last executing test programs: 13m37.852411867s ago: executing program 32 (id=294): landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c80"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)) 13m33.613396367s ago: executing program 1 (id=331): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0x77359400}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004242, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) inotify_init1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x2000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1a8, 0xffffff7a, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 13m32.724926066s ago: executing program 1 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x8f7117486690059f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdf, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x18) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x18, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f00000003c0)={0x50000008}) mount$tmpfs(0x0, &(0x7f0000000280)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r8, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r9, r9, r9) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000500)="583c89f9fe", 0x5}, {&(0x7f0000000040)='-', 0x1}, {&(0x7f0000000440)="ccdd69ebe5fc26033a9c435f6e2edaca6cd7956c362d4f", 0x17}, {&(0x7f0000000540)="f870f2c5a7681edcea0d484e69501b364c818e67246549ced03c1b686fc835f38f0d485144faeeeaf38f6146d5af42d08d86032469b3dc87dd26b7ca54079df214cbd6d1b903c1246399c63487a40d67d1ec8ddc9f1472ebb9f6f7301005ebdbaa076f367a254512d794a60bbe011e14308615f9bf9024d6e4b212bf3fcdf07e3e257e558a796db9922c43eada1acf566acb0f5edb9faea1bf37199ced980a402375d9108f5db64f2405ffc7c4fea8262cafed4649ec1a7c0eb0b9dd8360183c55ef3444cb434781775be585c1c73ffd1eb027b92c29faaf4101ef4b37d251520cba50cdc84143ac", 0xe8}, {&(0x7f0000000640)="75f94037becb148298d1acd1a762f13fab183e6e536f5e89253e317865e243a1448e8df69dfb53359da5b6aab203b933da2c63778b03dec41837363e31cb5bee667414f5b2882d78c7a9c2d104051f94ed74439e66a0d1d02820f19a067be15f3100de6bc1e9e6391eebd173fd25f3e2b51a30619a33b429cd80", 0x7a}, {&(0x7f00000006c0)="e460376100893068a183fc45c408d947adfce9dfb367ff85bd0de4ad25c1e148155feb637392fabe5d400d7d48c3ea27cdaddb243c7fa1e6ba863d52ceb00a77b10c0391116f5023080399a67aa5fd", 0x4f}], 0x6) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000380)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480), 0x2082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)=0xc) memfd_secret(0x80000) 13m30.073689969s ago: executing program 1 (id=335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='devlink_hwmsg\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1d, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x8) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file1\x00') bind$unix(r7, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000500)={0x50, 0x0, r10, {0x7, 0x1f, 0xffffffff, 0x2301508, 0x0, 0x401, 0x100, 0x8}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) 13m27.528485594s ago: executing program 1 (id=337): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x644, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x600, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x5d8, 0x7, [@m_mpls={0xb4, 0x1e, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x0, 0x29c3, 0x7f}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xd0, 0x15, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x7c, 0x1f, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x58, 0xe, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x19, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c47"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x84, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x55, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x1f4, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x260d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x165, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x644}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13m25.041287169s ago: executing program 1 (id=340): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x769b, &(0x7f00000000c0)={0x0, 0x8bf4, 0x2, 0x2, 0xec, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x3) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13m24.855739564s ago: executing program 1 (id=342): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x200004}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xe, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x437, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x454e, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x3}}, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x13) socket$netlink(0x10, 0x3, 0x15) 13m9.428533646s ago: executing program 33 (id=342): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x200004}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xe, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x437, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x454e, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x3}}, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x13) socket$netlink(0x10, 0x3, 0x15) 10m47.308400955s ago: executing program 2 (id=733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000065000000000000000002"], 0x58) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000001c0)={0x48, "48bc809b9265d31def191776eaf7412df943f24798782816a50b6db1541566c98e2248423ce91c9669d5c2d4058206a10066ef343fa148c828063570032d89fb7fee3fa0870f555ba6e13f4a115e1b861088f9c5f92a6ece2d85cbac14fed637964e106c26a702d58914e997a1d8495bd681eb55b470ab8577aed82f1ff2e7c1"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="105000000608000014000300677265300000000000000000000000003c001a8038000a800500bcd9b7e0a0cd080009"], 0x70}}, 0x0) 10m47.173364044s ago: executing program 2 (id=734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) creat(&(0x7f0000000080)='./bus\x00', 0x0) 10m46.149314407s ago: executing program 2 (id=737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60000000001f0600fe8000000000000000000000000000bbfe8000000000000000000040000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) 10m45.177269954s ago: executing program 2 (id=738): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="9800000000e2000000950000270405664588fac4ddc1843400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0105303, &(0x7f0000000140)={0x11b}) fdatasync(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000006c0)=ANY=[@ANYBLOB="07000000000000000d000000580f00000000000001000100000000800000000001"]) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) preadv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/229, 0xe5}], 0x1, 0x4, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x94, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0xffffffffffffff50, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r11 = dup(r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x3a300, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r14, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)}]) io_destroy(r14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x20, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000f6ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000000000850000007e63018c2595100e010000000000000000000000182b0000", @ANYRES32=r14, @ANYBLOB="00000000ff7f000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0xd5, &(0x7f0000000500)=""/213, 0x41100, 0x50, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000ac0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x4, 0x401}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r12, r13], &(0x7f0000000600)=[{0x2, 0x2, 0xf, 0x2}, {0x0, 0xffffffff, 0xb, 0x2}], 0x10, 0x7, @void, @value}, 0x94) 10m44.546053491s ago: executing program 2 (id=746): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}], 0x10) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x4, @raw_data="8cf9ec01b6e03ae2acbb567add1ccd9967ce97a3ec11c94ee7e3a7706234211010ed1d6e02b4fcc84ebdbdbab022e7429e137670f9d6a06693bbfa3142ed3209e4cea962dfde4e178d3fdbb70a24ee2ff971a8f41d281c1f361ffdae9669e2fd167694725d0cade6e86af8804e77abb9cab505784e6859a772f8cfc004256f9edfc8794798ea1e80aaa4acc2a4c8bc9050670d63a5338e76a4ee15eb8b02c7cc30b91357a9204625630945acbf0ffad697e6dc423ca9012e98fd8046c82821afe40d594c5584125d"}) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, 'vq\x00', 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 10m44.425032217s ago: executing program 2 (id=748): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000011a, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007110be000000000095"], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_skb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc8a) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x0, 0x800) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) r11 = socket$unix(0x1, 0x5, 0x0) r12 = dup2(r11, r6) close_range(r12, 0xffffffffffffffff, 0x0) dup3(r0, r5, 0x0) 10m29.374629566s ago: executing program 34 (id=748): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000011a, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007110be000000000095"], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_skb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc8a) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x0, 0x800) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) r11 = socket$unix(0x1, 0x5, 0x0) r12 = dup2(r11, r6) close_range(r12, 0xffffffffffffffff, 0x0) dup3(r0, r5, 0x0) 9m23.21432171s ago: executing program 0 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x4, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x0) 9m22.925225661s ago: executing program 0 (id=1007): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, r0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4005}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0xff7c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000001010800000000000000000200000024000180"], 0x54}}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0a7c90f326ff9c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c14ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b6bd2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4846e9fc09ce0afb670f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e73130600d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f4a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d915837d1f2e04596d82f6ea3e41d81c1ffffffff00000000ef2cb5fd9149a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294ce89fcb8ef4fbd874f13f9cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac9783bd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e080000000000000036b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29c5e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e40ae05b10a79f77dc9db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb3502734137ff47257f164391c673996b090e9a8b28cb66dd1c8d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) r7 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r7, 0x0, 0x150) 9m21.829291625s ago: executing program 0 (id=1009): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x50, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x1300}, [{0x9c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x21f5bce0454d93ba}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x24044884) 9m19.592838616s ago: executing program 0 (id=1013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) close_range(r0, r0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xd, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x38}}, 0x0) (fail_nth: 18) 9m18.953464532s ago: executing program 0 (id=1017): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '))\x94\xa7D/v\xee\xa1\xfe\x03\xfe\x163\x83\xf0\xd7\xd8\xb8\xc8\x92\x8d81\xe5\x05\xc9\xfbh\x00\xdb._s\xbbg\xbeb\x85\xf3\xfeU\xdcn\xb4\x9f\xed\xa74\x19\xa0(\xba\xddPC\xd9n\b\xa9f\x1a(0JK\xd8\xb7\x8e[\x1f$C/\x88\xb9g\x80V\x7f4\xafN_/\xed\xf4\rm\x8c*'}, {}, {0x20, 'no&\x80\x85\xfe\x19\x17y\xb2\x82\x81AR\x86lo-\xc5hX\xbbt\b\x86xookie'}, {0x20, 'B-+'}, {0x20, 'hostdata'}, {0x20, '*'}], 0xa, "295ac3bbac56d9227e8d1c5edea5fb8b"}, 0xa7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) 9m18.280349879s ago: executing program 0 (id=1020): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = socket$inet(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x306, @multicast}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @rand_addr=0x64010101}, {0x0, @local}, 0x46, {0x2, 0x4e21, @broadcast}, 'wg2\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x2a) r6 = accept(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb00}], 0x2}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x80}}, 0x4000010) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010030000904000001020d000005240600010524240f01fdffffff000008000006241a0000080905810340000000000904010000020d00000904010200000009050302000200802000000000"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0), 0xeb, 0x0, &(0x7f0000000540)="05bd0e5ea83623bc8d5790a9447024ef1b7794c336d126bdb919b61844fe0a2a6c28d949ddb64df1968ef239420e10772b325542d9d37047fdd4db459d17fdcb8c60e276e1fbdbdea5b1d1f2c9467d627c4572e6e4eb4eded873f29006d1a790b4d00877bf0668beb863da0728033db0ec2b2dbe7155be8fda34983fc494c013701dec1d84898cce2aee4f26020d455704139ae5fee2675bded83e3878141a022b8b2afe95e78ae63dbcb949719ea58ab0cabb4b92d570f0df819e5c3a99256b85ce0b2d6658888bbf04200dfb5d1d03f5de7c26e06188db9b885119beeb410420d3112231bbe60edd0b9a"}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x80) close(r0) 9m3.018707993s ago: executing program 35 (id=1020): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = socket$inet(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x306, @multicast}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @rand_addr=0x64010101}, {0x0, @local}, 0x46, {0x2, 0x4e21, @broadcast}, 'wg2\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x2a) r6 = accept(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb00}], 0x2}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x80}}, 0x4000010) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010030000904000001020d000005240600010524240f01fdffffff000008000006241a0000080905810340000000000904010000020d00000904010200000009050302000200802000000000"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0), 0xeb, 0x0, &(0x7f0000000540)="05bd0e5ea83623bc8d5790a9447024ef1b7794c336d126bdb919b61844fe0a2a6c28d949ddb64df1968ef239420e10772b325542d9d37047fdd4db459d17fdcb8c60e276e1fbdbdea5b1d1f2c9467d627c4572e6e4eb4eded873f29006d1a790b4d00877bf0668beb863da0728033db0ec2b2dbe7155be8fda34983fc494c013701dec1d84898cce2aee4f26020d455704139ae5fee2675bded83e3878141a022b8b2afe95e78ae63dbcb949719ea58ab0cabb4b92d570f0df819e5c3a99256b85ce0b2d6658888bbf04200dfb5d1d03f5de7c26e06188db9b885119beeb410420d3112231bbe60edd0b9a"}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x80) close(r0) 7m41.969326641s ago: executing program 5 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x800}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x1f\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\fq\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8cRv\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}', 0xe) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x2, 0x3}}, 0x20) sendto$l2tp(r6, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) close(r6) fcntl$addseals(r4, 0x409, 0x1a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6, 0x12, r4, 0x0) 7m39.789508101s ago: executing program 5 (id=1289): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket(0xa, 0x2, 0x0) getsockopt$bt_hci(r0, 0x29, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x8010) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000620affffff7f000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88), 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60480) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r4, 0xffffffffffffffff, 0x2c, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xc0000484) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8440, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) 7m37.738304026s ago: executing program 5 (id=1294): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809d", 0xfc0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 7m36.217457915s ago: executing program 5 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000520001000000ed00000000000a000000060003"], 0x1c}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 7m34.82694908s ago: executing program 5 (id=1304): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) chmod(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x28, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "31a54ab5"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0315c6d2c62041edc2b1170938"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "348f027d74"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x41) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) 7m29.906646251s ago: executing program 5 (id=1321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(&(0x7f0000000140), 0x4080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c) 7m14.422578904s ago: executing program 36 (id=1321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(&(0x7f0000000140), 0x4080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c) 6m47.889226959s ago: executing program 4 (id=1418): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x19}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000180)="90885facfd72735d6a05232c53e659c78f4a64568710d09d", 0x18}, {&(0x7f0000000300)="1e0eb4bf65f6e6723f35c228f842010474716d26a3641070847e5ed15a952a5759fc1eec483aaf3b8c9b4693b9962419363318c1d1f2b75f4551c48ed1bad58f2c41", 0x42}, {&(0x7f00000003c0)="863aa402b37131162355d0129f21452956953490e1de4ef7aa012fe0211d89ebc6ff61fc19a5fe75ee579759ac8fe0fdfe5e3956323a5e7b248ddaa8d1598161", 0x40}, {&(0x7f0000000580)="7135d13175fd2e8babf39111e69dcd7c26fccd8eafc249785ea8e3df5039bb9cd00bbc4b3e77bd00b50967dbc419560275d7d1ba9d94f1c772f2fa4f3b292a7f20c5641792f0aa954ad2e49d7c857805941be02150dd484ea5144a5922f8b46cfb70e327b4bca6e8901ed9490bd4e11ccd5b21ab52783609f1effaa0e8770af2e892f772a1941af5531a97132d4bf0a9957dda9d254126a1bddd8f82dcf0a7261b1530bc1acb327dbbfd0771ba49af222d14095ca828d733d283537d96c76435abbeb35b1f49b95545f38f2ce5e6a480757647b8", 0xd4}, {&(0x7f0000000680)="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", 0x244}], 0x5, 0x0, 0x0, 0x24000080}, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x722) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x2, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xdac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3d60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 6m46.49220544s ago: executing program 4 (id=1423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) shmctl$IPC_RMID(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6m41.628666532s ago: executing program 4 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) 6m40.144705696s ago: executing program 4 (id=1443): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m39.198239644s ago: executing program 4 (id=1448): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_clone(0x100, &(0x7f0000000180)="f54c52bf3e4badaaf2eeb0ed1dfed4020b8df2ae0c95f87b3b1cfd78e4545a632b80e84f7ec6d1c4612f7d21a944c6c2f978f1ece3", 0x35, &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000480)="513fc4ec8eb66692d3d2ff13558950ae6b6aa3d490a7fee528ecaf7a49fcbd0e6178619dd3c534ea0b170b0bff245d47f9a8d416a9a8f72f483c7530c11424e82975d503b2784c1e7358d786e212c0034523815ec58de3c594ea865e61262d66884d22deb3d9b22b952e19fe548b2d591d2b62ab244fc5cf924b6316c9cb935730040cad56b7df53ae35a7c5412b70891993e27cc40577a7fdcfde24e3f032d510d4cdf9a721cad71815") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x10}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) fadvise64(r6, 0x0, 0x0, 0x2) io_setup(0x0, &(0x7f00000030c0)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000ca3c0)={{0x0, 0x0, 0x0, 0x4, 0x1}}) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) 6m38.045444087s ago: executing program 4 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 6m22.81751696s ago: executing program 37 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 30.41705572s ago: executing program 7 (id=2762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000020000103000000000000000002140000000000030000000008000b0001000100080001"], 0x2c}}, 0x4010004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) lseek(0xffffffffffffffff, 0x3, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000040)=0x6e, 0x80000) recvmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/129, 0x81}], 0x5, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x110}, 0x0) read$msr(r3, &(0x7f00000007c0)=""/152, 0x98) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80000, @empty}, 0x1c) 29.35481016s ago: executing program 7 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x800}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x1f\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\fq\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8cRv\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}', 0xe) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x2, 0x3}}, 0x20) sendto$l2tp(r7, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) close(r7) fcntl$addseals(r5, 0x409, 0x1a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6, 0x12, r5, 0x0) 26.706136384s ago: executing program 7 (id=2768): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7150000000007000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x2100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000094) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40880) 26.433485309s ago: executing program 3 (id=2770): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6}) 26.308630403s ago: executing program 3 (id=2771): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) chmod(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0x41) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) 23.733903801s ago: executing program 3 (id=2777): r0 = socket(0x10, 0x5, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0xffffffffffffff72, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0}, 0x0) setresuid(0x0, r1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0446010000000000140003007465616d5f736c6176655f300000000008000a00", @ANYRES32=0x0, @ANYBLOB="300016802c00018028000100041334d4"], 0x6c}}, 0x0) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x2010, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x31, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x408}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xae4c}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @jmp={0x5, 0x1, 0x7, 0x3, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000380)='GPL\x00', 0xae46, 0xb9, &(0x7f0000000400)=""/185, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x3, 0xc, 0x2}, {0x0, 0x1, 0x8, 0x4}, {0x0, 0x5, 0xa, 0x3}, {0x1, 0x2, 0x8, 0x5}, {0x3, 0x2, 0x10, 0xc}, {0x7, 0x2, 0x6, 0x6}, {0x5, 0x2, 0x3}, {0x0, 0x5, 0x3, 0x7}], 0x10, 0x2339, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x4}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xb, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x3, 0x9, 0xe, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', r6, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x5, &(0x7f00000008c0)=[r8, 0x1, r3, r9, r10, r11], &(0x7f0000000ac0)=[{0x4, 0x3, 0x3, 0xa}, {0x0, 0x3, 0xd, 0x6}, {0x5, 0x5, 0xa, 0xb}, {0x2, 0x2, 0x4, 0xa}, {0x4, 0x4, 0xe, 0x3}], 0x10, 0x10, @void, @value}, 0x94) 22.588406241s ago: executing program 6 (id=2781): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="940b0000", @ANYRES16=0x0, @ANYBLOB="000009000000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0xbddab0bd691d503f}, 0x20008050) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10084, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000100)={0x40, 0x2, 0x0, "4b9c39f88e56d58deeff080b0de7611ebfeef3cef83f51fdb40f0aeab9e86200"}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r10 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="ccfb71020bfba4489af6aa2f50cbc9aa9c3a8beecb4d4780274886bee7b5179594032d6df466008a4548396ce988e5", 0x2f}], 0x1, &(0x7f0000002000)=[@assoc={0x18, 0x117, 0x4, 0x8c}, @iv={0x90, 0x117, 0x2, 0x7c, "0d5bf4d2c370f9696624a581c24254e7905a673ca48a4889ffd014ff91f1b3b0d28b707973dc2d7477e064138f57d8e543e68f7707c3afe6bf78e172df023e3ed988d8817f9e02b29b06286b7fa90645a355d71be523a2801d4f0ae051d0645470f359c262a78a5b1d80a971893b14c247f80a40b06b692f624ed525"}], 0xa8, 0x800}, {0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)="4dafbd0a37c4199cb6a569a9c522a1bf4ddc0fe1f9bd8699889575ba8acd98533e0a82e3699ddccb6f3f046fff184224473750c55a70e52bf1f2197cd4dea6917dce01f59605c0669d0047723cd68bf8dd5a0d3fa9d287d769287994b4b31cdd2e95ac095c49722a6e9e99d264786fb7226d31c8f918f6920e20499d4c395295b076ef6d9fdd4606423534a4d7902302e9b21b05ff9c44ddb7ec587b9ec4f8ccd31e0c55ebb3905262999af7ea3b85dad52aba4488c20c70664335c89a100a4d94dd912612e6621316802781871876c761b2003c2f872aca654be373d553fe57cf20cd9d56", 0xe5}, {&(0x7f0000000240)="e4ab2f26970990030bbb5d11e91e0a44043c7b49a72106b358f9e9660128fc0083c98c1bb2151fe65caf317eb748446f0d33e65b81a8ef66fed1", 0x3a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="029cc7a5919e4881a683f4ce92152aa94d07d3b135be141f5da3a4b9edfa5a782f2f8a4cde6d54ea490a935ab6a3b283de36036d2612b309d8c999a193ad45d7074881bafce1b6ceb89f947914674f72d8455240c9672e2ab53241fd26af00dd64d580d1a06a30fb1dd61140de06d5db02aeb312f622bc9976d879f604bbc939c65964e92c7ae05b0c85448ebab9ca6c34967bb3a29542af007201e9ba8c3f2e1a7dfea3ef9b4cb437073f9c454fe7d4a2db62e3", 0xb4}, {&(0x7f0000001380)="39cc3e1cae199ec38939e4f602c58014df181b7fc342f89387ad55e00cfa4e43c85ea2c79979b21c6abed8b154e798d2a8be8d7a46146053c9637ce733144d3682d338ca5cfbaa51ba600e9117cb9a8166c7ee113a5df2b837f22ace651555911fd6e10d2d43cd9e2ca3d859edde46c92be0ebbc1a7bcf15c6ee956cbc4654c69bace89e9ce594f48213e310", 0x8c}], 0x6, 0x0, 0x0, 0x24008011}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="aae0af381daa934d7669427ddb55a935cfba81a5bc4801ae5f49b4adfa707a02e1e415b9feba4eaa2c1c89934ce4e4aeb992e57a4104cd31cad6900a212e50f287fd23188396bfa2f1450f53bdb80d988c169390f550a357adfd7b0f6e408d4b10a0", 0x62}, {&(0x7f0000001540)="14b93dce18866b2e197a1d97da488ab42caeba5896c703d11cda98b7e4576f0d0f1ebecf0669bc28cfd9db7ccb883a56b9e5db5cc0a172fe6f7ce6cd40894ebc7d178bd02d7734eb3ea539f69989c56d674a0c961334f0cee7ae2cf4701ab988007245c831857ca680e979e5f52bf1aff8f97ee83eb037b4b0255d69a219198c3279dadd9c255e58b3f671f00b31f5391db92da0ff3e6e5ad2d2038a7ef2d6a12f629c67c9e168004152bb355c156e4c3d0736f230563cd75484d8c01b99eef9a7910c42ba00585f7e4fb1064e0a286d08931743cdaf37d823ec2d2f748fc73010bc6cc643eaf75a", 0xe8}, {&(0x7f00000020c0)="45c8c78b46ae4bf1e4ef6cbe3cff0700e660828b91b7c51d413568dfd3818107c26b103933fee65081cd3e51711394786a87edb1bc1090bfb9c0f5fc38e956da1fba24860af1ec1af905f00700000000001000dad64956a77f4616f875788a30f95e09da4c80668b5a562d845695030c016b69fc505e140d61ab3799103fc22b3adcc4c4570000000000000029e2af456ba437060df3f000de", 0x99}, {&(0x7f0000001700)="2f53118a7e13a2449db6664f0e06b2a53998cfaf1313040307d6cc77a0e5a73fdb5c312691c4fcd2ef934868c00543aa940daf072ce42b14223a5b37771ef3f30cac25529d4219447d62eeb5955479aadea0944ce29133c29706b6c9dfa610f3afbecd0740e6c58e67cc3d834982b8bc191982fc0ef5b176f500e435dafcc25a276c4713fdd0ec9d9a037346c39fcdc31d9ad6f3604c232015dc95a1ae2cb8ae415969261916996667fc49c63841030a8ef072b01e31d86e37830a83715f02d5ce0d7ead09ef756d6db0b0742a619ee996097431e71d22f80d54fe6d9333186f2dea752f72921064788313368906d8fc535e274a5fee4ce8", 0xf8}, {&(0x7f0000001800)="791b0e2e1a761ed30772ecbb8db474327ea93213469aa151810765e1e2cdeb73e4679ad7df1d6e840e554d0a9e8ccd4334c1ac7cbb74cb2b19d5bdb96ceda91c48da05ce752f11b430f1a6c9204014e95430f50631a34361d578fbacbc5e96ee202e703116cf3df8474353813ef38d40d3830c470f321d19", 0x78}, {&(0x7f0000001880)="7043803e6d6de6e5e9829e8219c34ec92b0d8b634c213d11eef3b164439b98d691083689fd1bd8d0e187c375fa54421153722b3d4a9d34c56f865e79328d1247450df52e", 0x44}], 0x6, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000017010000040000000700000000000000d0000000000000001701000002000000b7000000b477a035c2cab8cf6244f1428d6119cbeb08d3246c72a1e2a3ca8cc519eebe74231c4590f3b480f925ebde8c6f1fdd0f4613926c3aef236fbc05be4dd42b669bd003b76f51213589abcee7db6b1a2adcc9c6da48d8fb3d6f964d0c4c8bfb24935fae91f926c6692dbd4256263366f986df7e03fd96a890b42738d611a15081aed9cabad756a66ca7ef12302067aac46fb3d203fc05d8410bb6ee3585b5cedfe91a3f4973c5e5fd26e0156b2e9fed0c5b47578915c004e10000000000600000000002000017010000020000004b000000226c6344aa65d71660d7c9a62d732a8f7e8f4d8a46a779de4e48e79ac43f3004fb9fd6b6e1deb11a0e6a243e9270517bc02758c2dc79e107294444b91f442c897273d8d5add93200"], 0x148, 0x41050}], 0x3, 0x20004804) 21.352388614s ago: executing program 7 (id=2784): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@gettaction={0x2c, 0x30, 0x1, 0x0, 0xfffffffc, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback, 0x6}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f0000001800)={0x2020}, 0x2020) r6 = epoll_create1(0x0) r7 = eventfd2(0xfffffffd, 0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000b80)={0xa0001011}) io_submit(r2, 0x2, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VIDIOC_S_STD(r10, 0x40085618, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) shutdown(0xffffffffffffffff, 0x0) 21.339398012s ago: executing program 6 (id=2785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="58000400", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25010000000800090000000000140008006d61637674617030000000000000000008000b000100000006001c00040000000600020000000000050004000000000006001c0000080000"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f"], &(0x7f0000000100)='GPL\x00', 0x4, 0xec, &(0x7f0000000140)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x18c1400, &(0x7f0000000800)={[{'\x00'}, {'\x00'}, {'\x01+{,#\x83Bg\xdb\x80|\x86\x93,\x99>\xe1p\x9a|\xc8h\xe3\xd2}\xeeKB.\x84\x88J\xed\x1b\xd7\xe3\xfdf\xcf\xf9\x97'}, {}, {'$%/#*){'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x83\xd0\xfd\x9c\x00'}}, {@obj_user={'obj_user', 0x3d, '+:'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_gt={'uid>', r3}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) r6 = eventfd(0x3) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x480000, 0x23) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f00000009c0)=0xe, 0x45e9c7ed0a5e58e3) r9 = eventfd2(0xa56, 0x1) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000e40), 0x82880, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r12 = eventfd(0xffff) r13 = eventfd(0x5) r14 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) readv(r14, &(0x7f0000000880)=[{&(0x7f0000000300)=""/227, 0xe3}, {0x0}], 0x2) io_submit(r5, 0x9, &(0x7f0000001080)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x100, r2, &(0x7f00000005c0)="7195852e7ef7532c4835bbd9471c929dac44474290cac1df3677ac65c8f010155f926b1b930c937ef2a6479f9ca8", 0x2e, 0x7, 0x0, 0x1, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x7, r7, &(0x7f00000008c0)="b4854de20099af74921e91a0205e97c86e099414d74d55fcba8c58beae96808b81fe4cc83d10ffb52e7ec3f88fae96f79bf3dca2bf44c6f0c23366242044c3982cb906c59565331b5f6da6b836f8ee429160b78d74a252d20b04a0c661a8057b140d58c8d579576394fd7a47f5c8d250114d9d7756e3b6fa569c9c47271b69b2d13a8dbe1a2d70cd0a0d72b43d15a5024cf3129531a9387aad3cee2ed9842d844485b8c7a67e3f726e89429cd3a7c4423a23417723ef2241c14c7ebc01a3c64e7d3ed82a", 0xc4, 0x2}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x4, r8, &(0x7f0000000a00)="f97d387f20ab457d7dd3fb678e6e208ca08b810fd7d2ccb3727e7b488583ea82d32af52a602a0a951f2c38e1e07d55531d38a8487a5d76292d4bcf0e45a69a54c2526a4515ecfe82e43b0ce1d6219cacb8988d66d474814344678f0abf8b6849d8cd0e9bdbf33ae4d037d0b22bdd80f65774cfc15746cf4beaf2f397ecf1552ea473ef0ebbaf3cc72defed121049c42cf91a8f0571a888c2b84dd436111d0cbed7e6233bbefd62c0b905f109a6cfb80ce52785019daf36c20a1182178532e1119ac7cd790a1ddc0e44ea4ed9d18e846151b253c6dd6ba86fb479ec416450c70e78c9c4ca83df558d3da6219b90cc33f8cf567a255f", 0xf5, 0x0, 0x0, 0x3, r9}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000b40)="6d33a6f8f43325ee526baf6dd7b4bc20fb3924439c5e00c395f786d3a61088f703c27d7f9ba039d803216559ca315807410a432b4042c5edb99e75c484dc3c347cf8091b1558a18c02f84c5f2c2d7c13987b98a5d94740b4cd4b542f5c1a15f566cb7574f2e3b42e662e5aa16ed1b43feb5d248ae1eeb20809f3e9ddc26c95c8cc85517a8e3dd6b372f1f24690e277345aaffb9752c034435b5eb73289a26311dec88626906f4d075a69fd5ccaf35112a4e095fb9b7648e568174c09f0622493c4d8674a27ce226bf47f45d3d13c381c6a333ff215ae", 0xd6, 0x5, 0x0, 0x2, r2}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000c80)="57ba9c82bac75181e077e78e1e670ff50762c283a50aefc5cb9acc3cc188366b32b7fde00580785910893ff600ba1d27ea3187fa9872fe2193b3afdac28d8b2fd1805ae5797577d5851405aab9af63518e4420859b57a8f0a6fa7351a1984224602cee77c057371232c4b47a85579d93d205f49caab9903e22b19a84b9997d08f0b998a0b65ad0372426690561028b5ec1a28050b237eed80d34145c3a", 0x9d, 0x9, 0x0, 0x3}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000d80)="0be53b75de83a6527a98eae74c12ad9d5c44dbe142dba28192cf9ef8d670244999e46632e303b54ba1674950edd4fa68383df2d7469987ede65e42bc8aa248f6382d7515ee0a0d6260256fc0365a6428f26e2f1e6dd0268c07845f7d0271bc67cd8dbb2f3a893222400fbdc2247f0f98f3060e982959e8aa0c0a8233fbc02e5e173cf5238a92eea37af9b3286e96f594903ac3cb7dcb79d2997e2e16244df36785c687958f0f9a", 0xa7, 0x1, 0x0, 0x1, r10}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x8, 0xf5c9, r11, &(0x7f0000001940)="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", 0x1000, 0x6, 0x0, 0x3, r12}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000f00)="81dc2730db67f31965d0da4506e394637f958aace36bbc14c23c904aaffa574cc76be4e4fbc047e7464376479aafc20c6f34240c3ff4178c251749c8090c3e5d1752c57dc194c2b84d82baa9d090f4bc3bb0523732a93b798d25781261dec96d7687ca093937f8077cc1d3ad346b70eeed3edf545e2a0a13975b28cc18297822eb1a9722cea81b6b45b25ef44d314b4ed0", 0x91, 0x2, 0x0, 0x3, r13}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x6, 0x9, r2, &(0x7f0000001000)="e5a81aeadba0c7180c44d0885472b3792f3945e55640badeca7e307bc2c03a9d8e2acca0461122", 0x27, 0x1, 0x0, 0x0, r14}]) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffc}]}}}]}, 0x3c}}, 0x0) r15 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@remote, @bcast, @default, @netrom, @netrom, @bcast, @null, @netrom]}, &(0x7f0000000340)=0x48, 0x80800) ioctl$SIOCAX25CTLCON(r15, 0x89e8, &(0x7f0000000540)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, 0x9, 0x8, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) 20.195750596s ago: executing program 6 (id=2788): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x2) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$setstatus(r2, 0x4, 0x2800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x34) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x18d101) 20.17916111s ago: executing program 8 (id=2789): r0 = socket$kcm(0xa, 0x3, 0x3a) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) recvmmsg(r0, &(0x7f0000007180)=[{{&(0x7f0000000640)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/118, 0x76}, {&(0x7f00000008c0)=""/138, 0x8a}], 0x5}, 0x180}, {{&(0x7f0000000c00)=@qipcrtr, 0x80, &(0x7f0000001140)=[{&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000c80)=""/232, 0xe8}, {&(0x7f0000000d80)=""/221, 0xdd}, {&(0x7f0000000e80)=""/135, 0x87}, {&(0x7f0000000f40)=""/139, 0x8b}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000001000)=""/157, 0x9d}, {&(0x7f00000010c0)=""/66, 0x42}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x9, &(0x7f0000001200)=""/196, 0xc4}, 0x9}, {{&(0x7f0000001300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000b40)=""/36, 0x24}], 0x1, &(0x7f00000013c0)=""/162, 0xa2}}, {{&(0x7f0000001480)=@caif=@rfm, 0x80, &(0x7f0000001700)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000001500)=""/47, 0x2f}, {&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/81, 0x51}, {&(0x7f0000001680)=""/75, 0x4b}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x6, &(0x7f0000001780)=""/195, 0xc3}}, {{&(0x7f0000001880)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/249, 0xf9}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/94, 0x5e}, {&(0x7f0000001bc0)=""/183, 0xb7}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x6, &(0x7f0000001d00)=""/28, 0x1c}, 0x3}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/241, 0xf1}, {&(0x7f0000001f00)=""/110, 0x6e}, {&(0x7f0000001f80)=""/50, 0x32}, {&(0x7f0000001fc0)=""/171, 0xab}], 0x5, &(0x7f0000002080)=""/56, 0x38}, 0x1}], 0x6, 0x8000, &(0x7f0000007300)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r5, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r5, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r6, 0x0, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020301020000b161d18fdb098033000000000000030000010800054000000009"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) 20.152648337s ago: executing program 7 (id=2790): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffdfffff}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8001, 0x1, 0x0, 0xfffff879, 0x0, 0x1, {0x2}}) io_uring_enter(r1, 0x3b92, 0xbba2, 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x4}, 0x20) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 20.061345521s ago: executing program 9 (id=2791): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0xa, 0x101}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0) 19.994806885s ago: executing program 6 (id=2792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x800}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x1f\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\fq\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8cRv\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}', 0xe) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x2, 0x3}}, 0x20) sendto$l2tp(r7, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) close(r7) fcntl$addseals(r5, 0x409, 0x1a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6, 0x12, r5, 0x0) 19.689237587s ago: executing program 9 (id=2793): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpid() kcmp(r5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) sendfile(r8, r8, 0x0, 0x9) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r6, r9, 0x0, 0x20000023896) r10 = epoll_create(0x207ffd) r11 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) epoll_pwait(r10, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) 18.6133686s ago: executing program 3 (id=2794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00000000e180000008001b00000000000a0002008988cf3ee7ee00005de01a8061ce0935899541aade006269e0412c6c1acb494ef19f23fc2096903d55ce4c8d2002166507fb61c49b1d94"], 0x34}}, 0x0) (fail_nth: 2) 18.162802593s ago: executing program 9 (id=2795): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d8000000200081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (fail_nth: 8) 17.866724274s ago: executing program 8 (id=2796): r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000380)='[(', 0x2}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) mmap$usbfs(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1000008, 0x30, r2, 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000000)=0x80000001) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.734901954s ago: executing program 6 (id=2797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000010005fba0000", @ANYRES32=0x0, @ANYBLOB="00000000e180000008001b00000000000a0002008988cf3ee7ee00005de01a8061ce0935899541aade006269e0412c6c1acb494ef19f23fc2096903d55ce4c8d2002166507fb61c49b1d94204c941d772e40e703e485aeb1aeb41cc7508cc25f7b5133b041130c902cefa4d463d958251ccb8af184efbb6921ed11970c686341bf5c4013b3fac20dbf172c5f3e15dc36175b6dea03206dae17cc3ba353fe7e9d539b72c016257fe10b64bf086449ce1dab07ad4e00154cd0c1c7478385a11b39e9c3ed66f238"], 0x34}}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'ip6tnl0\x00', 0x0}) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) unshare(0x60400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x5) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r7, @ANYRES32=r6, @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/20], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_pidfd_open(r8, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x22, &(0x7f0000000000)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af", 0xa9, 0x4008041, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) process_madvise(r9, 0x0, 0x0, 0x15, 0x0) 17.189437043s ago: executing program 9 (id=2798): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x20007113, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x1100d1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 17.174680912s ago: executing program 8 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40004080) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x6, 0x4) 17.149591865s ago: executing program 3 (id=2800): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@gettaction={0x2c, 0x30, 0x1, 0x0, 0xfffffffc, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback, 0x6}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f0000001800)={0x2020}, 0x2020) r6 = epoll_create1(0x0) r7 = eventfd2(0xfffffffd, 0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000b80)={0xa0001011}) io_submit(r2, 0x2, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VIDIOC_S_STD(r10, 0x40085618, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) shutdown(0xffffffffffffffff, 0x0) 16.785291349s ago: executing program 8 (id=2801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) close_range(r0, r0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xd, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x38}}, 0x0) (fail_nth: 19) 16.026773022s ago: executing program 9 (id=2802): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x88401, 0x0) write$snapshot(r0, &(0x7f00000001c0)="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", 0x1000) 15.966680654s ago: executing program 9 (id=2803): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$SIOCAX25CTLCON(r1, 0x89e9, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, 0x0, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x3a) ioctl$SIOCAX25ADDUID(r2, 0x89e7, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpeername$ax25(r2, 0xfffffffffffffffd, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006110000000000000630c0000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x14, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 15.905372228s ago: executing program 8 (id=2804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x24020804) 15.90372283s ago: executing program 3 (id=2805): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) syz_usbip_server_init(0x5) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000980)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "69a038", 0x10, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, {[], {{0x4e20, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, "fed176", 0x5, "79fbd1"}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r5, 0x301, 0xfffffffc, 0xc00e0000, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 15.86860254s ago: executing program 8 (id=2806): r0 = socket$kcm(0xa, 0x3, 0x3a) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) recvmmsg(r0, &(0x7f0000007180)=[{{&(0x7f0000000640)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/118, 0x76}, {&(0x7f00000008c0)=""/138, 0x8a}], 0x5}, 0x180}, {{&(0x7f0000000c00)=@qipcrtr, 0x80, &(0x7f0000001140)=[{&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000c80)=""/232, 0xe8}, {&(0x7f0000000d80)=""/221, 0xdd}, {&(0x7f0000000e80)=""/135, 0x87}, {&(0x7f0000000f40)=""/139, 0x8b}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000001000)=""/157, 0x9d}, {&(0x7f00000010c0)=""/66, 0x42}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x9, &(0x7f0000001200)=""/196, 0xc4}, 0x9}, {{&(0x7f0000001300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000b40)=""/36, 0x24}], 0x1, &(0x7f00000013c0)=""/162, 0xa2}}, {{&(0x7f0000001480)=@caif=@rfm, 0x80, &(0x7f0000001700)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000001500)=""/47, 0x2f}, {&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/81, 0x51}, {&(0x7f0000001680)=""/75, 0x4b}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x6, &(0x7f0000001780)=""/195, 0xc3}}, {{&(0x7f0000001880)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/249, 0xf9}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/94, 0x5e}, {&(0x7f0000001bc0)=""/183, 0xb7}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x6, &(0x7f0000001d00)=""/28, 0x1c}, 0x3}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/241, 0xf1}, {&(0x7f0000001f00)=""/110, 0x6e}, {&(0x7f0000001f80)=""/50, 0x32}, {&(0x7f0000001fc0)=""/171, 0xab}], 0x5, &(0x7f0000002080)=""/56, 0x38}, 0x1}], 0x6, 0x8000, &(0x7f0000007300)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r5, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r5, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r6, 0x0, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020301020000b161d18fdb098033000000000000030000010800054000000009"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) 15.696426148s ago: executing program 7 (id=2807): mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) socket$inet6(0xa, 0x200000000003, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket(0x10, 0x803, 0x0) sendto$l2tp6(r3, &(0x7f0000000240)="e94a43e0d2a20dabb191f24bfd33e1fb1942556d99701c28cfd783df024d8db5f9f336e52435fd14cccf76c05acd8e3c430df621967c16b87a6848bad5082174d80069370bfebcaaa1b9d55e994531f5caaad6f9dbc82660cd7dcc85220053f2a23cced2ec413333e1c1f5ed5b0b8f6bb6da8a", 0x73, 0x84, &(0x7f0000000040)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x4}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) (fail_nth: 8) 15.004530981s ago: executing program 6 (id=2808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x14, 0x93, 0x5d, 0x10, 0x471, 0x32c, 0xbae9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x58, 0xb2}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%\xea\xfbq', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%\xea\xfbq', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000b80)='fuseblk\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000b80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='fuseblk\x00', &(0x7f0000000080)='fuseblk\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='fuseblk\x00', &(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r2) read(r2, 0x0, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002140000000000000000000008500000075000000a50000002300040095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002140000000000000000000008500000075000000a50000002300040095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) 0s ago: executing program 38 (id=2806): r0 = socket$kcm(0xa, 0x3, 0x3a) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) recvmmsg(r0, &(0x7f0000007180)=[{{&(0x7f0000000640)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/118, 0x76}, {&(0x7f00000008c0)=""/138, 0x8a}], 0x5}, 0x180}, {{&(0x7f0000000c00)=@qipcrtr, 0x80, &(0x7f0000001140)=[{&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000c80)=""/232, 0xe8}, {&(0x7f0000000d80)=""/221, 0xdd}, {&(0x7f0000000e80)=""/135, 0x87}, {&(0x7f0000000f40)=""/139, 