last executing test programs: 15m2.05576567s ago: executing program 3 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15m1.704299609s ago: executing program 3 (id=724): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x3, @remote}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0xffff, 0x2, 0x0, 0x3, 0xffbffff3}, 0x14) listen(r1, 0x1ff) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) close(r5) r6 = accept(r4, 0x0, 0x0) recvmsg$can_raw(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r7, 0x5452, &(0x7f0000000040)=@add_del={0x2, 0x0}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x2}, 0x20) 14m59.872167712s ago: executing program 3 (id=728): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00'}, 0x18) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xa, {0x6, 0x5, 0x401, 0xffffffff}, {0x6, 0x7fffffff, 0x1, 0xa}, {0x4, 0x400001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 14m59.305462502s ago: executing program 3 (id=733): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000780)={0xa, @sdr={0x39565559}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000880)="5cba91ff890d4027881b2e39e14c40157713f9036c5373e68c35e68bebedbddfe1db69f38db5cd3d780bd3841c9cdb1634ca8c32f434c922e86592f720d36a6615cd30bb922ce9fb64a44060956549a9ba672bf5d97a0de23f92da6b75a7167d2acc0b56e0470b5d5c3a0a3399b82fe4401bf4c7ff2e14497f1f14df8dd195449e7510f1456e835ac5b18da9bbccd6f691d080c1329eeb03e4", 0xfffffffffffffc17) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) io_uring_setup(0x4e83, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x2, 0x40000000}) ioctl$SNDCTL_DSP_STEREO(r5, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)=0xfffffff9) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000240)) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 14m55.923724548s ago: executing program 3 (id=741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r3, 0x541b, 0x0) 14m55.758950215s ago: executing program 3 (id=746): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) syz_init_net_socket$llc(0x1a, 0x802, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x44840, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000500ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0xc9, 0xd1, 0xc4, 0x8, 0x499, 0x500a, 0xe7b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xd, 0xd5, 0xce, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "a3f6d2fb5b"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x41, 0x6, 0xcf, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) 14m40.641492664s ago: executing program 32 (id=746): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) syz_init_net_socket$llc(0x1a, 0x802, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x44840, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000500ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0xc9, 0xd1, 0xc4, 0x8, 0x499, 0x500a, 0xe7b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xd, 0xd5, 0xce, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "a3f6d2fb5b"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x41, 0x6, 0xcf, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) 13m47.624734318s ago: executing program 2 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0x410000c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, 0x0, 0xfe3c) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) 13m43.782467998s ago: executing program 2 (id=914): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000780)={0xa, @sdr={0x39565559}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000880)="5cba91ff890d4027881b2e39e14c40157713f9036c5373e68c35e68bebedbddfe1db69f38db5cd3d780bd3841c9cdb1634ca8c32f434c922e86592f720d36a6615cd30bb922ce9fb64a44060956549a9ba672bf5d97a0de23f92da6b75a7167d2acc0b56e0470b5d5c3a0a3399b82fe4401bf4c7ff2e14497f1f14df8dd195449e7510f1456e835ac5b18da9bbccd6f691d080c1329eeb03e4", 0xfffffffffffffc17) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) io_uring_setup(0x4e83, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x2, 0x40000000}) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)=0xfffffff9) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000240)) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13m43.020012458s ago: executing program 2 (id=919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) socket$inet(0x2, 0x2, 0x1) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x98}}, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 13m41.988479826s ago: executing program 2 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13m41.837746081s ago: executing program 2 (id=927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000003e82d9150000000000000000000002000000"], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r3, 0x541b, 0x0) 13m41.837109309s ago: executing program 5 (id=928): socket(0x840000000002, 0x3, 0xff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00004bb000/0x1000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f0000000080)=[{}, {0x6, 0x6, 0x7fffffff}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x7d}) epoll_create(0x207ffd) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) mlockall(0x7) 13m39.58629446s ago: executing program 2 (id=929): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xa, {0x6, 0x5, 0x401, 0xffffffff}, {0x6, 0x7fffffff, 0x1, 0xa}, {0x4, 0x400001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 13m36.693502805s ago: executing program 5 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x15}, 0x15, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x80c00}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000840)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) 13m35.440152576s ago: executing program 5 (id=933): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x3, @remote}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0xffff, 0x2, 0x0, 0x3, 0xffbffff3}, 0x14) listen(r1, 0x1ff) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) close(r5) r6 = accept(r4, 0x0, 0x0) recvmsg$can_raw(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x2}, 0x20) 13m32.928853193s ago: executing program 5 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x80000000}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x13}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x58}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', r1, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000000140)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1832916904146fa5d43c551aae844b265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fca"], 0x64}}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000058c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="a1", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r0, &(0x7f0000002540)={&(0x7f0000001200)=@nfc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/47, 0x2f}, {&(0x7f0000002380)=""/74, 0x4a}, {&(0x7f0000002400)=""/61, 0x3d}, {&(0x7f0000002440)=""/38, 0x26}, {&(0x7f0000002480)=""/38, 0x26}], 0x6}, 0x4020) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000440)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 13m30.312804474s ago: executing program 5 (id=945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x20, 0x9a, "5274a552cb35c8ab42a4894c9d8aa83866cb5ed2297ea43678b2f4b1d97be2a42c990267ddc8420d6d128a0c0a8bd16be391f1e53d0625299a26246e244a51e35b6149845c10c63040e7f0231fa46b6fe87f2c3387d53c01cc3bd7d0c0ef01595b31a5c9bdb69af27442f8baa41e87d3d7fc84980445efca1841ab36ea2b0f68f312ac4841265ab2562818d998a18618226c9b95d0d457533803"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) tkill(r3, 0x25) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086"], 0xffdd) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x2c, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000001380)='user\x00', &(0x7f00000013c0)={'syz', 0x3}, &(0x7f0000001400)='blacklist\x00', 0x0) fanotify_init(0x10, 0x80000) 13m29.039457841s ago: executing program 5 (id=948): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x6042, 0x80) r2 = openat(r1, 0x0, 0x303d01, 0x0) write$cgroup_pid(r2, 0x0, 0x0) flock(r2, 0x5) pipe(0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x771237eb5e0935b1}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x4290}, {0xffffffffffffffff, 0x3000}], 0x4, 0x40e74ecb) 13m23.968719534s ago: executing program 33 (id=929): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xa, {0x6, 0x5, 0x401, 0xffffffff}, {0x6, 0x7fffffff, 0x1, 0xa}, {0x4, 0x400001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 13m13.705787465s ago: executing program 34 (id=948): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x6042, 0x80) r2 = openat(r1, 0x0, 0x303d01, 0x0) write$cgroup_pid(r2, 0x0, 0x0) flock(r2, 0x5) pipe(0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x771237eb5e0935b1}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x4290}, {0xffffffffffffffff, 