.505610][T23732] ? __pfx_smack_log+0x10/0x10 [ 1712.510366][T23732] ? smk_access+0x4ab/0x4e0 [ 1712.514867][T23732] ? smack_file_ioctl+0x2f7/0x3a0 [ 1712.519890][T23732] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1712.525257][T23732] ? file_to_blk_mode+0xcc/0x140 [ 1712.530185][T23732] blkdev_ioctl+0x40c/0x6a0 [ 1712.534679][T23732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1712.539700][T23732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1712.544727][T23732] __se_sys_ioctl+0xf5/0x170 [ 1712.549320][T23732] do_syscall_64+0xf3/0x230 [ 1712.553821][T23732] ? clear_bhb_loop+0x35/0x90 [ 1712.558490][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.564381][T23732] RIP: 0033:0x7fc1d7185d29 [ 1712.568785][T23732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1712.588382][T23732] RSP: 002b:00007fc1d7eec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.596789][T23732] RAX: ffffffffffffffda RBX: 00007fc1d7376080 RCX: 00007fc1d7185d29 [ 1712.604749][T23732] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000009 [ 1712.612721][T23732] RBP: 00007fc1d7201b08 R08: 0000000000000000 R09: 0000000000000000 [ 1712.620681][T23732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.628648][T23732] R13: 0000000000000000 R14: 00007fc1d7376080 R15: 00007fff043c3e98 [ 1712.636614][T23732] [ 1712.639753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1712.651898][T23738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1712.673545][T23723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.687084][T23723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.698125][T17276] Bluetooth: hci4: Frame reassembly failed (-84) [ 1712.721911][T10456] usbhid 9-1:0.0: can't add hid device: -71 [ 1712.730049][T10456] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1712.747787][T10456] usb 9-1: USB disconnect, device number 33 [ 1712.753962][T17055] usb 10-1: Using ep0 maxpacket: 16 [ 1712.763167][T17055] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1712.790107][T17055] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.816810][T17055] usb 10-1: Product: syz [ 1712.823521][T17055] usb 10-1: Manufacturer: syz [ 1712.828418][T17055] usb 10-1: SerialNumber: syz [ 1712.837153][T17055] usb 10-1: config 0 descriptor?? [ 1712.846312][T17055] s2255 10-1:0.0: Could not find bulk-in endpoint [ 1712.853095][T17055] Sensoray 2255 driver load failed: 0xfffffff4 [ 1712.860426][T17055] s2255 10-1:0.0: probe with driver s2255 failed with error -12 [ 1713.082675][T17276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.112811][T17276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.137283][T10456] usb 10-1: USB disconnect, device number 27 [ 1714.742240][T18061] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1714.742352][ T5835] Bluetooth: hci4: command 0x1003 tx timeout