0x8b}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000001000)=""/157, 0x9d}, {&(0x7f00000010c0)=""/66, 0x42}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x9, &(0x7f0000001200)=""/196, 0xc4}, 0x9}, {{&(0x7f0000001300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000b40)=""/36, 0x24}], 0x1, &(0x7f00000013c0)=""/162, 0xa2}}, {{&(0x7f0000001480)=@caif=@rfm, 0x80, &(0x7f0000001700)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000001500)=""/47, 0x2f}, {&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/81, 0x51}, {&(0x7f0000001680)=""/75, 0x4b}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x6, &(0x7f0000001780)=""/195, 0xc3}}, {{&(0x7f0000001880)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/249, 0xf9}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/94, 0x5e}, {&(0x7f0000001bc0)=""/183, 0xb7}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x6, &(0x7f0000001d00)=""/28, 0x1c}, 0x3}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/241, 0xf1}, {&(0x7f0000001f00)=""/110, 0x6e}, {&(0x7f0000001f80)=""/50, 0x32}, {&(0x7f0000001fc0)=""/171, 0xab}], 0x5, &(0x7f0000002080)=""/56, 0x38}, 0x1}], 0x6, 0x8000, &(0x7f0000007300)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r5, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r5, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r6, 0x0, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020301020000b161d18fdb098033000000000000030000010800054000000009"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) kernel console output (not intermixed with test programs): ] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 910.952240][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 911.229678][ T9129] usbhid 9-1:0.0: can't add hid device: -71 [ 911.236575][ T9129] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 911.258632][T15022] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2445'. [ 911.268536][T15022] batadv0: entered promiscuous mode [ 911.277147][ T9129] usb 9-1: USB disconnect, device number 33 [ 911.354180][ T5916] usb 10-1: USB disconnect, device number 25 [ 911.384605][ T5916] iowarrior 10-1:0.0: I/O-Warror #0 now disconnected [ 911.992354][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.943745][ T1213] usb 8-1: USB disconnect, device number 58 [ 913.032252][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 914.072241][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 914.764511][T15049] netlink: 'syz.9.2453': attribute type 3 has an invalid length. [ 914.772534][T15049] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.2453'. [ 915.041346][T15064] veth1_to_hsr: entered promiscuous mode [ 915.048073][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2458'. [ 915.062347][T12565] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 915.112232][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 915.128889][ T29] audit: type=1804 audit(1731620590.732:464): pid=15063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.2457" name="/newroot/282/file1" dev="fuse" ino=1 res=1 errno=0 [ 915.131599][T15064] veth1_to_hsr (unregistering): left promiscuous mode [ 915.158758][ T29] audit: type=1800 audit(1731620590.732:465): pid=15063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2457" name="/" dev="fuse" ino=1 res=0 errno=0 [ 915.206690][T15064] hsr_slave_1 (unregistering): left promiscuous mode [ 915.232378][T12565] usb 7-1: Using ep0 maxpacket: 8 [ 915.246244][T12565] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.293127][T12565] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 915.324009][T12565] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 915.343062][ T9129] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 915.377760][T12565] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 915.399801][T12565] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 915.409667][T12565] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.424305][T12565] hub 7-1:1.0: bad descriptor, ignoring hub [ 915.431718][T12565] hub 7-1:1.0: probe with driver hub failed with error -5 [ 915.440087][T12565] cdc_wdm 7-1:1.0: skipping garbage [ 915.446499][T12565] cdc_wdm 7-1:1.0: skipping garbage [ 915.453022][T12565] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 915.459236][T12565] cdc_wdm 7-1:1.0: Unknown control protocol [ 915.502461][ T9129] usb 4-1: Using ep0 maxpacket: 8 [ 915.509709][ T9129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.521334][ T9129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.532073][ T9129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.546079][ T9129] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 915.555336][ T9129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.567233][ T9129] usb 4-1: config 0 descriptor?? [ 915.573752][ T46] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 915.630429][ T5916] usb 7-1: USB disconnect, device number 61 [ 915.682415][ T25] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 915.745300][ T46] usb 9-1: config 0 has an invalid interface number: 250 but max is 0 [ 915.755884][ T46] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.766425][ T46] usb 9-1: config 0 has no interface number 0 [ 915.774356][ T46] usb 9-1: config 0 has an invalid interface number: 250 but max is 0 [ 915.782827][ T46] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.794202][ T46] usb 9-1: config 0 has no interface number 0 [ 915.805757][ T46] usb 9-1: config 0 has an invalid interface number: 250 but max is 0 [ 915.814848][ T46] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.825112][ T46] usb 9-1: config 0 has no interface number 0 [ 915.831432][ T46] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 915.840885][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 915.847328][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.857314][ T25] usb 10-1: config 150 has an invalid interface number: 204 but max is 1 [ 915.866559][ T25] usb 10-1: config 150 has no interface number 0 [ 915.875828][ T46] usb 9-1: config 0 descriptor?? [ 915.881437][ T25] usb 10-1: config 150 interface 204 has no altsetting 0 [ 915.888708][ T25] usb 10-1: config 150 interface 1 has no altsetting 0 [ 915.907306][ T25] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 915.916693][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.925069][ T25] usb 10-1: Product: syz [ 915.929516][ T25] usb 10-1: Manufacturer: syz [ 915.934405][ T25] usb 10-1: SerialNumber: syz [ 916.009205][ T9129] razer 0003:1532:010D.0012: unknown main item tag 0x3 [ 916.018167][ T9129] razer 0003:1532:010D.0012: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 916.045417][ T46] usb 9-1: reset high-speed USB device number 34 using dummy_hcd [ 916.132388][ T5916] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 916.150950][ T25] xr_serial 10-1:150.204: xr_serial converter detected [ 916.152292][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 916.210823][ T1213] usb 4-1: USB disconnect, device number 21 [ 916.282503][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 916.315043][ T5916] usb 7-1: unable to get BOS descriptor or descriptor too short [ 916.325928][ T5916] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 916.333801][ T5916] usb 7-1: can't read configurations, error -71 [ 916.973068][ T46] usb 9-1: device descriptor read/64, error -71 [ 917.192307][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.712626][ T46] usb 9-1: reset high-speed USB device number 34 using dummy_hcd [ 918.122353][ T5916] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 918.232223][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 918.270194][ T46] usb 9-1: USB disconnect, device number 34 [ 918.272402][ T5916] usb 7-1: device descriptor read/64, error -71 [ 919.041007][ T5916] usb usb7-port1: attempt power cycle [ 919.050015][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.059001][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.102105][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.137469][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.150332][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.164377][ T25] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 919.177304][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 919.182722][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.192600][ T25] usb 10-1: USB disconnect, device number 26 [ 919.200913][ T25] xr_serial 10-1:150.204: device disconnected [ 919.240322][ T29] audit: type=1326 audit(1731620594.842:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 919.272220][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 919.273678][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 919.295146][ T29] audit: type=1326 audit(1731620594.842:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 919.353243][ T29] audit: type=1326 audit(1731620594.872:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 919.382338][ T5916] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 919.406143][ T5916] usb 7-1: device descriptor read/8, error -71 [ 919.417155][ T29] audit: type=1326 audit(1731620594.872:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 919.489640][ T29] audit: type=1326 audit(1731620594.872:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 919.527398][ T29] audit: type=1326 audit(1731620594.872:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a6a37e753 code=0x7ffc0000 [ 919.570397][ T29] audit: type=1326 audit(1731620594.872:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a6a37e753 code=0x7ffc0000 [ 919.921818][ T5916] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 920.178413][ T5916] usb 7-1: device descriptor read/8, error -71 [ 920.211617][ T29] audit: type=1326 audit(1731620594.882:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 920.292812][ T5916] usb usb7-port1: unable to enumerate USB device [ 920.312255][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 920.343457][ T29] audit: type=1326 audit(1731620594.902:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 920.423188][ T29] audit: type=1326 audit(1731620594.902:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 920.465297][ T29] audit: type=1326 audit(1731620594.902:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 920.528288][ T29] audit: type=1326 audit(1731620594.902:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 920.560747][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2476'. [ 920.580710][ T29] audit: type=1326 audit(1731620594.902:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 920.625643][ T29] audit: type=1326 audit(1731620594.902:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15110 comm="syz.7.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 921.192892][T11886] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 921.352369][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.392278][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.725908][T11886] usb 4-1: Using ep0 maxpacket: 8 [ 923.390924][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2485'. [ 923.432237][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 923.566931][T11886] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 923.577471][T11886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.d3 [ 923.582485][ T46] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 923.587214][T11886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.603349][T11886] usb 4-1: Product: syz [ 923.607573][T11886] usb 4-1: Manufacturer: syz [ 923.612328][T11886] usb 4-1: SerialNumber: syz [ 923.619092][T11886] usb 4-1: config 0 descriptor?? [ 923.672332][ T25] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 923.884183][T11886] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 924.192772][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 924.206242][ T46] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 924.221822][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.231346][ T46] usb 9-1: Product: syz [ 924.236576][ T46] usb 9-1: Manufacturer: syz [ 924.241340][ T46] usb 9-1: SerialNumber: syz [ 924.248941][ T46] usb 9-1: config 0 descriptor?? [ 924.254203][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 924.266292][ T25] usb 8-1: config 0 has an invalid interface number: 16 but max is 0 [ 924.279373][ T25] usb 8-1: config 0 has no interface number 0 [ 924.297761][ T25] usb 8-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=a3.a3 [ 924.314622][T11886] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 924.315704][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.327133][T11886] usb 4-1: USB disconnect, device number 23 [ 924.341609][ T25] usb 8-1: Product: syz [ 924.346644][ T25] usb 8-1: Manufacturer: syz [ 924.351343][ T25] usb 8-1: SerialNumber: syz [ 924.375549][ T25] usb 8-1: config 0 descriptor?? [ 924.395894][ T25] snd-usb-caiaq 8-1:0.16: can't set alt interface. [ 924.432347][ T25] usb 8-1: unable to init card! (ret=-5) [ 924.438590][ T25] snd-usb-caiaq 8-1:0.16: probe with driver snd-usb-caiaq failed with error -5 [ 924.472245][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 924.496146][ T46] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 924.591108][ T25] usb 8-1: USB disconnect, device number 59 [ 925.512265][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 925.907898][T15198] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2496'. [ 926.213505][ T46] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 926.231037][ T46] usb 9-1: USB disconnect, device number 35 [ 926.552313][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 927.261444][T15215] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2501'. [ 927.305203][T15215] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2501'. [ 927.592219][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 928.632356][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 929.672321][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 930.712284][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 931.752261][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 931.841284][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.096312][T15257] vxcan1: tx address claim with dest, not broadcast [ 932.622292][ T1213] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 932.676395][T15282] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2522'. [ 932.685966][T15282] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 932.773934][ T1213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.785396][ T1213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.795251][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 932.803932][ T1213] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 932.821328][ T1213] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.830509][ T1213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.840901][ T1213] usb 7-1: config 0 descriptor?? [ 932.845970][ T9129] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 932.932420][ T25] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 933.002356][ T9129] usb 10-1: Using ep0 maxpacket: 32 [ 933.012770][ T9129] usb 10-1: too many configurations: 214, using maximum allowed: 8 [ 933.022357][ T9129] usb 10-1: config index 0 descriptor too short (expected 259, got 18) [ 933.030682][ T9129] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 933.045385][ T9129] usb 10-1: can't read configurations, error -22 [ 933.092385][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 933.103505][ T25] usb 9-1: config 150 has an invalid interface number: 204 but max is 1 [ 933.111949][ T25] usb 9-1: config 150 has no interface number 0 [ 933.119633][ T25] usb 9-1: config 150 interface 204 has no altsetting 0 [ 933.127027][ T25] usb 9-1: config 150 interface 1 has no altsetting 0 [ 933.137549][ T25] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 933.147866][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.157504][ T25] usb 9-1: Product: syz [ 933.161786][ T25] usb 9-1: Manufacturer: syz [ 933.166520][ T25] usb 9-1: SerialNumber: syz [ 933.204030][ T9129] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 933.261259][ T1213] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 933.269900][ T1213] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 933.278346][ T1213] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 933.290367][ T1213] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 933.402331][ T9129] usb 10-1: Using ep0 maxpacket: 32 [ 933.408885][ T9129] usb 10-1: too many configurations: 214, using maximum allowed: 8 [ 933.418953][ T9129] usb 10-1: config index 0 descriptor too short (expected 259, got 18) [ 933.427388][ T9129] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 933.442218][ T9129] usb 10-1: can't read configurations, error -22 [ 933.449155][ T9129] usb usb10-port1: attempt power cycle [ 933.545483][ T1213] usb 7-1: USB disconnect, device number 66 [ 933.802661][ T9129] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 933.824456][ T9129] usb 10-1: Using ep0 maxpacket: 32 [ 933.830852][ T9129] usb 10-1: too many configurations: 214, using maximum allowed: 8 [ 933.832244][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 933.840689][ T9129] usb 10-1: config index 0 descriptor too short (expected 259, got 18) [ 933.854618][ T9129] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 933.863357][ T9129] usb 10-1: can't read configurations, error -22 [ 934.002792][ T9129] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 934.035822][ T9129] usb 10-1: Using ep0 maxpacket: 32 [ 934.042103][ T9129] usb 10-1: too many configurations: 214, using maximum allowed: 8 [ 934.062026][ T9129] usb 10-1: config index 0 descriptor too short (expected 259, got 18) [ 934.090031][ T9129] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 934.112706][ T9129] usb 10-1: can't read configurations, error -22 [ 934.121655][ T9129] usb usb10-port1: unable to enumerate USB device [ 934.773460][ T5842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 934.872250][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 935.474807][T12565] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 935.775428][T12565] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 935.912353][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 936.739327][ T25] xr_serial 9-1:150.204: xr_serial converter detected [ 936.752291][ T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 936.758730][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 936.770180][ T25] usb 9-1: USB disconnect, device number 36 [ 936.777396][ T25] xr_serial 9-1:150.204: device disconnected [ 936.952801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 937.056087][T15331] trusted_key: syz.7.2538 sent an empty control message without MSG_MORE. [ 937.107992][T15331] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2538'. [ 937.801604][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 937.862687][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 937.992216][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 938.060155][T15352] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2545'. [ 938.070133][T15352] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 938.272908][ T25] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 938.332464][ T9129] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 938.422579][ T25] usb 8-1: device descriptor read/64, error -71 [ 938.482335][ T9129] usb 10-1: Using ep0 maxpacket: 8 [ 938.494313][ T9129] usb 10-1: config 150 has an invalid interface number: 204 but max is 1 [ 938.513510][ T9129] usb 10-1: config 150 has no interface number 0 [ 938.526238][ T9129] usb 10-1: config 150 interface 204 has no altsetting 0 [ 938.537623][ T9129] usb 10-1: config 150 interface 1 has no altsetting 0 [ 938.558271][ T9129] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 938.568069][ T9129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.576488][ T9129] usb 10-1: Product: syz [ 938.581047][ T9129] usb 10-1: Manufacturer: syz [ 938.585960][ T9129] usb 10-1: SerialNumber: syz [ 938.672246][ T25] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 938.832634][ T25] usb 8-1: device descriptor read/64, error -71 [ 939.032281][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 939.750588][ T5842] Bluetooth: hci4: sending frame failed (-49) [ 939.758917][T10677] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 939.786011][ T35] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 940.051668][ T25] usb usb8-port1: attempt power cycle [ 940.063073][ T1213] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 940.072208][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 940.244202][ T1213] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 940.257654][ T1213] usb 4-1: config 0 has no interface number 0 [ 940.264251][ T1213] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 940.275631][ T1213] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 940.289246][ T1213] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 940.298841][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 940.310724][ T1213] usb 4-1: Product: syz [ 940.315067][ T1213] usb 4-1: SerialNumber: syz [ 940.321688][ T1213] usb 4-1: config 0 descriptor?? [ 940.330163][ T1213] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 940.338058][ T1213] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input29 [ 940.412529][ T25] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 940.453448][ T25] usb 8-1: device descriptor read/8, error -71 [ 940.548081][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 940.558271][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 940.565786][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 940.581755][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 940.589014][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 940.596323][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 940.603570][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 940.610592][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 940.620255][ T9] usb 4-1: USB disconnect, device number 24 [ 940.655096][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 940.702269][ T1213] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 940.712828][ T25] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 940.743212][ T25] usb 8-1: device descriptor read/8, error -71 [ 940.852620][ T1213] usb 7-1: Using ep0 maxpacket: 8 [ 940.852782][ T25] usb usb8-port1: unable to enumerate USB device [ 940.874929][ T1213] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 940.892287][ T1213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.900368][ T1213] usb 7-1: Product: syz [ 940.914252][ T1213] usb 7-1: Manufacturer: syz [ 940.918930][ T1213] usb 7-1: SerialNumber: syz [ 940.926107][ T1213] usb 7-1: config 0 descriptor?? [ 941.112225][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 941.117505][ T9129] xr_serial 10-1:150.204: xr_serial converter detected [ 941.138173][ T9129] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 941.145603][ T9129] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 941.156888][ T9129] usb 10-1: USB disconnect, device number 31 [ 941.165333][ T9129] xr_serial 10-1:150.204: device disconnected [ 941.388467][ T1213] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 942.141235][T15370] openvswitch: netlink: Actions may not be safe on all matching packets [ 942.152252][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.069056][ T1213] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 943.083111][ T1213] usb 7-1: USB disconnect, device number 67 [ 