0x3000}], 0x4, 0x40e74ecb) 8m56.408639472s ago: executing program 6 (id=1709): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000780)={0xa, @sdr={0x39565559}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000880)="5cba91ff890d4027881b2e39e14c40157713f9036c5373e68c35e68bebedbddfe1db69f38db5cd3d780bd3841c9cdb1634ca8c32f434c922e86592f720d36a6615cd30bb922ce9fb64a44060956549a9ba672bf5d97a0de23f92da6b75a7167d2acc0b56e0470b5d5c3a0a3399b82fe4401bf4c7ff2e14497f1f14df8dd195449e7510f1456e835ac5b18da9bbccd6f691d080c1329eeb03e4", 0xfffffffffffffc17) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) io_uring_setup(0x4e83, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x2, 0x40000000}) ioctl$SNDCTL_DSP_STEREO(r4, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0xfffffff9) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000240)) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8m55.125252077s ago: executing program 6 (id=1712): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@multicast1, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@random="05169d28a60f", @multicast1, @remote}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="5ba0e9c5ae78", @mac=@dev, @broadcast, @remote}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000a40)={0x0, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x7}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 8m54.141318147s ago: executing program 6 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500010000675304b70c457a1eef08000300", @ANYRES32=r7], 0x2c}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, r6, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x4}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "32d88ad773"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c006f1ff3ebe12c5fb9479da90"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "708fc4fecda8e784fb9b5d042a"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a94d56c17b"}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xa, 0x4, "150f15a55c4e"}, @NL80211_KEY_SEQ={0x9, 0x4, "a157d05794"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'FO>P2'}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 8m52.126243964s ago: executing program 6 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x3}]}}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 8m51.090306326s ago: executing program 6 (id=1724): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x13b8, r2, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd7f2, 0x72}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0xf18, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x61b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0xfd, @default, 0x4004, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xb1}, @val={0x4, 0x6, {0xfd, 0x9b, 0x3ff, 0x7ff}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0x18, {0x1, 0x6a, 0x1, "740d27bd4a967ff51967595cd8f41ae7fdf5b513ec"}}, @val={0x25, 0x3, {0x0, 0x64, 0xf5}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0x6c, 0x3}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x704, 0x1, 0xb}}, @void, @void, @val={0x76, 0x6, {0xf9, 0xd, 0x2b, 0x8}}, [{0xdd, 0xa2, "30120392ab38b6cdf21234ddd8a2d170046e8ce9f8a228a62ea35339a1f5a20da0dcddb8ed5e8de2764b9d5e8b55296ddf52c29e55960406eec664ef97332b8fe8df5dc686d33f8df9879a8de1dfae4c421483371a8ef553c02a1c06566e972665f05b7a9507be41ce6d084e1fb5e09b52c00828f13f9ee55d723b6aeefa7c15059cbf0589ab321b9a0a092cc4125519e9c55cb95ec04b9249998c4f815247667947"}, {0xdd, 0x8f, "3bdc610452db7449601b006c49938f43e85d5a2f11256687a030ce2f464cadbaad361d2cf6bb3739b8d3567b2c39509ffdd7b60855e710fd0d2a7bd6bcdda62547ffdd61ddecc0999ab21742ecd96563d5f3805fb3bf6f2814f7de7c2241af7763ee0c2c91ffd311eb3b5c30cafa9ac070d8e64aa01186775723791d2433ca39c0e6c2120d8d4b628d3120b4662552"}, {0xdd, 0xc6, "2cdd947d1b145f453c66fd01a01dde0f9f14e31daafe9dee9ac9fe557cfa1c3a63cc69a1096ebc932d918d32dfba0cd7a0204ca6ee8b74d2132ec689fba8a38501c94faf81ecff5fe90d0cfcbe557b610ff0d71ae5f75cc0e6a64d47a01644d4d45328dd51efb794a6075d9ea73ed9e051420f0e9a763e9cdee56e60a896a014d17bec50d0295d4d7b4382bb766524e41d09d671db8b9d9bcad684173e27e41f444578212fdd8cd008227605c83a496573018d55b04940070cfd03d41f352bf64b28e31f0ac9"}, {0xdd, 0x7d, "aa5e407fc495f1e04d1d45c3367540bbb01fcbd10568b3b5a64de3c9db978eeeacc4f9e660ce63f7f6f89c7559a94add5aff52944387de1a5f33bdeeaca1a03bdbb365341ec55b2810aa001709515c486cc85095f174e21f0efe22786874011eadcc9001b5b1e92d75014779ac402d989c1e772a81e3b20543748548e4"}, {0xdd, 0xc1, "ef0c7e765a3685fc4c66ae3bd7166c3e3bcfaa52545a8150d654c7b21922eca9c60414cd7456d1ce5ceeb5be309d03d6bb8b94b836332ca17c5e1564090e6502cf41e9f5b054e1e23f843a6f8609f8a03c4cabadb60409418f45415fd608b2a1679689a0ea5affba4e4fa5e54233a6bacd7e30648985dbaf0d8edcd60391a780543e40185a128cfa9e0358696ae5aa4fc63ded836722f021f27383cc6367437001fccd857e3b85e0ab62851d81afed0a1ae61498e337846b4dde089a8383242199"}, {0xdd, 0xb4, "db426440f84bf456895fb9e228b518c8091146bbdbd019292b0130d96aae78c8f9e0810fb10ed23363a3d032e9a86750718e9833ce8787bfd0cfb94abccfe8b1eb68a6c413d0bfe8d6154e37d9155f1d1614626391ca81c39a1d52d33c3d70c73064f99633f3ffc55007bdb5a71c800fe9afba9e38fdf7247bc4cb9564ee6a4fc40dd44ded234ca1d9db2193c9583c91993555aa32ee06276ee5f305ac390a00291814fa19aa2a38bc97ee59efae37a0e5bf2f53"}, {0xdd, 0xb8, "959dd6daae176c266e3d69d71dbe1b285315a06f8defb5e7d6b86ee308e6eed482c6b860eed282b453a84b3ff9f7634e0f6aff321af4193bf46a9d7fcb59cc9162a952b710811faf4ee249ab86f9a28e52db8b9022246d57dba3d18e8d241855bd006cdc63416835dd5efbf294d82093509e6cbce0f8367f7d31ac95275d94d7adcaf2927df6e38ec71ed5858e2c6bfce0681bac144a0f632c38ca8305f8d0bf6c8976502aeb3e497de3723d720d92e18b15f765bf9b8dd3"}, {0xdd, 0xdf, "830795556b673952266b82371d36c0d3dc2f9f8077a464a85c67b3db19ec33771317c1736b30cf5c4f10a048cf96c71e31a111e129de3dda242ed5578b5f5aaa68ea4ee05c435ba840b55d037cabf7b78d8b4198ead132a1ad9539ac245ca2690b547cd38031617aa33fced8ab972a9a51238d205d5a8bbe589d3a7d2f6b57b18dce3e38c225181da099b07dba254f6958ce1bfeb2d496500c858fb18338d4bdf8b814d57992e3820ce5616485b2ee30cc2c917c81c0a2aabba2a02eec9dff4e1ce4075cedf6b8e1dcbeddc5bcfdb9b68d408ae2b2595cb8fdac630a7c72ff"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x12, 0x7f, [@mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x4, [{0x3}, {0x1e, 0x1}, {0xc, 0x1}, {0x3}]}]}, @NL80211_ATTR_PROBE_RESP={0x66c, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8, 0xffff, 0x401]}, @beacon_params=[@NL80211_ATTR_IE={0x34, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x1, 0x2, 0x0, {0x9, 0x1ff8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x35}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}]}, @NL80211_ATTR_BEACON_TAIL={0x1f5, 0xf, [@fast_bss_trans={0x37, 0xfa, {0x0, 0x7, "0ec8c68a4290d798660520f4180b7b95", "0b3c1173b0871c04bcee6fdb60451620c7ac6cd54aad439a74afaa17f245053d", "4074cb00116b29e2f4d268e4dfc8cd4add82c6442d9b4c970430e63ff9d382cd", [{0x3, 0x16, "c9dce2e89d640905eb3da50eb6d82b75c6d465433784"}, {0x4, 0x15, "13a0bbb7aa63dc929a36a0a48f1c67fbcdafeff31c"}, {0x4, 0x22, "6479b8747c89b44ad3396934d2e954c312b150b2495bcb467b529e75eeb421803aad"}, {0x3, 0x24, "8fc74fca161006a1dd567e9a3cee8957393c4d7fe995dd11735dbf19c8e86a50463991e0"}, {0x3, 0x16, "b5522a15907f5cab0d77db94ec125c9cd397bb47e889"}, {0x2, 0xb, "c02cca71e024a46574fc0c"}, {0x3, 0x8, "dce92d7be0699950"}]}}, @supported_rates, @dsss={0x3, 0x1, 0x99}, @ht={0x2d, 0x1a, {0x800, 0x3, 0x5, 0x0, {0x4, 0x1c59, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x9e, 0xf}}, @mic={0x8c, 0x18, {0x2e2, "60bd3b4a4f7c", @long="254c36772ac3c0561afef425f189314d"}}, @chsw_timing={0x68, 0x4, {0xea, 0x8822}}, @measure_req={0x26, 0x8c, {0x3f, 0x5, 0xbb, "66907814545f7edb101d2dc736e140761ed199e65fff6368d757b115af83bf0677e170a377d25a210c2d481ee1d32e39fe0d14924efea57ba96e22f34d3db9b2748af23fd65bcdfc2a680a20b936f9d596f4da261f30b1c85f915aa668302f72e5a3e0a62439eaec91f2cf535be70b1a49fbf188c0e67929759de1524a0b89338079f462f3606667db"}}, @channel_switch={0x25, 0x3, {0x1, 0xb0}}, @prep={0x83, 0x1f, {{}, 0xfb, 0xf6, @device_a, 0x5, @void, 0x3, 0x9, @broadcast, 0xcc96}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x3d, 0x7f, [@ht={0x2d, 0x1a, {0x40, 0x3, 0x4, 0x0, {0x80000001, 0x5, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x986, 0x7}}, @mic={0x8c, 0x18, {0x364, "0e68003a93bb", @long="18e01aaeed01e12dae535cf42cc72350"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]]}, @NL80211_ATTR_CSA_IES={0x448, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x41f, 