943.192215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.212480][T11886] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 943.362213][T11886] usb 8-1: Using ep0 maxpacket: 8 [ 943.371576][T11886] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 943.382509][T11886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.393727][T11886] usb 8-1: Product: syz [ 943.406736][T11886] usb 8-1: Manufacturer: syz [ 943.425741][T11886] usb 8-1: SerialNumber: syz [ 943.453792][T11886] usb 8-1: config 0 descriptor?? [ 943.471832][T11886] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 943.632359][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 943.670977][T11886] gspca_m5602: Failed to find a sensor [ 943.684098][T11886] ALi m5602 8-1:0.0: ALi m5602 webcam failed [ 943.699929][T11886] usb 8-1: USB disconnect, device number 64 [ 943.792269][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 943.801990][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 943.811341][ T46] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 943.820368][ T46] usb 4-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 943.830665][ T46] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 943.839832][ T46] usb 4-1: config 1 has no interface number 1 [ 943.846151][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 943.864238][ T46] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x5E, changing to 0xE [ 943.878479][ T46] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 148, changing to 7 [ 943.889713][ T46] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 33273, setting to 1024 [ 943.903335][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 943.912909][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.920951][ T46] usb 4-1: Product: syz [ 943.925273][ T46] usb 4-1: Manufacturer: syz [ 943.929913][ T46] usb 4-1: SerialNumber: syz [ 944.153486][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 944.183064][T15406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 944.232215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.248641][T15422] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2564'. [ 944.258796][T15422] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 944.522301][T11886] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 944.566381][ T46] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 944.574970][ T46] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 944.583644][ T46] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 944.591737][ T46] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 944.599810][ T46] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 944.609001][ T46] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 945.272327][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 945.570473][T11886] usb 10-1: Using ep0 maxpacket: 8 [ 945.583632][T11886] usb 10-1: config 150 has an invalid interface number: 204 but max is 1 [ 945.948388][T11886] usb 10-1: config 150 has no interface number 0 [ 945.958368][T11886] usb 10-1: config 150 interface 204 has no altsetting 0 [ 945.966197][T11886] usb 10-1: config 150 interface 1 has no altsetting 0 [ 946.085517][T11886] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 946.099467][T11886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.135164][T11886] usb 10-1: Product: syz [ 946.139500][T11886] usb 10-1: Manufacturer: syz [ 946.175343][T11886] usb 10-1: SerialNumber: syz [ 946.279272][T15438] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2568'. [ 946.312220][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 946.354423][ T46] usb 4-1: USB disconnect, device number 25 [ 947.344596][T15458] FAULT_INJECTION: forcing a failure. [ 947.344596][T15458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.352240][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 947.357975][T15458] CPU: 1 UID: 0 PID: 15458 Comm: syz.6.2572 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 947.375412][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 947.385744][T15458] Call Trace: [ 947.389035][T15458] [ 947.391981][T15458] dump_stack_lvl+0x241/0x360 [ 947.396688][T15458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.401907][T15458] ? __pfx__printk+0x10/0x10 [ 947.406532][T15458] ? __pfx_lock_release+0x10/0x10 [ 947.411594][T15458] should_fail_ex+0x3b0/0x4e0 [ 947.416290][T15458] strncpy_from_user+0x36/0x260 [ 947.421168][T15458] bpf_raw_tp_link_attach+0x21d/0x6e0 [ 947.426607][T15458] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 947.432545][T15458] ? fput+0x1a8/0x230 [ 947.436551][T15458] bpf_raw_tracepoint_open+0x177/0x1f0 [ 947.442126][T15458] __sys_bpf+0x3c0/0x810 [ 947.446407][T15458] ? __pfx___sys_bpf+0x10/0x10 [ 947.451201][T15458] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 947.457209][T15458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 947.463568][T15458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 947.469926][T15458] __x64_sys_bpf+0x7c/0x90 [ 947.474359][T15458] do_syscall_64+0xf3/0x230 [ 947.478911][T15458] ? clear_bhb_loop+0x35/0x90 [ 947.483608][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.489520][T15458] RIP: 0033:0x7ff1c5b7e719 [ 947.493958][T15458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.513750][T15458] RSP: 002b:00007ff1c69ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 947.522196][T15458] RAX: ffffffffffffffda RBX: 00007ff1c5d36130 RCX: 00007ff1c5b7e719 [ 947.530187][T15458] RDX: 0000000000000018 RSI: 0000000020000080 RDI: 0000000000000011 [ 947.538171][T15458] RBP: 00007ff1c69ab090 R08: 0000000000000000 R09: 0000000000000000 [ 947.546154][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.554136][T15458] R13: 0000000000000000 R14: 00007ff1c5d36130 R15: 00007ffdf6681d18 [ 947.562224][T15458] [ 948.206624][T11886] xr_serial 10-1:150.204: xr_serial converter detected [ 948.215290][T11886] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 948.221721][T11886] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 948.232490][T11886] usb 10-1: USB disconnect, device number 32 [ 948.239605][T11886] xr_serial 10-1:150.204: device disconnected [ 948.392239][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.518235][T15476] overlayfs: failed to resolve './file0': -2 [ 948.648515][T15478] 9pnet_fd: Insufficient options for proto=fd [ 949.171990][ T25] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 949.432215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 949.530978][T11886] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 949.622890][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 949.748518][ T25] usb 7-1: config 0 has an invalid descriptor of length 62, skipping remainder of the config [ 949.946935][T15491] futex_wake_op: syz.3.2583 tries to shift op by -1; fix this program [ 950.323280][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 950.348022][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59506, setting to 1024 [ 950.383345][ T25] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 950.406246][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.432353][T11886] usb 10-1: Using ep0 maxpacket: 8 [ 950.444287][T11886] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.456633][T11886] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 950.472320][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 950.530742][T11886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 950.603904][T11886] usb 10-1: SerialNumber: syz [ 950.617808][T11886] usb 10-1: config 0 descriptor?? [ 950.630799][T11886] usb 10-1: Found UVC 0.00 device (05ac:8501) [ 950.632286][ T25] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 950.658801][T11886] usb 10-1: No valid video chain found. [ 950.662515][ T25] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 950.698636][ T25] usb 7-1: Manufacturer: syz [ 950.713123][ T25] usb 7-1: config 0 descriptor?? [ 950.735336][T15498] FAULT_INJECTION: forcing a failure. [ 950.735336][T15498] name failslab, interval 1, probability 0, space 0, times 0 [ 950.775158][T15499] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2587'. [ 950.784651][T15499] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 950.800949][T15498] CPU: 0 UID: 0 PID: 15498 Comm: syz.3.2586 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 950.811884][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 950.821989][T15498] Call Trace: [ 950.825303][T15498] [ 950.828267][T15498] dump_stack_lvl+0x241/0x360 [ 950.832994][T15498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.838255][T15498] ? __pfx__printk+0x10/0x10 [ 950.842901][T15498] ? ref_tracker_alloc+0x332/0x490 [ 950.848049][T15498] should_fail_ex+0x3b0/0x4e0 [ 950.852766][T15498] ? skb_clone+0x20c/0x390 [ 950.857218][T15498] should_failslab+0xac/0x100 [ 950.861949][T15498] ? skb_clone+0x20c/0x390 [ 950.866407][T15498] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 950.871820][T15498] skb_clone+0x20c/0x390 [ 950.876119][T15498] __netlink_deliver_tap+0x3cc/0x7c0 [ 950.881451][T15498] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.886704][T15498] netlink_deliver_tap+0x19d/0x1b0 [ 950.891857][T15498] netlink_unicast+0x7c4/0x990 [ 950.896673][T15498] ? __pfx_netlink_unicast+0x10/0x10 [ 950.901997][T15498] ? __virt_addr_valid+0x183/0x530 [ 950.907154][T15498] ? __check_object_size+0x48e/0x900 [ 950.912465][T15498] netlink_sendmsg+0x8e4/0xcb0 [ 950.917291][T15498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.922687][T15498] ? unwind_get_return_address+0x4d/0x90 [ 950.928389][T15498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.933761][T15498] __sock_sendmsg+0x221/0x270 [ 950.938516][T15498] sock_sendmsg+0x134/0x200 [ 950.943068][T15498] ? __pfx_sock_sendmsg+0x10/0x10 [ 950.948135][T15498] ? stack_depot_save_flags+0x29/0x830 [ 950.953663][T15498] ? copy_splice_read+0xa07/0xb60 [ 950.958778][T15498] ? splice_direct_to_actor+0x4fa/0xc80 [ 950.964371][T15498] ? do_splice_direct+0x289/0x3e0 [ 950.969528][T15498] ? do_sendfile+0x561/0xe10 [ 950.974157][T15498] ? do_syscall_64+0xf3/0x230 [ 950.978872][T15498] ? iov_iter_bvec+0x4e/0x180 [ 950.983682][T15498] splice_to_socket+0xa10/0x10b0 [ 950.988738][T15498] ? __pfx_splice_to_socket+0x10/0x10 [ 950.994213][T15498] ? __pfx_splice_to_socket+0x10/0x10 [ 950.999637][T15498] direct_splice_actor+0x11b/0x220 [ 951.004793][T15498] splice_direct_to_actor+0x586/0xc80 [ 951.010231][T15498] ? __pfx_direct_splice_actor+0x10/0x10 [ 951.015902][T15498] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 951.021854][T15498] ? __fget_files+0x29/0x470 [ 951.026499][T15498] ? __pfx_lock_release+0x10/0x10 [ 951.031572][T15498] do_splice_direct+0x289/0x3e0 [ 951.036493][T15498] ? __pfx_do_splice_direct+0x10/0x10 [ 951.041928][T15498] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 951.047880][T15498] ? bpf_lsm_file_permission+0x9/0x10 [ 951.053310][T15498] ? security_file_permission+0x74/0x280 [ 951.058995][T15498] ? rw_verify_area+0x1c3/0x6f0 [ 951.063898][T15498] do_sendfile+0x561/0xe10 [ 951.068345][T15498] ? __pfx_vfs_write+0x10/0x10 [ 951.073167][T15498] ? __pfx_do_sendfile+0x10/0x10 [ 951.078156][T15498] __se_sys_sendfile64+0x17c/0x1e0 [ 951.083309][T15498] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 951.088972][T15498] ? do_syscall_64+0x100/0x230 [ 951.093814][T15498] ? do_syscall_64+0xb6/0x230 [ 951.098551][T15498] do_syscall_64+0xf3/0x230 [ 951.103106][T15498] ? clear_bhb_loop+0x35/0x90 [ 951.107825][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.113743][T15498] RIP: 0033:0x7f940bf7e719 [ 951.118210][T15498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.137861][T15498] RSP: 002b:00007f940ce24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 951.142774][ T46] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 951.146391][T15498] RAX: ffffffffffffffda RBX: 00007f940c135f80 RCX: 00007f940bf7e719 [ 951.146419][T15498] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 951.146436][T15498] RBP: 00007f940ce24090 R08: 0000000000000000 R09: 0000000000000000 [ 951.178068][T15498] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 951.186199][T15498] R13: 0000000000000000 R14: 00007f940c135f80 R15: 00007ffd260d27a8 [ 951.194339][T15498] [ 951.227269][ T5916] usb 10-1: USB disconnect, device number 33 [ 951.272460][ T25] rc_core: IR keymap rc-hauppauge not found [ 951.278874][ T25] Registered IR keymap rc-empty [ 951.285130][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.303579][ T46] usb 8-1: Using ep0 maxpacket: 8 [ 951.314385][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.322781][ T46] usb 8-1: config 150 has an invalid interface number: 204 but max is 1 [ 951.331597][ T46] usb 8-1: config 150 has no interface number 0 [ 951.338670][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 951.350503][ T46] usb 8-1: config 150 interface 204 has no altsetting 0 [ 951.358974][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input30 [ 951.371372][ T46] usb 8-1: config 150 interface 1 has no altsetting 0 [ 951.381685][ T46] usb 8-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 951.390871][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.399385][ T46] usb 8-1: Product: syz [ 951.403974][ T46] usb 8-1: Manufacturer: syz [ 951.408727][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.415828][ T46] usb 8-1: SerialNumber: syz [ 951.442571][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.478381][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.512357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 951.512564][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.548813][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.572715][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.603036][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.622613][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.653978][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.685166][ T25] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 951.713989][ T25] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 951.723917][ T25] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 951.738508][ T25] usb 7-1: USB disconnect, device number 68 [ 952.552366][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.592218][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.836927][ T46] xr_serial 8-1:150.204: xr_serial converter detected [ 953.846422][ T46] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 953.853037][ T46] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 953.867233][ T46] usb 8-1: USB disconnect, device number 65 [ 953.885268][ T46] xr_serial 8-1:150.204: device disconnected [ 954.405266][T15536] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.412559][T15536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.436396][T15539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2597'. [ 954.451679][T15539] netlink: 'syz.3.2597': attribute type 1 has an invalid length. [ 954.460254][T15539] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2597'. [ 954.472824][ T46] kernel write not supported for file bpf-prog (pid: 46 comm: kworker/1:1) [ 954.632209][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 954.729455][ T25] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 954.749346][ T25] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 954.771215][T15547] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 955.036302][T15545] overlay: filesystem on ./file0 not supported as upperdir [ 955.672288][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 956.712216][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 957.113760][T15576] netlink: 'syz.6.2607': attribute type 12 has an invalid length. [ 957.139410][T15576] netlink: 'syz.6.2607': attribute type 29 has an invalid length. [ 957.147755][T15576] netlink: 'syz.6.2607': attribute type 2 has an invalid length. [ 957.158848][T15576] netlink: 'syz.6.2607': attribute type 2 has an invalid length. [ 957.168652][T15576] netlink: 'syz.6.2607': attribute type 1 has an invalid length. [ 957.176579][T15576] netlink: 'syz.6.2607': attribute type 37 has an invalid length. [ 957.184582][T15576] netlink: 'syz.6.2607': attribute type 2 has an invalid length. [ 957.192509][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.199631][T15576] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2607'. [ 957.752232][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.075057][T15593] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2611'. [ 958.107922][T15593] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 958.298921][ T5916] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 958.308167][ T5916] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 958.382403][ T46] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 958.462256][T11886] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 958.542326][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 958.549199][ T46] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 958.559546][ T46] usb 4-1: config 150 has no interface number 0 [ 958.579056][ T46] usb 4-1: config 150 interface 204 has no altsetting 0 [ 958.596822][ T46] usb 4-1: config 150 interface 1 has no altsetting 0 [ 958.609220][ T46] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 958.612376][T11886] usb 7-1: Using ep0 maxpacket: 16 [ 958.618944][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.641483][T11886] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 958.650264][T11886] usb 7-1: config 0 has no interface number 0 [ 958.652293][ T46] usb 4-1: Product: syz [ 958.660587][ T46] usb 4-1: Manufacturer: syz [ 958.661689][T11886] usb 7-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=db.16 [ 958.676083][ T46] usb 4-1: SerialNumber: syz [ 958.718246][T11886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.738493][T11886] usb 7-1: Product: syz [ 958.748625][T11886] usb 7-1: Manufacturer: syz [ 958.758751][T11886] usb 7-1: SerialNumber: syz [ 958.770994][T11886] usb 7-1: config 0 descriptor?? [ 958.789664][T11886] r8712u: register rtl8712_netdev_ops to netdev_ops [ 958.796435][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.813875][T11886] usb 7-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 959.007073][T11886] usb 7-1: r8712u: Boot from EFUSE: Autoload Failed [ 959.023890][T11886] usb 7-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 959.041724][T11886] usb 7-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 959.067921][T11886] usb 7-1: USB disconnect, device number 69 [ 959.832223][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 960.762355][T11886] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 960.872221][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 961.683730][T11886] usb 7-1: Using ep0 maxpacket: 8 [ 961.712772][T11886] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 961.721207][T11886] usb 7-1: config 150 has no interface number 0 [ 961.764703][T11886] usb 7-1: config 150 interface 204 has no altsetting 0 [ 961.771742][T11886] usb 7-1: config 150 interface 1 has no altsetting 0 [ 961.799041][ T46] xr_serial 4-1:150.204: xr_serial converter detected [ 961.820358][ T46] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 961.821109][T11886] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 961.838749][ T46] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 961.859444][T11886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.863729][ T46] usb 4-1: USB disconnect, device number 26 [ 961.890297][T11886] usb 7-1: Product: syz [ 961.895780][ T46] xr_serial 4-1:150.204: device disconnected [ 961.909138][T11886] usb 7-1: Manufacturer: syz [ 961.913898][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 961.921465][T11886] usb 7-1: SerialNumber: syz [ 962.156377][ T1213] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 962.552834][T11886] xr_serial 7-1:150.204: xr_serial converter detected [ 962.635708][ T1213] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.646115][ T1213] usb 9-1: New USB device found, idVendor=d6ff, idProduct=00cf, bcdDevice=d8.b0 [ 962.672426][ T1213] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.693820][ T1213] usb 9-1: config 0 descriptor?? [ 962.703536][ T1213] usb 9-1: bad CDC descriptors [ 962.952233][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 963.195958][T11886] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 963.212350][T11886] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 963.269716][T11886] usb 7-1: USB disconnect, device number 70 [ 963.321563][T11886] xr_serial 7-1:150.204: device disconnected [ 963.329952][ T46] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 963.348920][ T46] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 963.745346][T11886] usb 9-1: USB disconnect, device number 37 [ 963.992293][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 964.616375][T15650] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2628'. [ 964.830094][T15657] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2632'. [ 964.860938][T15657] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 964.879186][T15656] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2631'. [ 965.032225][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 965.382390][T11886] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 965.424377][T15666] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 965.449032][T15666] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 965.532909][T11886] usb 9-1: Using ep0 maxpacket: 8 [ 965.540919][T11886] usb 9-1: config 150 has an invalid interface number: 204 but max is 1 [ 965.553189][T11886] usb 9-1: config 150 has no interface number 0 [ 965.756353][T11886] usb 9-1: config 150 interface 204 has no altsetting 0 [ 966.072312][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 966.434575][T11886] usb 9-1: config 150 interface 1 has no altsetting 0 [ 966.444705][T11886] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 966.453984][T11886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.461990][T11886] usb 9-1: Product: syz [ 966.473073][T11886] usb 9-1: Manufacturer: syz [ 966.477832][T11886] usb 9-1: SerialNumber: syz [ 966.485736][T15672] veth1_macvtap: left promiscuous mode [ 966.782987][T11886] xr_serial 9-1:150.204: xr_serial converter detected [ 966.829520][T11886] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 966.842456][T11886] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 966.854785][T15682] sit0: entered promiscuous mode [ 966.855152][T11886] usb 9-1: USB disconnect, device number 38 [ 966.867081][T11886] xr_serial 9-1:150.204: device disconnected [ 966.932337][T15682] netlink: 'syz.9.2637': attribute type 1 has an invalid length. [ 966.987792][T15682] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2637'. [ 967.112206][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 967.252930][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2638'. [ 967.523643][T11886] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 967.524138][T15703] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2641'. [ 967.641610][T15705] bridge_slave_0: left allmulticast mode [ 967.670940][T15705] bridge_slave_0: left promiscuous mode [ 967.692532][T15705] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.706077][T11886] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.719402][T11886] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 967.752831][T11886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.881815][T15705] bond0: (slave bond_slave_1): Releasing backup interface [ 968.078760][T15719] netlink: 'syz.8.2644': attribute type 3 has an invalid length. [ 968.086726][T15719] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2644'. [ 968.152311][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 968.943609][T11886] usb 