0x91, "61aff62df2c9ee39c98f5827623f14bf1108be19848a44f093cad5645d43a43d303752a6b610f5e356ba86ac22f1608fb916fb60eeb2e81b44515c61828dd14e2bae24b0d5e256af556f3e86ab8e84e14f0c74deb6fddb9b21db7f0044cd4b6622e77a63ab0b608136938b8f70f41d364c04cf1762226cb35dfe4149be22a116820c7c21eaf37ea2e8937cc178a235fd3b95cafb59c1158116afd953f78c27c360f9d3bbcf3a827e7f5def071a3b9499b3e62ed5ed0aba223922575e2836765142ea1a3d719e4b9b1a4a6a32c52886497fee5b7b6ac6bbdc3889c095c64b72cf59b77d188654bf2ea7078f0bde6f431be022d444e5257a32db7c83da45629d626d065c01a05a20ee7f0668eeed9870756087556ab53da98c8f52f5e8a07793733eed19dc464bc125310ae9a6fe43a3a4a1990eaa57cbbf79a25d31671dc56832e9db2228a80d93bc4a7e50697614dbd0f4a75793d3c82f946907e3c978ea65e0af4c36dde9d7b71195f67273da6bec7b17eb470bbe517390b0a9792f6f161856213995c2e6b67e54bf78473c3b47e28790ac811a033c3e892c1c13f5b6db969663a27133eae286542c80375fb5d48d204911443749779656dd445b0200ac23246bbe1670658c7741795d057424558a07eefb3bbd555e6011d623042f86895b607701d1b875777253ca376c124e468bf8d8eee47cbcbd1b98a08b42371be1296db8ac8d7533a0ab95ceb98d8588a7590c253fced2f9af17c886a40e9b70e127bee8aee480f9cd5a43ced37ce09d3486fb747880d55d4fa6923e12259794ff25d053f4f602d71eef10de20e266739e48447efc72abdea47648cae2ec2160de6a3c7fead5495cc101f823c22f46088ca977e96d65bb682dc84bdc6b5bcfb67fa81db26a91fd1bb434ca4a37559c20d0a5d26c1c998474ced1c2a61bdacaca0d960e36b45c57fc5aec93f86ba2bf843bbce5a2d8812731c57ea830ac807b2c003aaf07c375ef42a9f9ccea68d3cbf61de370283bd57992d23fd43fbaa6c496c56c0d146a1d25b0d40149a552e57dd1bb8697f542fc2a7a8af88902a48a639f760aecf2acaab4b63f3b9bf590925d73b07add53e6817b80edc3e4b72618b6bbfff99cf7407c3f70444a3212f0d6d4c3f72ba7ad432a4f46b5aa93cc8f69422b1004dfb3f19106291c7e4d99cd1d0307d81a05f22838dc285150ca8c62fb27c81100b64bdafd1206ff93f64f32d1dab9d154cbc3d5548a87064e904b18aacfbd9c00e864024aac072a53f955c5125a13592449b6c114e9c9db2dd7277c9f726289038fad8f454192078b1c40f78550dfa5dd8ab58e47301f2cee559bdb341ba9ea1b6c32d8b66bffe8d7149fa21f5be6197c519b4ecf3341b63aa975639843e20e7404a9befdbb2f1026fe4d87f7e10b794dfcb995852061ee5d2d66b9489c586751ea396675e60d00df25093a0440382c9653fd36e3f32c4c9518df5192"}, @NL80211_ATTR_IE_PROBE_RESP={0x23, 0x7f, [@tim={0x5, 0x1d, {0x9, 0x7f, 0x5, "9ed1562055171f5c5e1f57a3a87efb9fc6b90974ca39a2b889b7"}}]}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x13b8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000000) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2a, 0x87, 0x65, 0x10, 0xbaf, 0xfa, 0xf15c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x60, 0xc5, 0x11, 0x40}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x13b8, r2, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd7f2, 0x72}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0xf18, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x61b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0xfd, @default, 0x4004, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xb1}, @val={0x4, 0x6, {0xfd, 0x9b, 0x3ff, 0x7ff}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0x18, {0x1, 0x6a, 0x1, "740d27bd4a967ff51967595cd8f41ae7fdf5b513ec"}}, @val={0x25, 0x3, {0x0, 0x64, 0xf5}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0x6c, 0x3}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x704, 0x1, 0xb}}, @void, @void, @val={0x76, 0x6, {0xf9, 0xd, 0x2b, 0x8}}, [{0xdd, 0xa2, "30120392ab38b6cdf21234ddd8a2d170046e8ce9f8a228a62ea35339a1f5a20da0dcddb8ed5e8de2764b9d5e8b55296ddf52c29e55960406eec664ef97332b8fe8df5dc686d33f8df9879a8de1dfae4c421483371a8ef553c02a1c06566e972665f05b7a9507be41ce6d084e1fb5e09b52c00828f13f9ee55d723b6aeefa7c15059cbf0589ab321b9a0a092cc4125519e9c55cb95ec04b9249998c4f815247667947"}, {0xdd, 0x8f, "3bdc610452db7449601b006c49938f43e85d5a2f11256687a030ce2f464cadbaad361d2cf6bb3739b8d3567b2c39509ffdd7b60855e710fd0d2a7bd6bcdda62547ffdd61ddecc0999ab21742ecd96563d5f3805fb3bf6f2814f7de7c2241af7763ee0c2c91ffd311eb3b5c30cafa9ac070d8e64aa01186775723791d2433ca39c0e6c2120d8d4b628d3120b4662552"}, {0xdd, 0xc6, "2cdd947d1b145f453c66fd01a01dde0f9f14e31daafe9dee9ac9fe557cfa1c3a63cc69a1096ebc932d918d32dfba0cd7a0204ca6ee8b74d2132ec689fba8a38501c94faf81ecff5fe90d0cfcbe557b610ff0d71ae5f75cc0e6a64d47a01644d4d45328dd51efb794a6075d9ea73ed9e051420f0e9a763e9cdee56e60a896a014d17bec50d0295d4d7b4382bb766524e41d09d671db8b9d9bcad684173e27e41f444578212fdd8cd008227605c83a496573018d55b04940070cfd03d41f352bf64b28e31f0ac9"}, {0xdd, 0x7d, "aa5e407fc495f1e04d1d45c3367540bbb01fcbd10568b3b5a64de3c9db978eeeacc4f9e660ce63f7f6f89c7559a94add5aff52944387de1a5f33bdeeaca1a03bdbb365341ec55b2810aa001709515c486cc85095f174e21f0efe22786874011eadcc9001b5b1e92d75014779ac402d989c1e772a81e3b20543748548e4"}, {0xdd, 0xc1, "ef0c7e765a3685fc4c66ae3bd7166c3e3bcfaa52545a8150d654c7b21922eca9c60414cd7456d1ce5ceeb5be309d03d6bb8b94b836332ca17c5e1564090e6502cf41e9f5b054e1e23f843a6f8609f8a03c4cabadb60409418f45415fd608b2a1679689a0ea5affba4e4fa5e54233a6bacd7e30648985dbaf0d8edcd60391a780543e40185a128cfa9e0358696ae5aa4fc63ded836722f021f27383cc6367437001fccd857e3b85e0ab62851d81afed0a1ae61498e337846b4dde089a8383242199"}, {0xdd, 0xb4, "db426440f84bf456895fb9e228b518c8091146bbdbd019292b0130d96aae78c8f9e0810fb10ed23363a3d032e9a86750718e9833ce8787bfd0cfb94abccfe8b1eb68a6c413d0bfe8d6154e37d9155f1d1614626391ca81c39a1d52d33c3d70c73064f99633f3ffc55007bdb5a71c800fe9afba9e38fdf7247bc4cb9564ee6a4fc40dd44ded234ca1d9db2193c9583c91993555aa32ee06276ee5f305ac390a00291814fa19aa2a38bc97ee59efae37a0e5bf2f53"}, {0xdd, 0xb8, "959dd6daae176c266e3d69d71dbe1b285315a06f8defb5e7d6b86ee308e6eed482c6b860eed282b453a84b3ff9f7634e0f6aff321af4193bf46a9d7fcb59cc9162a952b710811faf4ee249ab86f9a28e52db8b9022246d57dba3d18e8d241855bd006cdc63416835dd5efbf294d82093509e6cbce0f8367f7d31ac95275d94d7adcaf2927df6e38ec71ed5858e2c6bfce0681bac144a0f632c38ca8305f8d0bf6c8976502aeb3e497de3723d720d92e18b15f765bf9b8dd3"}, {0xdd, 0xdf, "830795556b673952266b82371d36c0d3dc2f9f8077a464a85c67b3db19ec33771317c1736b30cf5c4f10a048cf96c71e31a111e129de3dda242ed5578b5f5aaa68ea4ee05c435ba840b55d037cabf7b78d8b4198ead132a1ad9539ac245ca2690b547cd38031617aa33fced8ab972a9a51238d205d5a8bbe589d3a7d2f6b57b18dce3e38c225181da099b07dba254f6958ce1bfeb2d496500c858fb18338d4bdf8b814d57992e3820ce5616485b2ee30cc2c917c81c0a2aabba2a02eec9dff4e1ce4075cedf6b8e1dcbeddc5bcfdb9b68d408ae2b2595cb8fdac630a7c72ff"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x12, 0x7f, [@mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x4, [{0x3}, {0x1e, 0x1}, {0xc, 0x1}, {0x3}]}]}, @NL80211_ATTR_PROBE_RESP={0x66c, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8, 0xffff, 0x401]}, @beacon_params=[@NL80211_ATTR_IE={0x34, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x1, 0x2, 0x0, {0x9, 0x1ff8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x35}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}]}, @NL80211_ATTR_BEACON_TAIL={0x1f5, 0xf, [@fast_bss_trans={0x37, 0xfa, {0x0, 0x7, "0ec8c68a4290d798660520f4180b7b95", "0b3c1173b0871c04bcee6fdb60451620c7ac6cd54aad439a74afaa17f245053d", "4074cb00116b29e2f4d268e4dfc8cd4add82c6442d9b4c970430e63ff9d382cd", [{0x3, 0x16, "c9dce2e89d640905eb3da50eb6d82b75c6d465433784"}, {0x4, 0x15, "13a0bbb7aa63dc929a36a0a48f1c67fbcdafeff31c"}, {0x4, 0x22, "6479b8747c89b44ad3396934d2e954c312b150b2495bcb467b529e75eeb421803aad"}, {0x3, 0x24, "8fc74fca161006a1dd567e9a3cee8957393c4d7fe995dd11735dbf19c8e86a50463991e0"}, {0x3, 0x16, "b5522a15907f5cab0d77db94ec125c9cd397bb47e889"}, {0x2, 0xb, "c02cca71e024a46574fc0c"}, {0x3, 0x8, "dce92d7be0699950"}]}}, @supported_rates, @dsss={0x3, 0x1, 0x99}, @ht={0x2d, 0x1a, {0x800, 0x3, 0x5, 0x0, {0x4, 0x1c59, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x9e, 0xf}}, @mic={0x8c, 0x18, {0x2e2, "60bd3b4a4f7c", @long="254c36772ac3c0561afef425f189314d"}}, @chsw_timing={0x68, 0x4, {0xea, 0x8822}}, @measure_req={0x26, 0x8c, {0x3f, 0x5, 0xbb, "66907814545f7edb101d2dc736e140761ed199e65fff6368d757b115af83bf0677e170a377d25a210c2d481ee1d32e39fe0d14924efea57ba96e22f34d3db9b2748af23fd65bcdfc2a680a20b936f9d596f4da261f30b1c85f915aa668302f72e5a3e0a62439eaec91f2cf535be70b1a49fbf188c0e67929759de1524a0b89338079f462f3606667db"}}, @channel_switch={0x25, 0x3, {0x1, 0xb0}}, @prep={0x83, 0x1f, {{}, 0xfb, 0xf6, @device_a, 0x5, @void, 0x3, 0x9, @broadcast, 0xcc96}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x3d, 0x7f, [@ht={0x2d, 0x1a, {0x40, 0x3, 0x4, 0x0, {0x80000001, 0x5, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x986, 0x7}}, @mic={0x8c, 0x18, {0x364, "0e68003a93bb", @long="18e01aaeed01e12dae535cf42cc72350"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]]}, @NL80211_ATTR_CSA_IES={0x448, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x41f, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x23, 0x7f, [@tim={0x5, 0x1d, {0x9, 0x7f, 0x5, "9ed1562055171f5c5e1f57a3a87efb9fc6b90974ca39a2b889b7"}}]}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x13b8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000000) (async) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2a, 0x87, 0x65, 0x10, 0xbaf, 0xfa, 0xf15c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x60, 0xc5, 0x11, 0x40}}]}}]}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg2\x00'}) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 8m49.779263984s ago: executing program 6 (id=1730): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000880)="5cba91ff890d4027881b2e39e14c40157713f9036c5373e68c35e68bebedbddfe1db69f38db5cd3d780bd3841c9cdb1634ca8c32f434c922e86592f720d36a6615cd30bb922ce9fb64a44060956549a9ba672bf5d97a0de23f92da6b75a7167d2acc0b56e0470b5d5c3a0a3399b82fe4401bf4c7ff2e14497f1f14df8dd195449e7510f1456e835ac5b18da9bbccd6f691d080c1329eeb03e4", 0xfffffffffffffc17) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) io_uring_setup(0x4e83, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x2, 0x40000000}) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000240)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8m33.822168651s ago: executing program 35 (id=1730): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000880)="5cba91ff890d4027881b2e39e14c40157713f9036c5373e68c35e68bebedbddfe1db69f38db5cd3d780bd3841c9cdb1634ca8c32f434c922e86592f720d36a6615cd30bb922ce9fb64a44060956549a9ba672bf5d97a0de23f92da6b75a7167d2acc0b56e0470b5d5c3a0a3399b82fe4401bf4c7ff2e14497f1f14df8dd195449e7510f1456e835ac5b18da9bbccd6f691d080c1329eeb03e4", 0xfffffffffffffc17) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) io_uring_setup(0x4e83, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x2, 0x40000000}) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000240)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m32.387925501s ago: executing program 4 (id=2890): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x28}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2d0, 0x7, 0x9, 0x801, 0x70bd25, 0x25dfdbfb, {0x3, 0x0, 0x5}, [@generic="fca7fa4b4699f21f3da78527a33030be4eaf2e65110d7a66827a996e84b442429022430f9b328f5c7e80846174166e64a2713627a81ae05c1e5b13e141353885465d2531e33087ca3d74b7ed0bddecabd59718f006f6f9a1418c1c803724afca97b44daf9b253ee989461b60de5f52e08f34d315b9dabc7767a72084d701694bec9a507cebd7116b8b9fc4e3a5fafe813b23bfeae326abaf3529d8d382e4b0cfd1166aa8", @nested={0x218, 0x6e, 0x0, 0x1, [@typed={0xc, 0xfd, 0x0, 0x0, @u64=0x40000000000}, @generic="8864fd1d2a7a6d5dad8e88b441dde0f8ca88f29510199143fd6e31c9d3ac5c5427b95dee308b2b0fbe9e62584fea4f3247d47cd6bf001f0e72df1f49e1d1c8e2bd0d9b7f1f497a3884f605811e88330c8933312e7cdc83836ab077c32aa737fa253f9582", @generic="8696249e04e5d3b830e489ecd4d8e4de6ee9f0ee2e77ac3b1876ebf3801e34f1c2592c60eb4f3b6e8a734e678818472ee2ad549dabf0c54a140a690a9db771f3f293a62652ebe09e9c04d186753ed11e82d279396753be321b16d76cf892c76c59fd585ddde1a7c9875baa54766bb6db12ab662522db8ee9660c6fe65c9ee19a73eb4165f122cb13840fc4", @generic="f349678713f78ac7be052ec164d6f96777a97c2155194ff3e628c222fd406fc34761cc02277b9685ba4832e4436e5efe4eaa272a987c", @generic="0bd1900b7c844add5ad61a1f7fd6751dccbe03150502397f132cb352a34b10199c53ec5158a72a4f9d1d212080ac0f14b74d25ef84ff3bcc1670a0934e4b23f8fe4fafc9f4cec4dd523c69fab9b7da441327270a2619939942ca4c0ce67f041221960b3393f1bc25e8d2a052b4738f4ce368d5b9e85aa755eeb3095185ce6a3f7579791b7684033aec8c60175a68947b03e2aba00316d1bc52a2e4478fa7ccf5", @generic="bff14d55b023803a3e8d95622704efb93edbdc41a92a92ffb64412ceb12602561365dffde06db6f3236515bcb9806133aaea0ef0c03a65c86572496b57f2d9437a3e92"]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20048000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x5a, 0xa, 0x0, "3258c546dacccfae1e008faa022c1e00f4bf40074000000200"}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) 2m30.582078081s ago: executing program 4 (id=2896): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r0 = syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x567, 0xeffd, 0x0, 0x0, 0x59) 2m30.256975318s ago: executing program 4 (id=2898): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setfsgid(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) lchown(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000008580)) newfstatat(0xffffffffffffff9c, &(0x7f00000085c0)='./file0\x00', &(0x7f0000008600), 0x2000) lstat(&(0x7f0000008680)='./file0\x00', &(0x7f00000086c0)) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) stat(&(0x7f0000008740)='./bus\x00', &(0x7f0000000240)) getresuid(&(0x7f0000008800), &(0x7f0000008840), &(0x7f0000008880)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)={0x14, r5, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) io_setup(0x9, &(0x7f0000000040)) 2m29.270151201s ago: executing program 4 (id=2900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe0}, {0x0, 0x0, 0x3, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xc0, 0x0, 0x0, 0x0, 0x7f}], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m28.924946208s ago: executing program 4 (id=2903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x301000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b508020000000000db8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff06ffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x101, 0x0, 0xe, 0xbfff, 0x19, "ec28a10800000007"}) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req={0x8, 0x84c, 0x40, 0xfffffff1}, 0x10) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028a0003010000000904000000010100000a24010000000201020824040000813edd090401000001020000090401010101020000072401000000000d2402010900010081fbac2923090501090000000000072501000000000904020000010200000904020101010200000724010000000008240201060107090905820920000000000700"], 0x0) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="5c00000013006bcc9e3be35c6e17b931076b876c1d0000007ea60864160af36514001ac00400020004000400eab556a705251e61aac110e5f66f8294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c57f74ff2418549902", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24008880) setsockopt$inet_buf(r7, 0x0, 0x1f, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000feffffffffffffff00"/24]) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x1, 0x6000006, 0x0, {0x1}}, 0x14}}, 0x0) 2m22.079961327s ago: executing program 4 (id=2917): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000014}) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m6.734917632s ago: executing program 36 (id=2917): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000014}) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.991572144s ago: executing program 8 (id=3365): syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000015c0), 0x2) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000001600)={0xa, 0x4}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) dup(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 8.870832438s ago: executing program 8 (id=3366): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) unshare(0x2c060000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0200000200000005cd000005000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000280070673effeb09b5351f5bde05400000000018789ba916638814e57081b494e10000000000000000020008005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf0500000600000000000000cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) unshare(0x24020400) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) 7.281045086s ago: executing program 8 (id=3371): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x10400) fchdir(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x905, 0xc6800) ioctl$DRM_IOCTL_AGP_BIND(r7, 0x40106436, &(0x7f0000000040)={0x0, 0x1ff}) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0x89, &(0x7f0000000000), &(0x7f0000000080)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000800140000000000080007007f000001050009000400000008000a00", @ANYRES32=r6, @ANYBLOB="c31a276e5877ba70f16a759177a16339ed63b0c02603b88fcc6f0fe9c5fc3f961a9bfde7cb"], 0x58}}, 0x0) 5.839617265s ago: executing program 8 (id=3383): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000600), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfefffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="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"}) r2 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x208}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_read(r2, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x12}, {0x6, 0x7ff, 0xe58, 0x3, [0x7fff, 0xf721, 0x9, 0x4, 0xe12c]}}}}, 0x1f) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x14c, 0x24, 0xe0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x108, 0x2, {{0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_CORR={0x10, 0x1, {0x4000000, 0xfffffffe}}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14, 0x6, {0xffffff80, 0x6, 0x8, 0x3}}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0xfffffffd}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0xbfde}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x9, 0x4, 0x1, 0xfffffffd}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x6d}}]}}}]}, 0x14c}}, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x8090, 0x0) sendto$packet(r3, &(0x7f0000000140)="34a9e3f330d564d1e8947618f32bb4b346ef21baba6a04405a43a66852fe74", 