10-1: config 0 descriptor?? [ 968.955921][T11886] pwc: Askey VC010 type 2 USB webcam detected. [ 968.980826][T15705] team0: Port device team_slave_0 removed [ 968.999789][T15705] team0: Port device team_slave_1 removed [ 969.016667][T15705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.024770][T15705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.082524][ T46] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 969.192284][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.332366][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 969.363837][ T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.442866][T11886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 969.467082][ T46] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 969.815698][T11886] pwc: recv_control_msg error -32 req 02 val 2700 [ 969.824883][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.832352][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 969.844822][T11886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 969.850541][T15737] pimreg: entered allmulticast mode [ 969.876890][ T46] usb 7-1: config 0 descriptor?? [ 969.878322][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 969.888833][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 969.900202][T11886] pwc: recv_control_msg error -32 req 04 val 1000 [ 969.910942][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 969.924320][T11886] pwc: recv_control_msg error -32 req 04 val 1300 [ 969.942797][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.951592][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 969.952004][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.000796][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 970.029833][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.065793][ T9] usb 4-1: config 0 descriptor?? [ 970.084411][T15726] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 970.118590][ T9] hub 4-1:0.0: USB hub found [ 970.230484][T11886] pwc: recv_control_msg error -32 req 04 val 1400 [ 970.237337][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 970.298290][T11886] pwc: recv_control_msg error -32 req 02 val 2000 [ 970.312629][T11886] pwc: recv_control_msg error -32 req 02 val 2100 [ 970.326243][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.390011][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.403720][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.554476][ T46] pwc: recv_control_msg error -32 req 02 val 2700 [ 970.571203][ T46] pwc: recv_control_msg error -32 req 02 val 2c00 [ 970.571776][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.887540][T11886] pwc: recv_control_msg error -71 req 04 val 1500 [ 970.898189][T11886] pwc: recv_control_msg error -71 req 02 val 2500 [ 970.906668][T11886] pwc: recv_control_msg error -71 req 02 val 2400 [ 970.923848][T11886] pwc: recv_control_msg error -71 req 02 val 2600 [ 970.933992][ T9] hub 4-1:0.0: 3 ports detected [ 970.944473][T11886] pwc: recv_control_msg error -71 req 02 val 2900 [ 970.970553][T11886] pwc: recv_control_msg error -71 req 02 val 2800 [ 971.019015][ T46] pwc: recv_control_msg error -32 req 04 val 1300 [ 971.024743][T11886] pwc: recv_control_msg error -71 req 04 val 1100 [ 971.057314][T11886] pwc: recv_control_msg error -71 req 04 val 1200 [ 971.087295][T11886] pwc: Registered as video103. [ 971.095103][T11886] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input31 [ 971.119521][T11886] usb 10-1: USB disconnect, device number 34 [ 971.272206][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 971.318560][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 971.328748][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 971.337542][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.364158][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 971.367536][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.375676][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 971.393652][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 971.401476][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 971.405051][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2653'. [ 971.414619][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 971.419409][ T9] hub 4-1:0.0: set hub depth failed [ 971.432696][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 971.441909][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 971.442657][ T9] usb 4-1: USB disconnect, device number 27 [ 971.470503][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 971.505276][ T46] pwc: Registered as video103. [ 971.529284][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 971.580414][T15754] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2654'. [ 971.613346][ T46] usb 7-1: USB disconnect, device number 71 [ 971.687179][T15758] syzkaller1: entered promiscuous mode [ 971.692980][T15758] syzkaller1: entered allmulticast mode [ 971.744389][T15757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.887696][T15760] loop2: detected capacity change from 0 to 7 [ 971.911423][T15760] Dev loop2: unable to read RDB block 7 [ 971.928207][T15760] loop2: unable to read partition table [ 971.960572][T15760] loop2: partition table beyond EOD, truncated [ 971.981374][T15760] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 972.312267][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 973.352269][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 973.852550][T15781] syzkaller1: entered promiscuous mode [ 973.858156][T15781] syzkaller1: entered allmulticast mode [ 974.041120][T15787] FAULT_INJECTION: forcing a failure. [ 974.041120][T15787] name failslab, interval 1, probability 0, space 0, times 0 [ 974.056036][T15787] CPU: 1 UID: 0 PID: 15787 Comm: syz.6.2665 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 974.066870][T15787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 974.076988][T15787] Call Trace: [ 974.080391][T15787] [ 974.083356][T15787] dump_stack_lvl+0x241/0x360 [ 974.088080][T15787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.093306][T15787] ? __pfx__printk+0x10/0x10 [ 974.097920][T15787] ? __kmalloc_noprof+0xb0/0x400 [ 974.102905][T15787] ? __pfx___might_resched+0x10/0x10 [ 974.108258][T15787] should_fail_ex+0x3b0/0x4e0 [ 974.112967][T15787] ? nf_tables_newrule+0x1609/0x2980 [ 974.118270][T15787] should_failslab+0xac/0x100 [ 974.122983][T15787] ? nf_tables_newrule+0x1609/0x2980 [ 974.128284][T15787] __kmalloc_noprof+0xd8/0x400 [ 974.133092][T15787] nf_tables_newrule+0x1609/0x2980 [ 974.138235][T15787] ? __pfx_nf_tables_newrule+0x10/0x10 [ 974.143724][T15787] ? __nla_parse+0x40/0x60 [ 974.148164][T15787] nfnetlink_rcv+0x14dc/0x2ab0 [ 974.152978][T15787] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 974.158147][T15787] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.163364][T15787] ? skb_clone+0x240/0x390 [ 974.167802][T15787] ? __pfx_lock_release+0x10/0x10 [ 974.172886][T15787] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.178106][T15787] netlink_unicast+0x7f6/0x990 [ 974.182890][T15787] ? __pfx_netlink_unicast+0x10/0x10 [ 974.188185][T15787] ? __virt_addr_valid+0x183/0x530 [ 974.193314][T15787] ? __check_object_size+0x48e/0x900 [ 974.198643][T15787] netlink_sendmsg+0x8e4/0xcb0 [ 974.203435][T15787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.208747][T15787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.214050][T15787] __sock_sendmsg+0x221/0x270 [ 974.218770][T15787] ____sys_sendmsg+0x52a/0x7e0 [ 974.223561][T15787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.228883][T15787] __sys_sendmsg+0x292/0x380 [ 974.233493][T15787] ? __pfx___sys_sendmsg+0x10/0x10 [ 974.238636][T15787] ? __pfx_vfs_write+0x10/0x10 [ 974.243451][T15787] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 974.249818][T15787] ? do_syscall_64+0x100/0x230 [ 974.254606][T15787] ? do_syscall_64+0xb6/0x230 [ 974.259302][T15787] do_syscall_64+0xf3/0x230 [ 974.263827][T15787] ? clear_bhb_loop+0x35/0x90 [ 974.268524][T15787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.274436][T15787] RIP: 0033:0x7ff1c5b7e719 [ 974.278890][T15787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.298516][T15787] RSP: 002b:00007ff1c69ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.306952][T15787] RAX: ffffffffffffffda RBX: 00007ff1c5d35f80 RCX: 00007ff1c5b7e719 [ 974.314941][T15787] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 974.322947][T15787] RBP: 00007ff1c69ed090 R08: 0000000000000000 R09: 0000000000000000 [ 974.330930][T15787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.338914][T15787] R13: 0000000000000000 R14: 00007ff1c5d35f80 R15: 00007ffdf6681d18 [ 974.346917][T15787] [ 974.392201][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 974.962606][T15798] tipc: Started in network mode [ 974.977955][T15798] tipc: Node identity 0300000003, cluster identity 4711 [ 975.000924][T15798] tipc: Enabling of bearer rejected, failed to enable media [ 975.026333][T15800] FAULT_INJECTION: forcing a failure. [ 975.026333][T15800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.040796][T15800] CPU: 1 UID: 0 PID: 15800 Comm: syz.9.2671 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 975.051615][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 975.061696][T15800] Call Trace: [ 975.064998][T15800] [ 975.067953][T15800] dump_stack_lvl+0x241/0x360 [ 975.072659][T15800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 975.077877][T15800] ? __pfx__printk+0x10/0x10 [ 975.082507][T15800] should_fail_ex+0x3b0/0x4e0 [ 975.087203][T15800] strncpy_from_user+0x36/0x260 [ 975.092082][T15800] getname_flags+0xf1/0x540 [ 975.096645][T15800] ? do_syscall_64+0x100/0x230 [ 975.101458][T15800] __x64_sys_renameat2+0xad/0xe0 [ 975.106426][T15800] do_syscall_64+0xf3/0x230 [ 975.110947][T15800] ? clear_bhb_loop+0x35/0x90 [ 975.115654][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.121600][T15800] RIP: 0033:0x7f4284b7e719 [ 975.126030][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.145660][T15800] RSP: 002b:00007f42858e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 975.154117][T15800] RAX: ffffffffffffffda RBX: 00007f4284d35f80 RCX: 00007f4284b7e719 [ 975.162109][T15800] RDX: ffffffffffffff9c RSI: 0000000020000480 RDI: ffffffffffffff9c [ 975.170122][T15800] RBP: 00007f42858e4090 R08: 0000000000000000 R09: 0000000000000000 [ 975.178104][T15800] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 975.186086][T15800] R13: 0000000000000000 R14: 00007f4284d35f80 R15: 00007ffc5835f298 [ 975.194107][T15800] [ 975.432200][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 976.021445][T15815] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2676'. [ 976.034470][ T9129] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 976.078252][ T9129] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 976.325984][T15829] FAULT_INJECTION: forcing a failure. [ 976.325984][T15829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.424775][T15829] CPU: 0 UID: 0 PID: 15829 Comm: syz.8.2682 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 976.435629][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 976.445747][T15829] Call Trace: [ 976.449061][T15829] [ 976.452023][T15829] dump_stack_lvl+0x241/0x360 [ 976.456755][T15829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.461998][T15829] ? __pfx__printk+0x10/0x10 [ 976.466636][T15829] ? snprintf+0xda/0x120 [ 976.470970][T15829] should_fail_ex+0x3b0/0x4e0 [ 976.475700][T15829] _copy_to_user+0x31/0xb0 [ 976.480157][T15829] simple_read_from_buffer+0xca/0x150 [ 976.485574][T15829] proc_fail_nth_read+0x1e9/0x250 [ 976.490646][T15829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 976.496240][T15829] ? rw_verify_area+0x55e/0x6f0 [ 976.501135][T15829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 976.506726][T15829] vfs_read+0x1fc/0xb70 [ 976.510944][T15829] ? fdget_pos+0x24e/0x320 [ 976.515413][T15829] ? __pfx_vfs_read+0x10/0x10 [ 976.520135][T15829] ? __fget_files+0x3f3/0x470 [ 976.524951][T15829] ? fdget_pos+0x24e/0x320 [ 976.529422][T15829] ksys_read+0x183/0x2b0 [ 976.533712][T15829] ? __pfx_ksys_read+0x10/0x10 [ 976.538553][T15829] ? do_syscall_64+0x100/0x230 [ 976.543372][T15829] ? do_syscall_64+0xb6/0x230 [ 976.548095][T15829] do_syscall_64+0xf3/0x230 [ 976.552727][T15829] ? clear_bhb_loop+0x35/0x90 [ 976.557453][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.563397][T15829] RIP: 0033:0x7f8f6557d15c [ 976.567861][T15829] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 976.587509][T15829] RSP: 002b:00007f8f663b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 976.595947][T15829] RAX: ffffffffffffffda RBX: 00007f8f65735f80 RCX: 00007f8f6557d15c [ 976.603989][T15829] RDX: 000000000000000f RSI: 00007f8f663b90a0 RDI: 0000000000000003 [ 976.611994][T15829] RBP: 00007f8f663b9090 R08: 0000000000000000 R09: 0000000000000000 [ 976.619991][T15829] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000002 [ 976.628004][T15829] R13: 0000000000000000 R14: 00007f8f65735f80 R15: 00007ffe174c6108 [ 976.636048][T15829] [ 976.639142][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.645824][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 976.773234][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 977.672199][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 977.699085][ T9129] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 977.842362][ T9129] usb 7-1: device descriptor read/64, error -71 [ 977.861949][ T5916] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 977.874682][ T5916] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 978.145060][ T9129] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 978.152693][T15859] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2688'. [ 978.188136][T15859] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 978.353351][ T9129] usb 7-1: device descriptor read/64, error -71 [ 978.463419][ T9129] usb usb7-port1: attempt power cycle [ 978.502991][T15862] program syz.7.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.526583][T15862] ipvlan2: entered promiscuous mode [ 978.712250][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 978.852694][ T9129] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 979.286044][ T9129] usb 7-1: device descriptor read/8, error -71 [ 979.713587][ T9129] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 979.752193][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 979.878908][ T9129] usb 7-1: device descriptor read/8, error -71 [ 980.163140][ T9129] usb usb7-port1: unable to enumerate USB device [ 980.792213][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 980.875066][T11886] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 981.071138][T11886] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 981.395251][ T9129] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 981.832360][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 981.984106][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2708'. [ 982.121835][ T9129] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 982.130789][ T9129] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 982.157003][ T9129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 982.199269][ T9129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 982.232575][ T9129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 982.285663][ T9129] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 982.311223][ T9129] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 982.320106][ T9129] usb 4-1: Product: syz [ 982.330224][ T9129] usb 4-1: Manufacturer: syz [ 982.349353][ T9129] cdc_wdm 4-1:1.0: skipping garbage [ 982.362646][ T9129] cdc_wdm 4-1:1.0: skipping garbage [ 982.372610][ T9129] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 982.386831][ T9129] cdc_wdm 4-1:1.0: Unknown control protocol [ 982.423615][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2712'. [ 982.445913][T15928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.458672][T15928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.471420][T15928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.485442][T15928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.603166][T11886] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 982.755858][ T5916] usb 4-1: USB disconnect, device number 28 [ 982.764018][T11886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.770763][T15937] FAULT_INJECTION: forcing a failure. [ 982.770763][T15937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.777320][T11886] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 982.791779][T15937] CPU: 1 UID: 0 PID: 15937 Comm: syz.9.2714 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 982.801117][T11886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.808545][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 982.808573][T15937] Call Trace: [ 982.808585][T15937] [ 982.808597][T15937] dump_stack_lvl+0x241/0x360 [ 982.808638][T15937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 982.808669][T15937] ? __pfx__printk+0x10/0x10 [ 982.808701][T15937] ? __pfx_lock_release+0x10/0x10 [ 982.827905][T11886] usb 9-1: config 0 descriptor?? [ 982.830036][T15937] should_fail_ex+0x3b0/0x4e0 [ 982.833285][ T9] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 982.837633][T15937] _copy_to_iter+0x4ae/0x1e70 [ 982.837674][T15937] ? __virt_addr_valid+0x183/0x530 [ 982.837714][T15937] ? __pfx__copy_to_iter+0x10/0x10 [ 982.872206][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 982.874407][T15937] ? __virt_addr_valid+0x183/0x530 [ 982.896687][T15937] ? __virt_addr_valid+0x183/0x530 [ 982.901823][T15937] ? __virt_addr_valid+0x45f/0x530 [ 982.906955][T15937] ? __phys_addr_symbol+0x2f/0x70 [ 982.911996][T15937] ? __check_object_size+0x48e/0x900 [ 982.917300][T15937] ? m_stop+0x17e/0x1e0 [ 982.921483][T15937] seq_read_iter+0xb80/0xd70 [ 982.926116][T15937] seq_read+0x3a9/0x4f0 [ 982.930297][T15937] ? __pfx_seq_read+0x10/0x10 [ 982.934992][T15937] ? __mutex_trylock_common+0x183/0x2e0 [ 982.940569][T15937] ? rw_verify_area+0x55e/0x6f0 [ 982.945439][T15937] ? __pfx_seq_read+0x10/0x10 [ 982.950147][T15937] vfs_read+0x1fc/0xb70 [ 982.954336][T15937] ? fdget_pos+0x24e/0x320 [ 982.958779][T15937] ? __pfx_vfs_read+0x10/0x10 [ 982.963488][T15937] ? __fget_files+0x3f3/0x470 [ 982.968201][T15937] ? fdget_pos+0x24e/0x320 [ 982.972646][T15937] ksys_read+0x183/0x2b0 [ 982.976927][T15937] ? __pfx_ksys_read+0x10/0x10 [ 982.981723][T15937] ? do_syscall_64+0x100/0x230 [ 982.986513][T15937] ? do_syscall_64+0xb6/0x230 [ 982.991219][T15937] do_syscall_64+0xf3/0x230 [ 982.995831][T15937] ? clear_bhb_loop+0x35/0x90 [ 983.000526][T15937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.006449][T15937] RIP: 0033:0x7f4284b7e719 [ 983.010878][T15937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.030501][T15937] RSP: 002b:00007f42858e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 983.038946][T15937] RAX: ffffffffffffffda RBX: 00007f4284d35f80 RCX: 00007f4284b7e719 [ 983.046934][T15937] RDX: 0000000000002020 RSI: 0000000020005840 RDI: 0000000000000003 [ 983.054930][T15937] RBP: 00007f42858e4090 R08: 0000000000000000 R09: 0000000000000000 [ 983.062919][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.070933][T15937] R13: 0000000000000000 R14: 00007f4284d35f80 R15: 00007ffc5835f298 [ 983.078949][T15937] [ 983.164579][ T9] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 983.175832][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.195133][ T9] usb 8-1: config 0 descriptor?? [ 983.208536][ T9] cp210x 8-1:0.0: cp210x converter detected [ 983.281451][T15944] rtc_cmos 00:00: Alarms can be up to one day in the future [ 983.294116][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2717'. [ 983.379873][T11886] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 983.398390][T11886] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.001B/input/input33 [ 983.440863][T15947] virtio-fs: tag <(null)> not found [ 983.442956][ T8977] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 983.490866][T11886] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 983.623556][ T8977] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 983.748591][ T8977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.872900][ T9] usb 8-1: cp210x converter now attached to ttyUSB0 [ 983.912209][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 983.913863][ T8977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.014937][ T9] usb 8-1: USB disconnect, device number 66 [ 984.095503][ T8977] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 984.102709][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 984.171414][ T8977] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 984.235883][T12565] rtc_cmos 00:00: Alarms can be up to one day in the future [ 984.236594][ T9] cp210x 8-1:0.0: device disconnected [ 984.260956][ T8977] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 984.288902][T12565] rtc_cmos 00:00: Alarms can be up to one day in the future [ 984.369075][ T8977] usb 10-1: Manufacturer: syz [ 984.375522][T12565] rtc_cmos 00:00: Alarms can be up to one day in the future [ 984.393720][ T8977] usb 10-1: config 0 descriptor?? [ 984.400150][T12565] rtc_cmos 00:00: Alarms can be up to one day in the future [ 984.427162][T12565] rtc rtc0: __rtc_set_alarm: err=-22 [ 984.750966][T15967] loop2: detected capacity change from 0 to 7 [ 984.759882][T15967] Dev loop2: unable to read RDB block 7 [ 984.765890][T15967] loop2: unable to read partition table [ 984.771811][T15967] loop2: partition table beyond EOD, truncated [ 984.778173][T15967] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 984.952284][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 985.240458][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.262705][ T9] usb 7-1: new low-speed USB device number 76 using dummy_hcd [ 985.409653][ T8977] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 985.417839][ T8977] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 985.428299][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.442404][ T8977] appleir 0003:05AC:8243.001C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 985.459395][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.468117][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.477393][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.486018][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.494556][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.503200][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.511741][T15975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.520462][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.544322][ T8977] usb 10-1: USB disconnect, device number 35 [ 985.551382][ T1213] usb 9-1: USB disconnect, device number 39 [ 985.586563][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 985.633994][ T9] usb 7-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 985.634039][ T9] usb 7-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 985.634067][ T9] usb 7-1: config 1 interface 0 altsetting 210 endpoint 0x3 is Bulk; changing to Interrupt [ 985.634094][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 985.649911][ T9] usb 7-1: string descriptor 0 read error: -22 [ 985.650005][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.650035][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.654765][T15973] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 985.654908][T15973] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 985.655035][T15973] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 985.658600][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 985.838085][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2724'. [ 985.992286][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 986.674193][ T1213] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 986.771049][ T1213] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 987.032202][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 987.162476][ T1213] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 987.312397][ T1213] usb 9-1: Using ep0 maxpacket: 8 [ 987.321477][ T1213] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.338519][ T1213] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 987.348819][ T1213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.358203][ T1213] usb 9-1: Product: syz [ 987.362638][ T1213] usb 9-1: Manufacturer: syz [ 987.367350][ T1213] usb 9-1: SerialNumber: syz [ 987.376028][ T1213] cdc_ether 9-1:1.0: skipping garbage [ 987.381600][ T1213] usb 9-1: bad CDC descriptors [ 987.566035][ T1213] usb 7-1: USB disconnect, device number 76 [ 987.581328][T16002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.593836][T16002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.613658][T16002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.627310][T16002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.072193][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 988.208890][ T1213] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 988.223303][ T1213] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 988.424918][ T29] audit: type=1326 audit(1731620664.032:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.459013][ T29] audit: type=1326 audit(1731620664.032:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.523118][ T29] audit: type=1326 audit(1731620664.052:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.546659][ T29] audit: type=1326 audit(1731620664.052:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.577200][ T29] audit: type=1326 audit(1731620664.052:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.604089][ T29] audit: type=1326 audit(1731620664.052:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.626905][ T29] audit: type=1326 audit(1731620664.052:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.650019][ T29] audit: type=1326 audit(1731620664.052:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.672688][ T29] audit: type=1326 audit(1731620664.062:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.697571][ T29] audit: type=1326 audit(1731620664.062:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16041 comm="syz.7.