0x1f, 0x0, &(0x7f0000000180)={0x11, 0x3, r6, 0x1, 0xd, 0x6, @multicast}, 0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) 5.772953526s ago: executing program 9 (id=3384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="9b602f7602757d03867be6e10194b3a2ee0142c8d7271c28514b5022ef18b24e2a2d8c0e916cbd9d2a51c8bc7c2f79151e6a6f5e97e04403e684a4b1c3a9d3dd63d841ca30b2adcfd31004c5ec56e7fa62857b56c8e44c4c5a18225af04e1765d37aae64f7fd67f8a43cc8819978715d5a5399bf44a00da36bb4b2cdddf639515d1dd429940f9fca321d9369ed57b494075c3cd245dbf670ceabedea72752503c00d0c2834e317b5b1ae50c5ca0956b608e5d3f88cfa", 0xb6}, {&(0x7f0000000300)="d7e7d9a723333503897bacc2cbf4f74293012559737362321a44d7c5fee37b989532785d076c70dc744e9be8f8acdf869667bc42334262717cb8b8965797c957188fd8de8728ab0872778ff34c78533110", 0x51}, {&(0x7f0000000100)="021d27c7c05890229bf115c2f94f027f8760e6e610260ed4c63121e06042edb067f6f3a9d2cbf22c", 0x28}, {&(0x7f0000008a00)="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", 0x1000}, {&(0x7f0000000180)="1152ffa1fe7236564ff95a007df70b4ba8895a79fdb06c", 0x17}, {&(0x7f0000000280)="0cfe45cc1a7360094207458f53e3e35fc35798dcff69c4420887fc335e3c3bb70137fc380104f2c25bcac85ffc0769", 0x2f}, {&(0x7f0000000500)="51809becaa83cb355bc03877598f57fce82aec7d5ee9142b8fd3710efcc0628bd9a4b54431460e7ca8df27343dceadbf8244536580f8a725573d9f653cf255003914a0e3332aba8bc51ffed1f7d3ca0493320d1ba51acdaab11a7b64730c053bce7d2415c5ed6a5d29a2cdc35045ecb8f0bc2b078e7180294167f508e5bab52534ac181d751cf2b6bb396cbee4792a2410050652377e20da93c01c21c855fefd1ee29794931322386adb968dbfc1ce2331a95ceb8971d5c325bae69ac7ba2a5436e7b82b77e2ce", 0xc7}, {&(0x7f0000000600)="3efd194f29101cf9d19c054853bbb010d576a41991dd59575ea53f6db16f51635456a3f4ee05217ab96d1079e41b883d2bd1ddd139333f8e967f4599ddde2b73f37e2877bfeb486660a0e85d6a0551", 0x4f}, {&(0x7f0000000680)="c5fb075b3e8113b081410886c8f6b3a0d9a312108bfdfa5f949c33f88f72dc7eafe7647317327a6a1910bd777ed9ff715da1e5d948e4f49893bb64fce5f46f857590c8d113283b30d5c07a6283c2e5859ef06b4820d00377a65475c9b4c26a3d993ec5f0f28d46aa54bd6d1dad62f80a612df23390c4d676794f1e04f0de4cf9fe70125a294bec", 0x87}], 0x9, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x800}}], 0x1, 0x0) 5.669615596s ago: executing program 9 (id=3385): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setfsgid(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) lchown(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000008580)) newfstatat(0xffffffffffffff9c, &(0x7f00000085c0)='./file0\x00', &(0x7f0000008600), 0x2000) lstat(&(0x7f0000008680)='./file0\x00', &(0x7f00000086c0)) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) stat(&(0x7f0000008740)='./bus\x00', &(0x7f0000000240)) getresuid(&(0x7f0000008800), &(0x7f0000008840), &(0x7f0000008880)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)={0x14, r5, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) io_setup(0x9, &(0x7f0000000040)) 4.692984965s ago: executing program 7 (id=3387): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioperm(0x7f, 0x5, 0x84) fremovexattr(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) lseek(0xffffffffffffffff, 0xfffffffffffffc01, 0x0) pipe2$watch_queue(&(0x7f0000000340), 0x80) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000300)={0x8, 0x1, 0x0, {0x5, 0x1, 0x9, 0x4}}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0x416f, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1b, 0x4007, @fd, 0x6, 0x0, 0x0, 0x11, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x567, 0xae13, 0x0, 0x0, 0xfffffc37) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0x800455d1, 0xfffffffffffffffd) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000500)=0x8, 0x4) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) 4.592045514s ago: executing program 9 (id=3389): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x35, 0x94, 0x97, 0x40, 0x110a, 0x1450, 0xc2c6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xf6, 0xb9}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x2710}, 0x10) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r5, &(0x7f0000000000)='\"', 0x1) syz_usb_connect$cdc_ncm(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x81, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9c5d5d573618"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x6, 0xb7, 0x43}, {0x6, 0x24, 0x1a, 0x5, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x4, 0xfc, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x9, 0x1f}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x69, 0x21, 0x98, 0x8, 0x32}, 0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140a}}]}) syz_usb_control_io(r4, 0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) 4.450734514s ago: executing program 7 (id=3390): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e24000a000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 4.265562909s ago: executing program 7 (id=3393): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x10400) fchdir(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x905, 0xc6800) ioctl$DRM_IOCTL_AGP_BIND(r7, 0x40106436, &(0x7f0000000040)={0x0, 0x1ff}) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0x89, &(0x7f0000000000), &(0x7f0000000080)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000800140000000000080007007f000001050009000400000008000a00", @ANYRES32=r6, @ANYBLOB="c31a276e5877ba70f16a759177a16339ed63b0c02603b88fcc6f0fe9c5fc3f961a9bfde7cb"], 0x58}}, 0x0) 3.597173833s ago: executing program 1 (id=3394): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x20000887ff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f00000000c0)=0x7, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r8 = userfaultfd(0x801) socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000000096483812bba4cc02c051a8c517e2344a4d9f5bbc7cb69b4074b10c8c3b4bca621d60e8ade1b48febbd1a9484ee8852fb1e61d9f8904e801d13f47a32beef734eceb8a3e4bba4f9588f50b5da29ce68a6db1d42b2cd116ee6b6373c0a1be3233054753aa6749e556d3ec411aafb46d3d8e6be2128bac2c9f4762bdad56d47bd8d5fb78e5f3afed7298b062eb197b85681369779693425590b25d78fcd9ee648a2e08fc9466ba3e3e405c7c1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000215900000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000118110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000000b70000000000000095000000000000000000000000000000000000000000009542ba754e6d719193f7df2a50b21291c1b56f60dd0c478892a212d479bce32aaac4a30002215f51ad32d82df207134677417d803dbadae87f8091e6f212c6943d"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xb0}}, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 2.7420862s ago: executing program 0 (id=3395): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="9b602f7602757d03867be6e10194b3a2ee0142c8d7271c28514b5022ef18b24e2a2d8c0e916cbd9d2a51c8bc7c2f79151e6a6f5e97e04403e684a4b1c3a9d3dd63d841ca30b2adcfd31004c5ec56e7fa62857b56c8e44c4c5a18225af04e1765d37aae64f7fd67f8a43cc8819978715d5a5399bf44a00da36bb4b2cdddf639515d1dd429940f9fca321d9369ed57b494075c3cd245dbf670ceabedea72752503c00d0c2834e317b5b1ae50c5ca0956b608e5d3f88cfa", 0xb6}, {&(0x7f0000000300)="d7e7d9a723333503897bacc2cbf4f74293012559737362321a44d7c5fee37b989532785d076c70dc744e9be8f8acdf869667bc42334262717cb8b8965797c957188fd8de8728ab0872778ff34c78533110", 0x51}, {&(0x7f0000000100)="021d27c7c05890229bf115c2f94f027f8760e6e610260ed4c63121e06042edb067f6f3a9d2cbf22c", 0x28}, {&(0x7f0000008a00)="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", 0x1000}, {&(0x7f0000000180)="1152ffa1fe7236564ff95a007df70b4ba8895a79fdb06c", 0x17}, {&(0x7f0000000280)="0cfe45cc1a7360094207458f53e3e35fc35798dcff69c4420887fc335e3c3bb70137fc380104f2c25bcac85ffc0769", 0x2f}, {&(0x7f0000000500)="51809becaa83cb355bc03877598f57fce82aec7d5ee9142b8fd3710efcc0628bd9a4b54431460e7ca8df27343dceadbf8244536580f8a725573d9f653cf255003914a0e3332aba8bc51ffed1f7d3ca0493320d1ba51acdaab11a7b64730c053bce7d2415c5ed6a5d29a2cdc35045ecb8f0bc2b078e7180294167f508e5bab52534ac181d751cf2b6bb396cbee4792a2410050652377e20da93c01c21c855fefd1ee29794931322386adb968dbfc1ce2331a95ceb8971d5c325bae69ac7ba2a5436e7b82b77e2ce", 0xc7}, {&(0x7f0000000600)="3efd194f29101cf9d19c054853bbb010d576a41991dd59575ea53f6db16f51635456a3f4ee05217ab96d1079e41b883d2bd1ddd139333f8e967f4599ddde2b73f37e2877bfeb486660a0e85d6a0551", 0x4f}, {&(0x7f0000000680)="c5fb075b3e8113b081410886c8f6b3a0d9a312108bfdfa5f949c33f88f72dc7eafe7647317327a6a1910bd777ed9ff715da1e5d948e4f49893bb64fce5f46f857590c8d113283b30d5c07a6283c2e5859ef06b4820d00377a65475c9b4c26a3d993ec5f0f28d46aa54bd6d1dad62f80a612df23390c4d676794f1e04f0de4cf9fe70125a294bec", 0x87}], 0x9, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x800}}], 0x1, 0x0) 2.712485831s ago: executing program 0 (id=3396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x111101, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xa) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x4004550c, &(0x7f0000000040)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) 