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6a37e719 code=0x7ffc0000 [ 988.853712][ T8977] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 989.025688][ T8977] usb 7-1: config index 0 descriptor too short (expected 68, got 36) [ 989.035546][ T8977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.050963][ T8977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.061456][ T8977] usb 7-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 989.077661][ T8977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.095799][ T8977] usb 7-1: config 0 descriptor?? [ 989.112268][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 989.224977][T16051] program syz.3.2750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 989.853334][ T8977] usbhid 7-1:0.0: can't add hid device: -71 [ 989.882042][ T8977] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 989.889204][T16054] netlink: 'syz.7.2751': attribute type 1 has an invalid length. [ 989.894559][ T8977] usb 7-1: USB disconnect, device number 77 [ 990.010099][ T5916] usb 9-1: USB disconnect, device number 40 [ 990.036789][T16054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.085529][T16053] bond1: (slave bridge1): making interface the new active one [ 990.094631][T16053] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 990.152325][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 991.192198][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 991.204371][T16068] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2754'. [ 991.230484][T16068] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 991.393593][T16079] FAULT_INJECTION: forcing a failure. [ 991.393593][T16079] name failslab, interval 1, probability 0, space 0, times 0 [ 991.406547][T16079] CPU: 0 UID: 0 PID: 16079 Comm: syz.6.2756 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 991.417353][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 991.427450][T16079] Call Trace: [ 991.430762][T16079] [ 991.433721][T16079] dump_stack_lvl+0x241/0x360 [ 991.438448][T16079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.443689][T16079] ? __pfx__printk+0x10/0x10 [ 991.448317][T16079] ? lockdep_hardirqs_on+0x99/0x150 [ 991.453556][T16079] ? __pfx___might_resched+0x10/0x10 [ 991.458885][T16079] ? tomoyo_encode+0x26f/0x540 [ 991.463704][T16079] should_fail_ex+0x3b0/0x4e0 [ 991.468424][T16079] ? tomoyo_encode+0x26f/0x540 [ 991.473235][T16079] should_failslab+0xac/0x100 [ 991.477947][T16079] ? tomoyo_encode+0x26f/0x540 [ 991.482753][T16079] __kmalloc_noprof+0xd8/0x400 [ 991.487566][T16079] tomoyo_encode+0x26f/0x540 [ 991.492241][T16079] tomoyo_realpath_from_path+0x59e/0x5e0 [ 991.497933][T16079] tomoyo_path_number_perm+0x23a/0x880 [ 991.503441][T16079] ? tomoyo_path_number_perm+0x208/0x880 [ 991.509124][T16079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 991.515208][T16079] ? __fget_files+0x29/0x470 [ 991.519874][T16079] ? __fget_files+0x3f3/0x470 [ 991.524629][T16079] security_file_ioctl+0xc6/0x2a0 [ 991.529726][T16079] __se_sys_ioctl+0x47/0x170 [ 991.534371][T16079] do_syscall_64+0xf3/0x230 [ 991.538922][T16079] ? clear_bhb_loop+0x35/0x90 [ 991.543639][T16079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.549581][T16079] RIP: 0033:0x7ff1c5b7e719 [ 991.554028][T16079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.573949][T16079] RSP: 002b:00007ff1c69ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.582494][T16079] RAX: ffffffffffffffda RBX: 00007ff1c5d36130 RCX: 00007ff1c5b7e719 [ 991.590549][T16079] RDX: 0000000020000040 RSI: 00000000c0105500 RDI: 0000000000000005 [ 991.598560][T16079] RBP: 00007ff1c69ab090 R08: 0000000000000000 R09: 0000000000000000 [ 991.606563][T16079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.614560][T16079] R13: 0000000000000000 R14: 00007ff1c5d36130 R15: 00007ffdf6681d18 [ 991.622578][T16079] [ 991.626185][T16079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 991.996748][T12565] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 992.232217][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 992.268138][T16087] x_tables: ip_tables: osf match: only valid for protocol 6 [ 992.478672][ T46] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 992.512295][T12565] usb 4-1: Using ep0 maxpacket: 16 [ 992.521847][T12565] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.532293][T12565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.543344][T12565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.553859][T12565] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 992.563710][T12565] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.578052][T12565] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 992.587196][T12565] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 992.595546][T12565] usb 4-1: Manufacturer: syz [ 992.604107][T12565] usb 4-1: config 0 descriptor?? [ 992.632350][ T46] usb 10-1: Using ep0 maxpacket: 8 [ 992.641520][ T46] usb 10-1: config 150 has an invalid interface number: 204 but max is 1 [ 992.653715][ T46] usb 10-1: config 150 has no interface number 0 [ 992.660175][ T46] usb 10-1: config 150 interface 204 has no altsetting 0 [ 992.670379][ T46] usb 10-1: config 150 interface 1 has no altsetting 0 [ 992.680663][ T46] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 992.690141][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.698448][ T46] usb 10-1: Product: syz [ 992.703036][ T46] usb 10-1: Manufacturer: syz [ 992.708839][ T46] usb 10-1: SerialNumber: syz [ 993.275708][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 993.294339][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.513820][T16095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2755'. [ 993.532739][T16095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2755'. [ 993.749447][T16095] netlink: 'syz.3.2755': attribute type 10 has an invalid length. [ 993.932231][T16095] team0: Device ipvlan1 failed to register rx_handler [ 993.958505][T16105] fuse: Bad value for 'rootmode' [ 994.068106][ T46] xr_serial 10-1:150.204: xr_serial converter detected [ 994.312243][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 994.386595][ T46] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 994.393168][ T46] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 994.542322][ T9129] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 995.352218][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 995.401382][ T46] usb 10-1: USB disconnect, device number 36 [ 995.409796][ T46] xr_serial 10-1:150.204: device disconnected [ 996.222312][T16119] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 996.392201][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 996.612383][ T9129] usb 7-1: Using ep0 maxpacket: 16 [ 996.623891][ T9129] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 996.626731][ T5916] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 996.640765][ T9129] usb 7-1: config 0 has no interface number 0 [ 996.760408][ T9129] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 996.781793][ T9129] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 996.794076][ T9129] usb 7-1: config 0 interface 41 has no altsetting 0 [ 996.802224][ T5916] usb 9-1: Using ep0 maxpacket: 8 [ 996.804537][ T9129] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 996.814962][ T5916] usb 9-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 996.824907][ T9129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.836585][ T9129] usb 7-1: Product: syz [ 996.841424][ T9129] usb 7-1: Manufacturer: syz [ 996.846123][ T9129] usb 7-1: SerialNumber: syz [ 996.852899][ T5916] usb 9-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 996.863866][ T9129] usb 7-1: config 0 descriptor?? [ 996.869664][T16101] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 996.882310][ T5916] usb 9-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 996.896265][T16101] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 996.912737][ T5916] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 996.921996][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.009596][T12565] rc_core: IR keymap rc-hauppauge not found [ 997.019408][T12565] Registered IR keymap rc-empty [ 997.034105][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 997.064140][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 997.086842][ T9129] usb 7-1: can't set config #0, error -71 [ 997.118829][ T9129] usb 7-1: USB disconnect, device number 78 [ 997.125787][T12565] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 997.154479][ T5916] usb 9-1: Product: syz [ 997.159255][ T5916] usb 9-1: Manufacturer: syz [ 997.163992][ T5916] usb 9-1: SerialNumber: syz [ 997.187108][T12565] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 997.212328][ T9] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 997.432197][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 998.030036][ T5916] usb 9-1: can't set config #61, error -71 [ 998.069448][ T5916] usb 9-1: USB disconnect, device number 41 [ 998.191778][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.198696][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.212477][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.243696][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.251078][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.262709][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.291675][ T9] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 998.329167][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.378343][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.422699][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.442668][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.472279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 998.472404][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.623141][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 998.629280][ T9] usb 8-1: config 0 descriptor?? [ 998.683436][T12565] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 999.003774][T12565] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 999.147458][T12565] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 999.177967][T12565] usb 4-1: USB disconnect, device number 29 [ 999.239658][T16146] bridge0: port 3(vlan2) entered blocking state [ 999.493344][T16146] bridge0: port 3(vlan2) entered disabled state [ 999.500474][ T9] hid (null): bogus close delimiter [ 999.512191][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 999.541622][T16146] vlan2: entered allmulticast mode [ 999.547141][T16146] team0: entered allmulticast mode [ 999.564477][T16146] team_slave_0: entered allmulticast mode [ 999.589568][T16146] team_slave_1: entered allmulticast mode [ 999.601753][T16146] vlan2: entered promiscuous mode [ 999.610564][T16146] team0: entered promiscuous mode [ 999.620219][T16146] team_slave_0: entered promiscuous mode [ 999.631536][T16146] team_slave_1: entered promiscuous mode [ 999.643299][T16146] bridge0: port 3(vlan2) entered blocking state [ 999.649789][T16146] bridge0: port 3(vlan2) entered forwarding state [ 999.823129][ T9] usb 8-1: language id specifier not provided by device, defaulting to English [ 999.922597][T11886] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1000.552197][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1000.625792][T16163] xt_l2tp: invalid flags combination: c [ 1000.666182][T16123] netlink: 'syz.7.2768': attribute type 6 has an invalid length. [ 1000.871474][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.001F/input/input36 [ 1000.908339][T11886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.926689][T11886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.946622][T11886] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1000.981453][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.001F/input/input37 [ 1001.013115][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.051077][T11886] usb 4-1: config 0 descriptor?? [ 1001.069446][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.001F/input/input38 [ 1001.185314][T16169] netlink: 'syz.6.2781': attribute type 3 has an invalid length. [ 1001.193266][T16169] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2781'. [ 1001.592298][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1001.989437][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.001F/input/input39 [ 1002.007405][ T9] uclogic 0003:256C:006D.001F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 1002.022729][ T9] usb 8-1: USB disconnect, device number 67 [ 1002.056862][T16171] team_slave_0: entered allmulticast mode [ 1002.184047][T16171] team0: Port device team_slave_0 removed [ 1002.190502][T16171] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1002.632378][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1002.632880][T16188] FAULT_INJECTION: forcing a failure. [ 1002.632880][T16188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.795751][T11886] usbhid 4-1:0.0: can't add hid device: -71 [ 1002.827025][T11886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1002.848536][T16188] CPU: 1 UID: 0 PID: 16188 Comm: syz.8.2787 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1002.851149][T11886] usb 4-1: USB disconnect, device number 30 [ 1002.859360][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1002.859383][T16188] Call Trace: [ 1002.859395][T16188] [ 1002.859406][T16188] dump_stack_lvl+0x241/0x360 [ 1002.859447][T16188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1002.859479][T16188] ? __pfx__printk+0x10/0x10 [ 1002.859511][T16188] ? __pfx_lock_release+0x10/0x10 [ 1002.859545][T16188] ? __lock_acquire+0x1384/0x2050 [ 1002.859585][T16188] should_fail_ex+0x3b0/0x4e0 [ 1002.859617][T16188] _copy_from_user+0x2f/0xc0 [ 1002.859643][T16188] kstrtouint_from_user+0xc6/0x190 [ 1002.859677][T16188] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1002.859717][T16188] ? __pfx_lock_acquire+0x10/0x10 [ 1002.931862][T16188] proc_fail_nth_write+0xaa/0x2d0 [ 1002.936954][T16188] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1002.942915][T16188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1002.948624][T16188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1002.954275][T16188] vfs_write+0x2a3/0xd30 [ 1002.958531][T16188] ? fdget_pos+0x24e/0x320 [ 1002.962959][T16188] ? __pfx_vfs_write+0x10/0x10 [ 1002.967735][T16188] ? __fget_files+0x3f3/0x470 [ 1002.972441][T16188] ? fdget_pos+0x24e/0x320 [ 1002.976879][T16188] ksys_write+0x183/0x2b0 [ 1002.981219][T16188] ? __pfx_ksys_write+0x10/0x10 [ 1002.986112][T16188] ? do_syscall_64+0x100/0x230 [ 1002.990890][T16188] ? do_syscall_64+0xb6/0x230 [ 1002.995577][T16188] do_syscall_64+0xf3/0x230 [ 1003.000090][T16188] ? clear_bhb_loop+0x35/0x90 [ 1003.004783][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.010722][T16188] RIP: 0033:0x7f8f6557d1ff [ 1003.015178][T16188] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1003.034819][T16188] RSP: 002b:00007f8f66398030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1003.043261][T16188] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f6557d1ff [ 1003.051236][T16188] RDX: 0000000000000001 RSI: 00007f8f663980a0 RDI: 0000000000000005 [ 1003.059208][T16188] RBP: 00007f8f66398090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.067203][T16188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1003.075177][T16188] R13: 0000000000000000 R14: 00007f8f65736058 R15: 00007ffe174c6108 [ 1003.083165][T16188] [ 1003.607999][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2789'. [ 1003.672191][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1004.712295][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1005.350274][T16218] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2795'. [ 1005.387852][T16219] FAULT_INJECTION: forcing a failure. [ 1005.387852][T16219] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.438405][T16218] FAULT_INJECTION: forcing a failure. [ 1005.438405][T16218] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.483344][T16219] CPU: 1 UID: 0 PID: 16219 Comm: syz.3.2794 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1005.494205][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1005.504401][T16219] Call Trace: [ 1005.507717][T16219] [ 1005.510683][T16219] dump_stack_lvl+0x241/0x360 [ 1005.515412][T16219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.520674][T16219] ? __pfx__printk+0x10/0x10 [ 1005.525405][T16219] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1005.531420][T16219] ? __pfx___might_resched+0x10/0x10 [ 1005.536737][T16219] should_fail_ex+0x3b0/0x4e0 [ 1005.541441][T16219] should_failslab+0xac/0x100 [ 1005.546145][T16219] ? __alloc_skb+0x1c3/0x440 [ 1005.550788][T16219] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1005.556640][T16219] __alloc_skb+0x1c3/0x440 [ 1005.561115][T16219] ? __pfx___alloc_skb+0x10/0x10 [ 1005.566122][T16219] ? netlink_autobind+0xd6/0x2f0 [ 1005.571116][T16219] ? netlink_autobind+0x2b0/0x2f0 [ 1005.576269][T16219] netlink_sendmsg+0x638/0xcb0 [ 1005.581108][T16219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.586493][T16219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.591823][T16219] __sock_sendmsg+0x221/0x270 [ 1005.596551][T16219] ____sys_sendmsg+0x52a/0x7e0 [ 1005.601383][T16219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.606726][T16219] __sys_sendmsg+0x292/0x380 [ 1005.611381][T16219] ? __pfx___sys_sendmsg+0x10/0x10 [ 1005.616573][T16219] ? __pfx_vfs_write+0x10/0x10 [ 1005.621435][T16219] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1005.627855][T16219] ? do_syscall_64+0x100/0x230 [ 1005.632854][T16219] ? do_syscall_64+0xb6/0x230 [ 1005.637659][T16219] do_syscall_64+0xf3/0x230 [ 1005.642201][T16219] ? clear_bhb_loop+0x35/0x90 [ 1005.646929][T16219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.652856][T16219] RIP: 0033:0x7f940bf7e719 [ 1005.657302][T16219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.676957][T16219] RSP: 002b:00007f940ce24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.685432][T16219] RAX: ffffffffffffffda RBX: 00007f940c135f80 RCX: 00007f940bf7e719 [ 1005.693451][T16219] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1005.701463][T16219] RBP: 00007f940ce24090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.709474][T16219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.717481][T16219] R13: 0000000000000000 R14: 00007f940c135f80 R15: 00007ffd260d27a8 [ 1005.725517][T16219] [ 1005.729554][T16218] CPU: 0 UID: 0 PID: 16218 Comm: syz.9.2795 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1005.740388][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1005.750501][T16218] Call Trace: [ 1005.753847][T16218] [ 1005.756799][T16218] dump_stack_lvl+0x241/0x360 [ 1005.761505][T16218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.766722][T16218] ? __pfx__printk+0x10/0x10 [ 1005.771340][T16218] ? ref_tracker_alloc+0x332/0x490 [ 1005.776481][T16218] should_fail_ex+0x3b0/0x4e0 [ 1005.781177][T16218] ? skb_clone+0x20c/0x390 [ 1005.785629][T16218] should_failslab+0xac/0x100 [ 1005.790319][T16218] ? skb_clone+0x20c/0x390 [ 1005.794757][T16218] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1005.800146][T16218] skb_clone+0x20c/0x390 [ 1005.804414][T16218] __netlink_deliver_tap+0x3cc/0x7c0 [ 1005.809727][T16218] ? netlink_deliver_tap+0x2e/0x1b0 [ 1005.814958][T16218] netlink_deliver_tap+0x19d/0x1b0 [ 1005.820100][T16218] netlink_sendskb+0x68/0x140 [ 1005.824793][T16218] netlink_unicast+0x39d/0x990 [ 1005.829576][T16218] ? __asan_memcpy+0x40/0x70 [ 1005.834191][T16218] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.839497][T16218] netlink_rcv_skb+0x262/0x430 [ 1005.844300][T16218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1005.849885][T16218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.855223][T16218] ? netlink_deliver_tap+0x2e/0x1b0 [ 1005.860446][T16218] netlink_unicast+0x7f6/0x990 [ 1005.865235][T16218] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.870542][T16218] ? __virt_addr_valid+0x183/0x530 [ 1005.875703][T16218] ? __check_object_size+0x48e/0x900 [ 1005.881021][T16218] netlink_sendmsg+0x8e4/0xcb0 [ 1005.885817][T16218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.891140][T16218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.896443][T16218] __sock_sendmsg+0x221/0x270 [ 1005.901143][T16218] ____sys_sendmsg+0x52a/0x7e0 [ 1005.905935][T16218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.911285][T16218] __sys_sendmsg+0x292/0x380 [ 1005.916008][T16218] ? __pfx___sys_sendmsg+0x10/0x10 [ 1005.921165][T16218] ? __pfx_vfs_write+0x10/0x10 [ 1005.926003][T16218] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1005.932373][T16218] ? do_syscall_64+0x100/0x230 [ 1005.937171][T16218] ? do_syscall_64+0xb6/0x230 [ 1005.941873][T16218] do_syscall_64+0xf3/0x230 [ 1005.946396][T16218] ? clear_bhb_loop+0x35/0x90 [ 1005.951093][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.957008][T16218] RIP: 0033:0x7f4284b7e719 [ 1005.961436][T16218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.981057][T16218] RSP: 002b:00007f42858e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.989496][T16218] RAX: ffffffffffffffda RBX: 00007f4284d35f80 RCX: 00007f4284b7e719 [ 