2.641621118s ago: executing program 1 (id=3397): modify_ldt$write2(0x11, &(0x7f0000000240)={0x7fff, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@multicast1}}]}, 0x10c}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x1, {0x12, 0x8000, 0x0, 0x9, 0x7fffffffffffffff}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0xfffe, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) 2.518048216s ago: executing program 1 (id=3398): syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000015c0), 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 2.513163914s ago: executing program 7 (id=3399): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2a, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd70e181717f1dcdd133ae"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) 2.066485235s ago: executing program 7 (id=3400): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80), 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000780)={0xa, @sdr={0x39565559}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000"], 0xb8}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000880)="5cba91ff890d4027881b2e39e14c40157713f9036c5373e68c35e68bebedbddfe1db69f38db5cd3d780bd3841c9cdb1634ca8c32f434c922e86592f720d36a6615cd30bb922ce9fb64a44060956549a9ba672bf5d97a0de23f92da6b75a7167d2acc0b56e0470b5d5c3a0a3399b82fe4401bf4c7ff2e14497f1f14df8dd195449e7510f1456e835ac5b18da9bbccd6f691d080c1329eeb03e4", 0xfffffffffffffc17) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) io_uring_setup(0x4e83, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x2, 0x40000000}) ioctl$SNDCTL_DSP_STEREO(r5, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)=0xfffffff9) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000240)) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.782762939s ago: executing program 0 (id=3401): shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.4143351s ago: executing program 1 (id=3402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ef, &(0x7f0000000000)={r1}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local}) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.41302436s ago: executing program 9 (id=3403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e24000a000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 1.358131507s ago: executing program 0 (id=3404): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000100), 0x3c) 1.357621935s ago: executing program 8 (id=3405): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffed8, &(0x7f0000000240), 0x1}) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000000000000290000000400000000000000000000001000000000000000290000000b0000000000000000000000594898b02e239a7d70aed7c87b7fc459a64c76487131847e565bb62a22"], 0x24}}], 0x1, 0x0) r2 = dup3(r0, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0xfffffff2, &(0x7f0000000000)) socket$unix(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x24e) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5450, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b7030000000000008500ee000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xfffffffffffffeb2) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x30e, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4040044) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.310597392s ago: executing program 7 (id=3406): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0xc0103, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents64(r5, 0x0, 0x0) getdents(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0xa, 0x0, 0x2, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0xf5}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.248591394s ago: executing program 9 (id=3407): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="9b602f7602757d03867be6e10194b3a2ee0142c8d7271c28514b5022ef18b24e2a2d8c0e916cbd9d2a51c8bc7c2f79151e6a6f5e97e04403e684a4b1c3a9d3dd63d841ca30b2adcfd31004c5ec56e7fa62857b56c8e44c4c5a18225af04e1765d37aae64f7fd67f8a43cc8819978715d5a5399bf44a00da36bb4b2cdddf639515d1dd429940f9fca321d9369ed57b494075c3cd245dbf670ceabedea72752503c00d0c2834e317b5b1ae50c5ca0956b608e5d3f88cfa", 0xb6}, {&(0x7f0000000300)="d7e7d9a723333503897bacc2cbf4f74293012559737362321a44d7c5fee37b989532785d076c70dc744e9be8f8acdf869667bc42334262717cb8b8965797c957188fd8de8728ab0872778ff34c78533110", 0x51}, {&(0x7f0000000100)="021d27c7c05890229bf115c2f94f027f8760e6e610260ed4c63121e06042edb067f6f3a9d2cbf22c", 0x28}, {&(0x7f0000008a00)="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", 0x1000}, {&(0x7f0000000180)="1152ffa1fe7236564ff95a007df70b4ba8895a79fdb06c", 0x17}, {&(0x7f0000000280)="0cfe45cc1a7360094207458f53e3e35fc35798dcff69c4420887fc335e3c3bb70137fc380104f2c25bcac85ffc0769", 0x2f}, {&(0x7f0000000500)="51809becaa83cb355bc03877598f57fce82aec7d5ee9142b8fd3710efcc0628bd9a4b54431460e7ca8df27343dceadbf8244536580f8a725573d9f653cf255003914a0e3332aba8bc51ffed1f7d3ca0493320d1ba51acdaab11a7b64730c053bce7d2415c5ed6a5d29a2cdc35045ecb8f0bc2b078e7180294167f508e5bab52534ac181d751cf2b6bb396cbee4792a2410050652377e20da93c01c21c855fefd1ee29794931322386adb968dbfc1ce2331a95ceb8971d5c325bae69ac7ba2a5436e7b82b77e2ce", 0xc7}, {&(0x7f0000000600)="3efd194f29101cf9d19c054853bbb010d576a41991dd59575ea53f6db16f51635456a3f4ee05217ab96d1079e41b883d2bd1ddd139333f8e967f4599ddde2b73f37e2877bfeb486660a0e85d6a0551", 0x4f}, {&(0x7f0000000680)="c5fb075b3e8113b081410886c8f6b3a0d9a312108bfdfa5f949c33f88f72dc7eafe7647317327a6a1910bd777ed9ff715da1e5d948e4f49893bb64fce5f46f857590c8d113283b30d5c07a6283c2e5859ef06b4820d00377a65475c9b4c26a3d993ec5f0f28d46aa54bd6d1dad62f80a612df23390c4d676794f1e04f0de4cf9fe70125a294bec", 0x87}], 0x9, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x800}}], 0x1, 0x0) 1.173947375s ago: executing program 0 (id=3408): r0 = gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x2, 0x5004) syz_emit_ethernet(0x79, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@generic={0x809b, "f3295a1ed5f3ec6b318b10fab906d268eb8d717694a04db351423091c9ae47e1c97669faf92210af5bcb9d1f8caf2edc8a2928e667c9a2f1d824fe7586915b19e66dc499fe2541fd382c65dd040d853f06ab36af71118aeda104840754d5bc85360d2e978d5963c200a53c"}}}, &(0x7f00000001c0)={0x0, 0x3, [0xf43, 0x916, 0x5d0, 0xb72]}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000000)={&(0x7f0000000480)="26445f288fed73247b0392688816dea5dbfcae8d3d2d5f727614ee64e3baf6b125906addad0a5fb773b741ee0cae9c400a96cd4193c4cdabca506416800ff8c8df814779e463a04a4c39fa42b1f202bc64840ff4b15ce27ece8f0c2d9c33ceb90cc4f2b80d57a2127fe847208b91846cee85b8596d36395a49e0f0a4d328b5b4b70c56b38e10a06483363c4553553273e9ccfbcc05e699f1714c1ec6d663c66b11c2cffc3dfa76a48e80d8b4c49be524aa6a840376aa0769790dbdee383c61d73819a0e141498d1837d26f31d75943e618261c7ea29c59697d73e8a372a4ec79", 0xe0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x2, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4002004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1d}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xff, 0x4, 0x8}}}]}]}]}}]}, 0x50}}, 0x2040010) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x184, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_USERDATA={0x64, 0xd, 0x1, 0x0, "d12bca7fffecde27eaf56f60ca8b821c9426ae59d56d05a3c4bfd2a8e951bacb67b6a06d387fbbe3451b3e811bfe93e040a80c8138ca199566c634c2075d810190330bf2034c46f928c544e8493b5a90b1dd9cf72889a809ae30af4f2527b526"}, @NFTA_SET_USERDATA={0xdd, 0xd, 0x1, 0x0, "6ce3f12f07ac7c1c495c24549a5c8144da61d193a78d507783720c3462e02e486f689ea3c0d61244b25575d493a93883133e14ed3acccd4ae775f0f795af317e46a8f3cd136c3199d71d7394cdb98c6fd90d4a1fdbdf3588ca595f17f6b5357ad2f1743e179620389d448f1cf57e39793badedcdf5998c362f3c36d2d6ec8f3b84b35e1f7f508643eb9a727b0c737da84f24aef003f18ba1cf6275b3c0d189a4798c867c0c3ec285560b4491bfe2484a97c7bf7d93e82a000b81b424f158a448abcfcf69b2ce2db1e35a552ac5e83c11236c5bfae45c17ac21"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.142076053s ago: executing program 9 (id=3409): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x10400) fchdir(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x905, 0xc6800) ioctl$DRM_IOCTL_AGP_BIND(r7, 0x40106436, &(0x7f0000000040)={0x0, 0x1ff}) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0x89, &(0x7f0000000000), &(0x7f0000000080)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000800140000000000080007007f000001050009000400000008000a00", @ANYRES32=r6, @ANYBLOB="c31a276e5877ba70f16a759177a16339ed63b0c02603b88fcc6f0fe9c5fc3f961a9bfde7cb"], 0x58}}, 0x0) 1.118931495s ago: executing program 1 (id=3410): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2a, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002cbd70e181717f1dcdd133ae"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) 