1005.997487][T16218] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1006.005468][T16218] RBP: 00007f42858e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.013451][T16218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.021431][T16218] R13: 0000000000000000 R14: 00007f4284d35f80 R15: 00007ffc5835f298 [ 1006.029444][T16218] [ 1006.032862][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1006.248247][T16232] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2799'. [ 1006.265344][T16232] loop2: detected capacity change from 0 to 7 [ 1006.272562][T16232] Dev loop2: unable to read RDB block 7 [ 1006.278205][T16232] loop2: unable to read partition table [ 1006.311250][T16232] loop2: partition table beyond EOD, truncated [ 1006.356211][T16232] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1006.522205][ T9] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1006.673476][ T9] usb 7-1: config 0 has no interfaces? [ 1006.679025][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1006.702346][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.714534][ T9] usb 7-1: config 0 descriptor?? [ 1007.112187][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1007.243007][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.276804][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.320158][T16245] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1007.608374][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2806'. [ 1007.762217][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1007.890714][T16261] FAULT_INJECTION: forcing a failure. [ 1007.890714][T16261] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.903446][T16261] CPU: 1 UID: 0 PID: 16261 Comm: syz.7.2807 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1007.914236][T16261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1007.924320][T16261] Call Trace: [ 1007.927705][T16261] [ 1007.930653][T16261] dump_stack_lvl+0x241/0x360 [ 1007.935369][T16261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.940690][T16261] ? __pfx__printk+0x10/0x10 [ 1007.945327][T16261] ? ref_tracker_alloc+0x332/0x490 [ 1007.950461][T16261] should_fail_ex+0x3b0/0x4e0 [ 1007.955163][T16261] ? skb_clone+0x20c/0x390 [ 1007.959624][T16261] should_failslab+0xac/0x100 [ 1007.964337][T16261] ? skb_clone+0x20c/0x390 [ 1007.968775][T16261] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1007.974197][T16261] skb_clone+0x20c/0x390 [ 1007.978493][T16261] __netlink_deliver_tap+0x3cc/0x7c0 [ 1007.983820][T16261] ? netlink_deliver_tap+0x2e/0x1b0 [ 1007.989054][T16261] netlink_deliver_tap+0x19d/0x1b0 [ 1007.994200][T16261] __netlink_sendskb+0x60/0xd0 [ 1007.998983][T16261] netlink_dump+0x97d/0xd80 [ 1008.003510][T16261] ? __pfx_netlink_dump+0x10/0x10 [ 1008.008559][T16261] ? __pfx_lock_acquire+0x10/0x10 [ 1008.013614][T16261] __netlink_dump_start+0x5a2/0x790 [ 1008.018860][T16261] ? __pfx_tc_dump_action+0x10/0x10 [ 1008.024092][T16261] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 1008.029067][T16261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1008.034634][T16261] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1008.039598][T16261] ? __pfx_tc_dump_action+0x10/0x10 [ 1008.044813][T16261] ? ref_tracker_free+0x643/0x7e0 [ 1008.049871][T16261] netlink_rcv_skb+0x1e3/0x430 [ 1008.054648][T16261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1008.060143][T16261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1008.065466][T16261] ? netlink_deliver_tap+0x2e/0x1b0 [ 1008.070691][T16261] netlink_unicast+0x7f6/0x990 [ 1008.075492][T16261] ? __pfx_netlink_unicast+0x10/0x10 [ 1008.080798][T16261] ? __virt_addr_valid+0x183/0x530 [ 1008.085948][T16261] ? __check_object_size+0x48e/0x900 [ 1008.091249][T16261] netlink_sendmsg+0x8e4/0xcb0 [ 1008.096213][T16261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.101538][T16261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.106869][T16261] __sock_sendmsg+0x221/0x270 [ 1008.111579][T16261] ____sys_sendmsg+0x52a/0x7e0 [ 1008.116475][T16261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1008.121903][T16261] __sys_sendmsg+0x292/0x380 [ 1008.126604][T16261] ? __pfx___sys_sendmsg+0x10/0x10 [ 1008.131753][T16261] ? __pfx_vfs_write+0x10/0x10 [ 1008.136562][T16261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1008.142946][T16261] ? do_syscall_64+0x100/0x230 [ 1008.147782][T16261] ? do_syscall_64+0xb6/0x230 [ 1008.152245][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1008.152470][T16261] do_syscall_64+0xf3/0x230 [ 1008.163884][T16261] ? clear_bhb_loop+0x35/0x90 [ 1008.168620][T16261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.174563][T16261] RIP: 0033:0x7f9a6a37e719 [ 1008.179019][T16261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.198667][T16261] RSP: 002b:00007f9a6b183038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.207103][T16261] RAX: ffffffffffffffda RBX: 00007f9a6a536058 RCX: 00007f9a6a37e719 [ 1008.215097][T16261] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 1008.223170][T16261] RBP: 00007f9a6b183090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.231158][T16261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.239141][T16261] R13: 0000000000000000 R14: 00007f9a6a536058 R15: 00007ffe98d843a8 [ 1008.247159][T16261] [ 1008.314231][ T8977] usb 7-1: USB disconnect, device number 79 [ 1008.342290][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1008.360425][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1008.437456][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1008.450061][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1008.466805][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1008.555152][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1008.564552][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.574520][ T9] usb 4-1: Product: syz [ 1008.579660][ T9] usb 4-1: Manufacturer: syz [ 1008.585349][ T9] usb 4-1: SerialNumber: syz [ 1008.592961][ T9] usb 4-1: config 0 descriptor?? [ 1008.615992][ T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 1008.722415][ T8977] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1008.842826][T16256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1008.849426][T16256] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1008.858688][T16256] vhci_hcd vhci_hcd.0: Device attached [ 1008.877348][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.892890][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.912383][ T8977] usb 7-1: Using ep0 maxpacket: 16 [ 1008.942545][ T8977] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1008.951665][ T8977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.989450][ T8977] usb 7-1: Product: syz [ 1009.009715][ T8977] usb 7-1: Manufacturer: syz [ 1009.032204][ T8977] usb 7-1: SerialNumber: syz [ 1009.079592][ T8977] usb 7-1: config 0 descriptor?? [ 1009.097562][ T8977] pwc: Philips SPC 880NC USB webcam detected. [ 1009.122351][ T5916] usb 40-1: SetAddress Request (2) to port 0 [ 1009.132376][ T5916] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1009.192267][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1009.320586][ T8977] pwc: Failed to set LED on/off time (-71) [ 1009.331455][ T8977] pwc: send_video_command error -71 [ 1009.343913][ T8977] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1009.362406][ T8977] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1009.375582][ T8977] usb 7-1: USB disconnect, device number 80 [ 1010.232220][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1011.272304][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1012.312227][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1013.352200][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1014.392510][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1015.432183][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1016.472202][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1017.512205][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1018.552203][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1019.592210][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1020.632217][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1021.672294][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1022.712374][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1023.752194][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1024.792199][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1025.832213][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1026.872347][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1027.912236][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1028.952209][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1029.992192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1031.032255][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1032.072172][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1033.112203][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1034.152230][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1035.192189][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1036.232206][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1037.272178][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1038.312274][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1039.353817][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1040.392253][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1041.432191][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1042.472204][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1043.512175][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1044.552186][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1045.592196][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1046.632195][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1047.672263][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1048.712259][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1049.752224][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1050.792206][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1051.832183][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1052.872284][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1053.912187][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1054.718296][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.952189][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1055.992250][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1057.032275][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1058.072204][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1059.112237][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1060.152349][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1061.192199][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1062.232192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1063.272201][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1064.312257][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1065.352183][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1066.392266][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1067.432194][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1068.472231][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1069.512177][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1070.552188][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1071.592246][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1072.632166][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1073.672185][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1074.712199][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1075.752178][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1076.792167][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1077.832192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1078.872196][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1079.912175][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1080.952204][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1081.992187][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1083.032174][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1084.072168][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1085.112175][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1086.152239][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1087.192162][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1088.232156][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1089.272277][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1090.312184][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1091.352215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1092.392165][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1093.432170][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1094.472235][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1095.512179][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1096.552188][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1097.592180][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1098.632172][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1099.672238][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1100.712271][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1101.752181][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1102.792133][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1103.832166][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1104.872254][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1105.912799][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1106.952168][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1107.992174][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1109.032262][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1110.072192][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1111.112171][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1112.152204][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1113.192166][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1114.232248][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1115.272183][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1116.155841][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.312292][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1117.352267][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1118.392163][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1119.432173][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1120.472163][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1121.512191][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1122.552171][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1123.592182][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1124.632223][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1125.672279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1126.712161][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1127.752226][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1128.792146][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1129.832144][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1130.872220][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1131.912204][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1132.952141][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1133.992159][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1135.032170][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1136.072155][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1137.112147][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1138.152215][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1139.192291][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1140.232114][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1141.272160][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1142.312169][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1143.352163][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1144.392142][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1145.432148][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1146.472143][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1147.512244][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1148.552139][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1149.592125][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1150.632153][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1151.672232][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1152.712155][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1153.752152][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1154.792168][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1155.832300][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1156.872154][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1157.912154][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1158.952227][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1159.992208][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1161.032135][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1162.072249][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1162.235076][ T30] INFO: task kworker/0:5:5916 blocked for more than 143 seconds. [ 1162.243372][ T30] Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1162.251164][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1162.260130][ T30] task:kworker/0:5 state:D stack:17648 pid:5916 tgid:5916 ppid:2 flags:0x00004000 [ 1162.270682][ T30] Workqueue: usb_hub_wq hub_event [ 1162.277508][ T30] Call Trace: [ 1162.280909][ T30] [ 1162.283996][ T30] __schedule+0x17fa/0x4bd0 [ 1162.288808][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1162.294119][ T30] ? __pfx___schedule+0x10/0x10 [ 1162.299023][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1162.305376][ T30] ? __pfx_lock_release+0x10/0x10 [ 1162.310513][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1162.315995][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1162.321271][ T30] ? schedule+0x90/0x320 [ 1162.325725][ T30] schedule+0x14b/0x320 [ 1162.329933][ T30] usb_kill_urb+0x1c9/0x300 [ 1162.334873][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 1162.339969][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1162.346195][ T30] usb_start_wait_urb+0x1b0/0x520 [ 1162.351281][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1162.357612][ T30] ? __kmalloc_noprof+0x21a/0x400 [ 1162.362797][ T30] usb_control_msg+0x2b1/0x4c0 [ 1162.367643][ T30] ? __pfx_usb_control_msg+0x10/0x10 [ 1162.373138][ T30] ? usb_hcd_reset_endpoint+0x159/0x200 [ 1162.378800][ T30] ? msleep+0x39/0xe0 [ 1162.382931][ T30] hub_port_init+0x1156/0x2670 [ 1162.387804][ T30] hub_event+0x2962/0x5150 [ 1162.392515][ T30] ? __pfx_hub_event+0x10/0x10 [ 1162.397361][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1162.402533][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1162.408600][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1162.415141][ T30] ? process_scheduled_works+0x976/0x1850 [ 1162.420929][ T30] process_scheduled_works+0xa63/0x1850 [ 1162.426902][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1162.433114][ T30] ? assign_work+0x364/0x3d0 [ 1162.437787][ T30] worker_thread+0x870/0xd30 [ 1162.442557][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1162.447694][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1162.453095][ T30] kthread+0x2f0/0x390 [ 1162.457238][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1162.462564][ T30] ? __pfx_kthread+0x10/0x10 [ 1162.467213][ T30] ret_from_fork+0x4b/0x80 [ 1162.471696][ T30] ? __pfx_kthread+0x10/0x10 [ 1162.476572][ T30] ret_from_fork_asm+0x1a/0x30 [ 1162.481406][ T30] [ 1162.484575][ T30] INFO: task syz.9.2803:16251 blocked for more than 143 seconds. [ 1162.492619][ T30] Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1162.500312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1162.509163][ T30] task:syz.9.2803 state:D stack:24336 pid:16251 tgid:16248 ppid:11280 flags:0x00004002 [ 1162.519524][ T30] Call Trace: [ 1162.523417][ T30] [ 1162.526419][ T30] __schedule+0x17fa/0x4bd0 [ 1162.531006][ T30] ? __pfx___schedule+0x10/0x10 [ 1162.536068][ T30] ? __pfx_lock_release+0x10/0x10 [ 1162.541158][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1162.547256][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1162.553932][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1162.559316][ T30] ? schedule+0x90/0x320 [ 1162.563697][ T30] schedule+0x14b/0x320 [ 1162.567905][ T30] schedule_preempt_disabled+0x13/0x30 [ 1162.573472][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1162.579257][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1162.585270][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1162.591485][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1162.596657][ T30] ? exit_mmap+0x28b/0xc40 [ 1162.601133][ T30] down_write+0x1d7/0x220 [ 1162.605556][ T30] ? __pfx_down_write+0x10/0x10 [ 1162.610469][ T30] exit_mmap+0x2bd/0xc40 [ 1162.614838][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1162.619568][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 1162.624472][ T30] ? __pfx_exit_aio+0x10/0x10 [ 1162.629215][ T30] ? uprobe_clear_state+0x271/0x290 [ 1162.634547][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 1162.639893][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1162.645181][ T30] __mmput+0x115/0x380 [ 1162.649337][ T30] exit_mm+0x220/0x310 [ 1162.654561][ T30] ? __pfx_exit_mm+0x10/0x10 [ 1162.659210][ T30] ? taskstats_exit+0x326/0xa60 [ 1162.664200][ T30] do_exit+0x9b2/0x28e0 [ 1162.668414][ T30] ? __pfx_do_exit+0x10/0x10 [ 1162.673176][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1162.678606][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1162.685379][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1162.691957][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1162.697194][ T30] do_group_exit+0x207/0x2c0 [ 1162.701878][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1162.707364][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1162.712706][ T30] get_signal+0x16a3/0x1740 [ 1162.717322][ T30] ? __pfx_get_signal+0x10/0x10 [ 1162.722300][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1162.727902][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1162.734177][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1162.740234][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1162.746150][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1162.751853][ T30] do_syscall_64+0x100/0x230 [ 1162.756565][ T30] ? clear_bhb_loop+0x35/0x90 [ 1162.761285][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.767318][ T30] RIP: 0033:0x7f4284b7e719 [ 1162.771797][ T30] RSP: 002b:00007f42858e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1162.780410][ T30] RAX: 0000000000018ff8 RBX: 00007f4284d35f80 RCX: 00007f4284b7e719 [ 1162.788532][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 1162.796642][ T30] RBP: 00007f4284bf175e R08: 0000000000000000 R09: 0000000000000000 [ 1162.804734][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.812833][ T30] R13: 0000000000000000 R14: 00007f4284d35f80 R15: 00007ffc5835f298 [ 1162.820860][ T30] [ 1162.823979][ T30] INFO: task syz.3.2805:16256 blocked for more than 143 seconds. [ 1162.831735][ T30] Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1162.839491][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1162.848341][ T30] task:syz.3.2805 state:D stack:20536 pid:16256 tgid:16252 ppid:11740 flags:0x00004006 [ 1162.858657][ T30] Call Trace: [ 1162.861977][ T30] [ 1162.865008][ T30] __schedule+0x17fa/0x4bd0 [ 1162.869588][ T30] ? __pfx___schedule+0x10/0x10 [ 1162.874687][ T30] ? __pfx_lock_release+0x10/0x10 [ 1162.879775][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1162.885860][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1162.892462][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1162.897637][ T30] ? schedule+0x90/0x320 [ 1162.901910][ T30] schedule+0x14b/0x320 [ 1162.906977][ T30] schedule_preempt_disabled+0x13/0x30 [ 1162.912577][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1162.918359][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1162.925399][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1162.931753][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1162.936935][ T30] ? exit_mmap+0x28b/0xc40 [ 1162.941414][ T30] down_write+0x1d7/0x220 [ 1162.945927][ T30] ? __pfx_down_write+0x10/0x10 [ 1162.950846][ T30] exit_mmap+0x2bd/0xc40 [ 1162.955224][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1162.959949][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 1162.964824][ T30] ? __pfx_exit_aio+0x10/0x10 [ 1162.969563][ T30] ? uprobe_clear_state+0x271/0x290 [ 1162.974997][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 1162.980324][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1162.985747][ T30] __mmput+0x115/0x380 [ 1162.989881][ T30] exit_mm+0x220/0x310 [ 1162.994181][ T30] ? __pfx_exit_mm+0x10/0x10 [ 1162.998825][ T30] ? taskstats_exit+0x326/0xa60 [ 1163.003838][ T30] do_exit+0x9b2/0x28e0 [ 1163.008082][ T30] ? __pfx_do_exit+0x10/0x10 [ 1163.013374][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1163.018818][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.024921][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1163.031311][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1163.036561][ T30] do_group_exit+0x207/0x2c0 [ 1163.041209][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1163.046520][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1163.051778][ T30] get_signal+0x16a3/0x1740 [ 1163.056447][ T30] ? fput+0x1a8/0x230 [ 1163.060572][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1163.065728][ T30] ? __pfx_get_signal+0x10/0x10 [ 1163.070909][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1163.076626][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1163.082980][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.089051][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1163.094909][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1163.100504][ T30] do_syscall_64+0x100/0x230 [ 1163.105307][ T30] ? clear_bhb_loop+0x35/0x90 [ 1163.110120][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.112148][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1163.116200][ T30] RIP: 0033:0x7f940bf7e719 [ 1163.127469][ T30] RSP: 002b:00007f940ce24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1163.136134][ T30] RAX: 00000000005b4000 RBX: 00007f940c135f80 RCX: 00007f940bf7e719 [ 1163.144337][ T30] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 000000000000000a [ 1163.152482][ T30] RBP: 00007f940bff175e R08: 0000000000000000 R09: 0000000003000137 [ 1163.160526][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.168631][ T30] R13: 0000000000000000 R14: 00007f940c135f80 R15: 00007ffd260d27a8 [ 1163.176839][ T30] [ 1163.179908][ T30] INFO: task syz.8.2806:16257 blocked for more than 144 seconds. [ 1163.187725][ T30] Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1163.203751][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1163.212644][ T30] task:syz.8.2806 state:D stack:23544 pid:16257 tgid:16254 ppid:10053 flags:0x00004000 [ 1163.222980][ T30] Call Trace: [ 1163.226304][ T30] [ 1163.229284][ T30] __schedule+0x17fa/0x4bd0 [ 1163.233928][ T30] ? __pfx___schedule+0x10/0x10 [ 1163.238837][ T30] ? __pfx_lock_release+0x10/0x10 [ 1163.243993][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.250039][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1163.256534][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1163.261698][ T30] ? schedule+0x90/0x320 [ 1163.266036][ T30] schedule+0x14b/0x320 [ 1163.270239][ T30] schedule_preempt_disabled+0x13/0x30 [ 1163.276818][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1163.282780][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1163.288766][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1163.296568][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1163.301682][ T30] ? exit_mmap+0x28b/0xc40 [ 1163.306265][ T30] down_write+0x1d7/0x220 [ 1163.310655][ T30] ? __pfx_down_write+0x10/0x10 [ 1163.315664][ T30] exit_mmap+0x2bd/0xc40 [ 1163.319968][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1163.324735][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 1163.329571][ T30] ? __pfx_exit_aio+0x10/0x10 [ 1163.334380][ T30] ? uprobe_clear_state+0x271/0x290 [ 1163.339653][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 1163.345077][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1163.350354][ T30] __mmput+0x115/0x380 [ 1163.354556][ T30] exit_mm+0x220/0x310 [ 1163.358683][ T30] ? __pfx_exit_mm+0x10/0x10 [ 1163.363412][ T30] ? taskstats_exit+0x326/0xa60 [ 1163.368338][ T30] do_exit+0x9b2/0x28e0 [ 1163.372681][ T30] ? __pfx_do_exit+0x10/0x10 [ 1163.377336][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1163.382810][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.388942][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1163.395400][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1163.400599][ T30] do_group_exit+0x207/0x2c0 [ 1163.405454][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1163.410724][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1163.422109][ T30] get_signal+0x16a3/0x1740 [ 1163.426710][ T30] ? __pfx_get_signal+0x10/0x10 [ 1163.431631][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1163.450922][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1163.457429][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.466254][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1163.481814][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1163.488001][ T30] do_syscall_64+0x100/0x230 [ 1163.502681][ T30] ? clear_bhb_loop+0x35/0x90 [ 1163.507531][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.524920][ T30] RIP: 0033:0x7f8f6557e719 [ 1163.529510][ T30] RSP: 002b:00007f8f663980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1163.562283][ T30] RAX: fffffffffffffe00 RBX: 00007f8f65736060 RCX: 00007f8f6557e719 [ 1163.570518][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f65736060 [ 1163.589851][ T30] RBP: 00007f8f65736058 R08: 0000000000000000 R09: 0000000000000000 [ 1163.600354][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f65736064 [ 1163.618648][ T30] R13: 0000000000000000 R14: 00007ffe174c6020 R15: 00007ffe174c6108 [ 1163.631227][ T30] [ 1163.642410][ T30] INFO: task syz.7.2807:16261 blocked for more than 144 seconds. [ 1163.650299][ T30] Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1163.666275][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1163.679080][ T30] task:syz.7.2807 state:D stack:23808 pid:16261 tgid:16259 ppid:9045 flags:0x00004000 [ 1163.701834][ T30] Call Trace: [ 1163.705588][ T30] [ 1163.708636][ T30] __schedule+0x17fa/0x4bd0 [ 1163.722323][ T30] ? __pfx___schedule+0x10/0x10 [ 1163.727403][ T30] ? __pfx_lock_release+0x10/0x10 [ 1163.734002][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.740209][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1163.746910][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1163.761266][ T30] ? schedule+0x90/0x320 [ 1163.766092][ T30] schedule+0x14b/0x320 [ 1163.770401][ T30] schedule_preempt_disabled+0x13/0x30 [ 1163.776218][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1163.782245][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1163.788317][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1163.795408][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1163.800663][ T30] ? exit_mmap+0x28b/0xc40 [ 1163.806649][ T30] down_write+0x1d7/0x220 [ 1163.811188][ T30] ? __pfx_down_write+0x10/0x10 [ 1163.816528][ T30] exit_mmap+0x2bd/0xc40 [ 1163.820935][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1163.825829][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 1163.830734][ T30] ? __pfx_exit_aio+0x10/0x10 [ 1163.836044][ T30] ? uprobe_clear_state+0x271/0x290 [ 1163.841403][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 1163.847069][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1163.853679][ T30] __mmput+0x115/0x380 [ 1163.857879][ T30] exit_mm+0x220/0x310 [ 1163.862122][ T30] ? __pfx_exit_mm+0x10/0x10 [ 1163.866909][ T30] ? taskstats_exit+0x326/0xa60 [ 1163.872687][ T30] do_exit+0x9b2/0x28e0 [ 1163.876974][ T30] ? __pfx_do_exit+0x10/0x10 [ 1163.881685][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1163.887846][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.894063][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1163.900587][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1163.905922][ T30] do_group_exit+0x207/0x2c0 [ 1163.910601][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1163.916083][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1163.921496][ T30] get_signal+0x16a3/0x1740 [ 1163.926473][ T30] ? __pfx_get_signal+0x10/0x10 [ 1163.931434][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1163.937196][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1163.943618][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1163.949781][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1163.955821][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1163.961536][ T30] do_syscall_64+0x100/0x230 [ 1163.966403][ T30] ? clear_bhb_loop+0x35/0x90 [ 1163.971196][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.977299][ T30] RIP: 0033:0x7f9a6a37e719 [ 1163.981829][ T30] RSP: 002b:00007f9a6b1830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1163.990565][ T30] RAX: fffffffffffffe00 RBX: 00007f9a6a536060 RCX: 00007f9a6a37e719 [ 1163.998782][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a6a536060 [ 1164.006935][ T30] RBP: 00007f9a6a536058 R08: 0000000000000000 R09: 0000000000000000 [ 1164.015173][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a6a536064 [ 1164.024639][ T30] R13: 0000000000000000 R14: 00007ffe98d842c0 R15: 00007ffe98d843a8 [ 1164.033168][ T30] [ 1164.036310][ T30] INFO: task syz.6.2808:16262 blocked for more than 145 seconds. [ 1164.044127][ T30] Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1164.051818][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1164.060609][ T30] task:syz.6.2808 state:D stack:25200 pid:16262 tgid:16262 ppid:7405 flags:0x00004000 [ 1164.070963][ T30] Call Trace: [ 1164.074771][ T30] [ 1164.077801][ T30] __schedule+0x17fa/0x4bd0 [ 1164.082525][ T30] ? __pfx___schedule+0x10/0x10 [ 1164.087469][ T30] ? __pfx_lock_release+0x10/0x10 [ 1164.092947][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1164.099027][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1164.105452][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1164.110620][ T30] ? schedule+0x90/0x320 [ 1164.114987][ T30] schedule+0x14b/0x320 [ 1164.119202][ T30] schedule_preempt_disabled+0x13/0x30 [ 1164.124882][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1164.130698][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1164.136815][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1164.143485][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1164.148776][ T30] ? exit_mmap+0x28b/0xc40 [ 1164.153410][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1164.160737][ T30] down_write+0x1d7/0x220 [ 1164.165209][ T30] ? __pfx_down_write+0x10/0x10 [ 1164.170119][ T30] exit_mmap+0x2bd/0xc40 [ 1164.174560][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1164.179320][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 1164.184257][ T30] ? __pfx_exit_aio+0x10/0x10 [ 1164.189072][ T30] ? uprobe_clear_state+0x271/0x290 [ 1164.194374][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 1164.199725][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1164.205276][ T30] __mmput+0x115/0x380 [ 1164.209465][ T30] exit_mm+0x220/0x310 [ 1164.213710][ T30] ? __pfx_exit_mm+0x10/0x10 [ 1164.218398][ T30] ? taskstats_exit+0x326/0xa60 [ 1164.223474][ T30] do_exit+0x9b2/0x28e0 [ 1164.227749][ T30] ? __pfx_do_exit+0x10/0x10 [ 1164.232470][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1164.238528][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1164.245036][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1164.250693][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1164.256385][ T30] do_group_exit+0x207/0x2c0 [ 1164.261116][ T30] __x64_sys_exit_group+0x3f/0x40 [ 1164.266283][ T30] x64_sys_call+0x2634/0x2640 [ 1164.271020][ T30] do_syscall_64+0xf3/0x230 [ 1164.275713][ T30] ? clear_bhb_loop+0x35/0x90 [ 1164.280564][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.286645][ T30] RIP: 0033:0x7ff1c5b7e719 [ 1164.291357][ T30] RSP: 002b:00007ffdf6682088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1164.299963][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff1c5b7e719 [ 1164.308067][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1164.316438][ T30] RBP: 00007ffdf66820dc R08: 00007ffdf668216f R09: 00000000000f5e9a [ 1164.324822][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 1164.333040][ T30] R13: 00000000000f5e9a R14: 00000000000f580d R15: 00007ffdf6682130 [ 1164.341236][ T30] [ 1164.344395][ T30] [ 1164.344395][ T30] Showing all locks held in the system: [ 1164.352335][ T30] 6 locks held by kworker/0:1/9: [ 1164.357398][ T30] #0: ffff888020ae4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1164.369230][ T30] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1164.381250][ T30] #2: ffff888145b58190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1164.390351][ T30] #3: ffff88805ef75190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1164.400235][ T30] #4: ffff88805ef74160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1164.409810][ T30] #5: ffff88805ef77088 (&ictx->lock){+.+.}-{3:3}, at: imon_probe+0x3ec/0x31b0 [ 1164.419162][ T30] 1 lock held by khungtaskd/30: [ 1164.424471][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1164.434543][ T30] 2 locks held by kworker/u8:5/1080: [ 1164.440017][ T30] #0: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1164.450334][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x387/0x7a0 [ 1164.462267][ T30] 2 locks held by getty/5587: [ 1164.467121][ T30] #0: ffff8880315120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1164.477560][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1164.487933][ T30] 1 lock held by syz-executor/5821: [ 1164.493284][ T30] #0: ffff888078fc2fd8 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 1164.503023][ T30] 5 locks held by kworker/0:5/5916: [ 1164.508291][ T30] #0: ffff888020ae4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1164.519808][ T30] #1: ffffc900042c7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1164.531797][ T30] #2: ffff888146b27190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1164.541152][ T30] #3: ffff888146b62510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 1164.551453][ T30] #4: ffff8880292c4a68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 1164.561495][ T30] 1 lock held by syz-executor/10053: [ 1164.566988][ T30] #0: ffff8880328a6758 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 1164.576390][ T30] 1 lock held by syz.9.2803/16251: [ 1164.581695][ T30] #0: ffff88807b8c9d58 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 1164.591036][ T30] 1 lock held by syz.3.2805/16256: [ 1164.596289][ T30] #0: ffff88807e7c4b98 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 1164.605467][ T30] 1 lock held by syz.8.2806/16257: [ 1164.610624][ T30] #0: ffff88807c6ce758 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 1164.619814][ T30] 1 lock held by syz.7.2807/16261: [ 1164.625144][ T30] #0: ffff88807e7c0198 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 1164.634760][ T30] 1 lock held by syz.6.2808/16262: [ 1164.639944][ T30] #0: ffff8880328a4258 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 1164.649338][ T30] [ 1164.651714][ T30] ============================================= [ 1164.651714][ T30] [ 1164.660672][ T30] NMI backtrace for cpu 0 [ 1164.665013][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1164.675528][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1164.685596][ T30] Call Trace: [ 1164.688888][ T30] [ 1164.691830][ T30] dump_stack_lvl+0x241/0x360 [ 1164.696536][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.701752][ T30] ? __pfx__printk+0x10/0x10 [ 1164.706370][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1164.711356][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1164.716842][ T30] ? _printk+0xd5/0x120 [ 1164.721037][ T30] ? __pfx__printk+0x10/0x10 [ 1164.725645][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1164.730515][ T30] ? __pfx__printk+0x10/0x10 [ 1164.735119][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1164.740168][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1164.746219][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1164.752310][ T30] watchdog+0xff4/0x1040 [ 1164.756590][ T30] ? watchdog+0x1ea/0x1040 [ 1164.761033][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.765733][ T30] kthread+0x2f0/0x390 [ 1164.769817][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.774517][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.779122][ T30] ret_from_fork+0x4b/0x80 [ 1164.783555][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.788155][ T30] ret_from_fork_asm+0x1a/0x30 [ 1164.792953][ T30] [ 1164.796663][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1164.802022][ C1] NMI backtrace for cpu 1 [ 1164.802038][ C1] CPU: 1 UID: 0 PID: 3505 Comm: kworker/u8:8 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1164.802064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1164.802079][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1164.802116][ C1] RIP: 0010:lock_release+0x112/0xa30 [ 1164.802148][ C1] Code: 83 3d dd 91 ab 0e 00 4c 8b 74 24 18 0f 84 55 05 00 00 65 8b 05 8f 0b 92 7e 85 c0 0f 85 46 05 00 00 65 48 8b 04 25 80 d7 03 00 <48> 89 44 24 20 48 8d 98 dc 0a 00 00 48 89 d8 48 c1 e8 03 42 0f b6 [ 1164.802164][ C1] RSP: 0018:ffffc9000c75f660 EFLAGS: 00000246 [ 1164.802181][ C1] RAX: ffff88803217bc00 RBX: 0000000000000001 RCX: ffffffff81707ea0 [ 1164.802195][ C1] RDX: 0000000000000000 RSI: ffffffff8c603700 RDI: ffffffff8c6036c0 [ 1164.802209][ C1] RBP: ffffc9000c75f790 R08: ffffffff901bde6f R09: 1ffffffff2037bcd [ 1164.802224][ C1] R10: dffffc0000000000 R11: fffffbfff2037bce R12: 1ffff920018ebed8 [ 1164.802239][ C1] R13: ffffffff81a0c2bc R14: ffffffff8e937da0 R15: dffffc0000000000 [ 1164.802254][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1164.802272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.802285][ C1] CR2: 00007ff9fd200210 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1164.802303][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1164.802315][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1164.802328][ C1] Call Trace: [ 1164.802335][ C1] [ 1164.802343][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1164.802373][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1164.802402][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1164.802430][ C1] ? nmi_handle+0x2a/0x5a0 [ 1164.802457][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1164.802483][ C1] ? nmi_handle+0x14f/0x5a0 [ 1164.802502][ C1] ? nmi_handle+0x2a/0x5a0 [ 1164.802522][ C1] ? lock_release+0x112/0xa30 [ 1164.802547][ C1] ? default_do_nmi+0x63/0x160 [ 1164.802567][ C1] ? exc_nmi+0x123/0x1f0 [ 1164.802583][ C1] ? end_repeat_nmi+0xf/0x53 [ 1164.802606][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 1164.802629][ C1] ? lock_release+0xb0/0xa30 [ 1164.802656][ C1] ? lock_release+0x112/0xa30 [ 1164.802682][ C1] ? lock_release+0x112/0xa30 [ 1164.802721][ C1] ? lock_release+0x112/0xa30 [ 1164.802747][ C1] [ 1164.802753][ C1] [ 1164.802762][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1164.802790][ C1] ? __pfx_lock_release+0x10/0x10 [ 1164.802816][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1164.802846][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 1164.802865][ C1] bpf_trace_run2+0x369/0x540 [ 1164.802888][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1164.802911][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1164.802935][ C1] trace_contention_end+0xf5/0x120 [ 1164.802957][ C1] __mutex_lock+0x2e5/0xd70 [ 1164.802980][ C1] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1164.803003][ C1] ? __pfx_text_poke_loc_init+0x10/0x10 [ 1164.803032][ C1] ? arch_jump_label_transform_queue+0x5d/0x100 [ 1164.803059][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1164.803083][ C1] ? static_key_disable_cpuslocked+0x9b/0x1c0 [ 1164.803111][ C1] ? text_poke_queue+0x12c/0x180 [ 1164.803139][ C1] arch_jump_label_transform_queue+0x5d/0x100 [ 1164.803166][ C1] __jump_label_update+0x177/0x3a0 [ 1164.803194][ C1] ? process_scheduled_works+0x976/0x1850 [ 1164.803219][ C1] static_key_disable_cpuslocked+0xd2/0x1c0 [ 1164.803246][ C1] static_key_disable+0x1a/0x20 [ 1164.803271][ C1] toggle_allocation_gate+0x1bf/0x260 [ 1164.803298][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1164.803326][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1164.803359][ C1] process_scheduled_works+0xa63/0x1850 [ 1164.803398][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1164.803427][ C1] ? assign_work+0x364/0x3d0 [ 1164.803453][ C1] worker_thread+0x870/0xd30 [ 1164.803485][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1164.803512][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1164.803537][ C1] kthread+0x2f0/0x390 [ 1164.803553][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1164.803577][ C1] ? __pfx_kthread+0x10/0x10 [ 1164.803600][ C1] ret_from_fork+0x4b/0x80 [ 1164.803625][ C1] ? __pfx_kthread+0x10/0x10 [ 1164.803642][ C1] ret_from_fork_asm+0x1a/0x30 [ 1164.803675][ C1] [ 1164.813772][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1164.813797][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 1164.813825][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1164.813842][ T30] Call Trace: [ 1164.813852][ T30] [ 1164.813864][ T30] dump_stack_lvl+0x241/0x360 [ 1164.813904][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.813936][ T30] ? __pfx__printk+0x10/0x10 [ 1164.813962][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1164.814006][ T30] ? vscnprintf+0x5d/0x90 [ 1164.814044][ T30] panic+0x349/0x880 [ 1164.814074][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1164.814112][ T30] ? __pfx_panic+0x10/0x10 [ 1164.814138][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1164.814164][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1164.814198][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1164.814224][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1164.814259][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1164.814324][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1164.814365][ T30] watchdog+0x1033/0x1040 [ 1164.814400][ T30] ? watchdog+0x1ea/0x1040 [ 1164.814439][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.814472][ T30] kthread+0x2f0/0x390 [ 1164.814496][ T30] ? __pfx_watchdog+0x10/0x10 [ 1164.814527][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.814553][ T30] ret_from_fork+0x4b/0x80 [ 1164.814586][ T30] ? __pfx_kthread+0x10/0x10 [ 1164.814623][ T30] ret_from_fork_asm+0x1a/0x30 [ 1164.814671][ T30] [ 1165.371616][ T30] Kernel Offset: disabled [ 1165.375963][ T30] Rebooting in 86400 seconds..