1.029997082s ago: executing program 0 (id=3411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x20, 0x87, "5274a552cb35c8ab42a4894c9d8aa83866cb5ed2297ea43678b2f4b1d97be2a42c990267ddc8420d6d128a0c0a8bd16be391f1e53d0625299a26246e244a51e35b6149845c10c63040e7f0231fa46b6fe87f2c3387d53c01cc3bd7d0c0ef01595b31a5c9bdb69af27442f8baa41e87d3d7fc84980445efca1841ab36ea2b0f68f312ac4841265a"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) tkill(r3, 0x25) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086"], 0xffdd) ioctl$USBDEVFS_SUBMITURB(r7, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x2c, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000001380)='user\x00', &(0x7f00000013c0)={'syz', 0x3}, &(0x7f0000001400)='blacklist\x00', 0x0) fanotify_init(0x10, 0x80000) 368.041311ms ago: executing program 8 (id=3412): syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000015c0), 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 0s ago: executing program 1 (id=3413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x4a0801, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xa) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r5, 0x1, 0x0, 0x8}) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000280), 0x10) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x1018d41, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, 0x0) kernel console output (not intermixed with test programs): [T15123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.890765][T15123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1025.900625][T15123] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1025.910486][T15123] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.263120][T15123] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1026.272530][T15123] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1026.280796][T15123] usb 8-1: Manufacturer: syz [ 1026.293674][T15123] usb 8-1: config 0 descriptor?? [ 1029.078169][T16159] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2738'. [ 1029.343544][T16166] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1029.343544][T16166] program syz.1.2741 not setting count and/or reply_len properly [ 1029.369566][T15123] rc_core: IR keymap rc-hauppauge not found [ 1029.375648][T15123] Registered IR keymap rc-empty [ 1029.402042][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1029.461254][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1029.590520][T16173] tipc: Started in network mode [ 1029.595762][T16173] tipc: Node identity ac14140f, cluster identity 4711 [ 1029.604354][T16173] tipc: New replicast peer: 255.255.255.255 [ 1029.611494][T16173] tipc: Enabled bearer , priority 10 [ 1029.847312][ T5882] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1030.146728][T15123] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1030.146841][ T5882] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1030.164900][T15123] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input35 [ 1030.202395][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1030.237491][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1030.260572][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.270739][ T5882] usb 2-1: config 0 has no interface number 0 [ 1030.276844][ T5882] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1030.287128][ T5882] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.339798][ T5882] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1030.357500][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.365539][ T5882] usb 2-1: Product: syz [ 1030.375986][ T5882] usb 2-1: Manufacturer: syz [ 1030.380795][ T5882] usb 2-1: SerialNumber: syz [ 1030.387639][ T5882] usb 2-1: config 0 descriptor?? [ 1030.547456][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1031.352372][ T8] tipc: Node number set to 2886997007 [ 1031.418285][T16182] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2744'. [ 1031.470162][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1031.790470][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1031.938841][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1031.963830][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1031.987214][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1032.012098][T16192] FAULT_INJECTION: forcing a failure. [ 1032.012098][T16192] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.029872][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1032.062889][T15123] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1032.074601][T16192] CPU: 1 UID: 0 PID: 16192 Comm: syz.8.2748 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1032.085465][T16192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1032.095551][T16192] Call Trace: [ 1032.098869][T16192] [ 1032.101824][T16192] dump_stack_lvl+0x241/0x360 [ 1032.106531][T16192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.111764][T16192] ? __pfx__printk+0x10/0x10 [ 1032.116382][T16192] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 1032.122312][T16192] ? __pfx___might_resched+0x10/0x10 [ 1032.127631][T16192] should_fail_ex+0x3b0/0x4e0 [ 1032.132343][T16192] should_failslab+0xac/0x100 [ 1032.137050][T16192] __kmalloc_cache_node_noprof+0x74/0x300 [ 1032.142790][T16192] ? kasan_save_track+0x3f/0x80 [ 1032.147661][T16192] ? __get_vm_area_node+0x113/0x270 [ 1032.152968][T16192] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1032.158543][T16192] __get_vm_area_node+0x113/0x270 [ 1032.163596][T16192] ? ksys_read+0x183/0x2b0 [ 1032.168036][T16192] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 1032.173955][T16192] ? vb2_vmalloc_alloc+0xf2/0x340 [ 1032.179035][T16192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1032.185475][T16192] ? __kasan_kmalloc+0x98/0xb0 [ 1032.190259][T16192] ? vb2_vmalloc_alloc+0xb5/0x340 [ 1032.195307][T16192] vmalloc_user_noprof+0x74/0x80 [ 1032.200261][T16192] ? vb2_vmalloc_alloc+0xf2/0x340 [ 1032.205300][T16192] vb2_vmalloc_alloc+0xf2/0x340 [ 1032.210171][T16192] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1032.215647][T16192] __vb2_queue_alloc+0xa0b/0x16f0 [ 1032.220713][T16192] vb2_core_reqbufs+0xd2e/0x17c0 [ 1032.225687][T16192] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1032.231085][T16192] ? __vb2_init_fileio+0x1e9/0xf90 [ 1032.236217][T16192] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1032.241791][T16192] __vb2_init_fileio+0x319/0xf90 [ 1032.246773][T16192] __vb2_perform_fileio+0x31a/0x17b0 [ 1032.252082][T16192] ? vb2_fop_read+0x106/0x330 [ 1032.256780][T16192] ? __pfx___mutex_lock+0x10/0x10 [ 1032.261833][T16192] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1032.267593][T16192] vb2_fop_read+0x247/0x330 [ 1032.272123][T16192] v4l2_read+0x1a4/0x2c0 [ 1032.276389][T16192] ? __pfx_v4l2_read+0x10/0x10 [ 1032.281184][T16192] vfs_read+0x1fc/0xb70 [ 1032.285380][T16192] ? __pfx_vfs_read+0x10/0x10 [ 1032.290076][T16192] ? __fget_files+0x29/0x470 [ 1032.294691][T16192] ? __fget_files+0x3f3/0x470 [ 1032.299388][T16192] ? __fget_files+0x29/0x470 [ 1032.304007][T16192] ? fdget_pos+0x19a/0x320 [ 1032.308447][T16192] ksys_read+0x183/0x2b0 [ 1032.312708][T16192] ? __pfx_ksys_read+0x10/0x10 [ 1032.317488][T16192] ? do_syscall_64+0x100/0x230 [ 1032.322270][T16192] ? do_syscall_64+0xb6/0x230 [ 1032.326961][T16192] do_syscall_64+0xf3/0x230 [ 1032.331481][T16192] ? clear_bhb_loop+0x35/0x90 [ 1032.336184][T16192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.342095][T16192] RIP: 0033:0x7f44bfd7e719 [ 1032.346523][T16192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.366161][T16192] RSP: 002b:00007f44c0aec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1032.374613][T16192] RAX: ffffffffffffffda RBX: 00007f44bff35f80 RCX: 00007f44bfd7e719 [ 1032.382609][T16192] RDX: 00000000000000f4 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1032.390605][T16192] RBP: 00007f44c0aec090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.398603][T16192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.406746][T16192] R13: 0000000000000000 R14: 00007f44bff35f80 R15: 00007fffaa204688 [ 1032.414761][T16192] [ 1032.417936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.438026][T15123] mceusb 8-1:0.0: Registered И with mce emulator interface version 1 [ 1032.446239][T15123] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1032.467918][ T5882] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1032.467980][T15123] usb 8-1: USB disconnect, device number 20 [ 1032.485459][ T5882] usb 2-1: USB disconnect, device number 40 [ 1032.504189][T16192] syz.8.2748: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1032.530938][T16192] CPU: 0 UID: 0 PID: 16192 Comm: syz.8.2748 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1032.541753][T16192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1032.543335][T16197] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1032.551817][T16192] Call Trace: [ 1032.551861][T16192] [ 1032.551872][T16192] dump_stack_lvl+0x241/0x360 [ 1032.551903][T16192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.551926][T16192] ? __pfx__printk+0x10/0x10 [ 1032.581746][T16192] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1032.588197][T16192] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1032.594737][T16192] warn_alloc+0x278/0x410 [ 1032.599106][T16192] ? __pfx_warn_alloc+0x10/0x10 [ 1032.603991][T16192] ? kasan_save_track+0x3f/0x80 [ 1032.608882][T16192] ? __get_vm_area_node+0x113/0x270 [ 1032.614130][T16192] ? __get_vm_area_node+0x261/0x270 [ 1032.619369][T16192] ? ksys_read+0x183/0x2b0 [ 1032.624006][T16192] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 1032.629965][T16192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1032.636339][T16192] ? __kasan_kmalloc+0x98/0xb0 [ 1032.641142][T16192] ? vb2_vmalloc_alloc+0xb5/0x340 [ 1032.646215][T16192] vmalloc_user_noprof+0x74/0x80 [ 1032.651195][T16192] ? vb2_vmalloc_alloc+0xf2/0x340 [ 1032.656254][T16192] vb2_vmalloc_alloc+0xf2/0x340 [ 1032.661142][T16192] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1032.666631][T16192] __vb2_queue_alloc+0xa0b/0x16f0 [ 1032.671715][T16192] vb2_core_reqbufs+0xd2e/0x17c0 [ 1032.676666][T16192] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1032.682061][T16192] ? __vb2_init_fileio+0x1e9/0xf90 [ 1032.687208][T16192] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1032.692793][T16192] __vb2_init_fileio+0x319/0xf90 [ 1032.697782][T16192] __vb2_perform_fileio+0x31a/0x17b0 [ 1032.703103][T16192] ? vb2_fop_read+0x106/0x330 [ 1032.707811][T16192] ? __pfx___mutex_lock+0x10/0x10 [ 1032.712873][T16192] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1032.718638][T16192] vb2_fop_read+0x247/0x330 [ 1032.723178][T16192] v4l2_read+0x1a4/0x2c0 [ 1032.727444][T16192] ? __pfx_v4l2_read+0x10/0x10 [ 1032.732257][T16192] vfs_read+0x1fc/0xb70 [ 1032.736451][T16192] ? __pfx_vfs_read+0x10/0x10 [ 1032.741167][T16192] ? __fget_files+0x29/0x470 [ 1032.745967][T16192] ? __fget_files+0x3f3/0x470 [ 1032.750744][T16192] ? __fget_files+0x29/0x470 [ 1032.755388][T16192] ? fdget_pos+0x19a/0x320 [ 1032.759838][T16192] ksys_read+0x183/0x2b0 [ 1032.764114][T16192] ? __pfx_ksys_read+0x10/0x10 [ 1032.768912][T16192] ? do_syscall_64+0x100/0x230 [ 1032.773711][T16192] ? do_syscall_64+0xb6/0x230 [ 1032.778424][T16192] do_syscall_64+0xf3/0x230 [ 1032.782958][T16192] ? clear_bhb_loop+0x35/0x90 [ 1032.787668][T16192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.793588][T16192] RIP: 0033:0x7f44bfd7e719 [ 1032.798023][T16192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.817662][T16192] RSP: 002b:00007f44c0aec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1032.826094][T16192] RAX: ffffffffffffffda RBX: 00007f44bff35f80 RCX: 00007f44bfd7e719 [ 1032.834064][T16192] RDX: 00000000000000f4 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1032.842042][T16192] RBP: 00007f44c0aec090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.850471][T16192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.858473][T16192] R13: 0000000000000000 R14: 00007f44bff35f80 R15: 00007fffaa204688 [ 1032.866497][T16192] [ 1032.886476][T16192] Mem-Info: [ 1032.889897][T16192] active_anon:303 inactive_anon:3218 isolated_anon:0 [ 1032.889897][T16192] active_file:23407 inactive_file:35808 isolated_file:0 [ 1032.889897][T16192] unevictable:768 dirty:156 writeback:0 [ 1032.889897][T16192] slab_reclaimable:6360 slab_unreclaimable:105852 [ 1032.889897][T16192] mapped:21946 shmem:1410 pagetables:643 [ 1032.889897][T16192] sec_pagetables:0 bounce:0 [ 1032.889897][T16192] kernel_misc_reclaimable:0 [ 1032.889897][T16192] free:1329145 free_pcp:3058 free_cma:0 [ 1032.937292][T14824] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1032.965844][T16192] Node 0 active_anon:1212kB inactive_anon:12872kB active_file:93496kB inactive_file:143232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87724kB dirty:624kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11628kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no [ 1033.014719][T16192] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1033.059977][T16192] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.087118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.107252][T14824] usb 5-1: device descriptor read/64, error -71 [ 1033.123989][T16192] lowmem_reserve[]: 0 2465 2466 0 0 [ 1033.144358][T16192] Node 0 DMA32 free:1390688kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1208kB inactive_anon:18820kB active_file:92712kB inactive_file:143180kB unevictable:1536kB writepending:648kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:10664kB local_pcp:768kB free_cma:0kB [ 1033.175159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.243174][T16216] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1033.496529][T16192] lowmem_reserve[]: 0 0 0 0 0 [ 1034.042742][T16192] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:784kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1034.076930][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2759'. [ 1034.080239][T16192] lowmem_reserve[]: 0 0 0 0 0 [ 1034.091192][T14824] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1034.099255][T16192] Node 1 Normal free:3900132kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:6144kB free_cma:0kB [ 1034.131238][T16192] lowmem_reserve[]: 0 0 0 0 0 [ 1034.136026][T16192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1034.154474][T16192] Node 0 DMA32: 9*4kB (E) 32*8kB (UE) 487*16kB (UME) 438*32kB (UME) 331*64kB (UME) 120*128kB (UME) 46*256kB (UME) 36*512kB (UME) 16*1024kB (UME) 10*2048kB (ME) 308*4096kB (UM) = 1387284kB [ 1034.173948][T16192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1034.190982][T16192] Node 1 Normal: 209*4kB (UME) 50*8kB (UME) 45*16kB (UME) 190*32kB (UME) 86*64kB (UME) 32*128kB (UME) 18*256kB (UME) 10*512kB (UME) 2*1024kB (U) 6*2048kB (UME) 942*4096kB (UM) = 3900132kB [ 1034.210584][T16192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.220730][T16192] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1034.230255][T16192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.277652][T16192] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1034.288104][T16192] 62956 total pagecache pages [ 1034.293074][T16192] 0 pages in swap cache [ 1034.309693][T16192] Free swap = 124140kB [ 1034.313887][T16192] Total swap = 124996kB [ 1034.337432][T16192] 2097051 pages RAM [ 1034.341626][T16192] 0 pages HighMem/MovableOnly [ 1034.346788][T16192] 427074 pages reserved [ 1034.351582][T16192] 0 pages cma reserved [ 1034.394658][T14824] usb 5-1: device descriptor read/64, error -71 [ 1034.532594][T14824] usb usb5-port1: attempt power cycle [ 1034.670198][T16233] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2762'. [ 1034.828359][T15123] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1034.887064][T14824] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1034.908664][T14824] usb 5-1: device descriptor read/8, error -71 [ 1034.927889][T16238] fuse: Unknown parameter ' [ 1034.927889][T16238] ' [ 1034.999415][T15123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.027482][T15123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.051749][T15123] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1035.119387][T15123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.159130][T16241] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 1035.190018][T15123] usb 1-1: config 0 descriptor?? [ 1035.322965][T16250] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2768'. [ 1036.203736][ T29] audit: type=1326 audit(1731010722.127:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1036.226918][ T29] audit: type=1326 audit(1731010722.127:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1036.249255][ T29] audit: type=1326 audit(1731010722.137:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.297211][ T29] audit: type=1326 audit(1731010722.137:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.409418][ T29] audit: type=1326 audit(1731010722.137:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.589036][ T29] audit: type=1326 audit(1731010722.137:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.615059][T15123] usbhid 1-1:0.0: can't add hid device: -71 [ 1037.654892][T15123] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1037.682503][ T29] audit: type=1326 audit(1731010722.137:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.685324][T15123] usb 1-1: USB disconnect, device number 60 [ 1037.752248][ T29] audit: type=1326 audit(1731010722.137:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.759982][T16271] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2774'. [ 1037.804791][ T29] audit: type=1326 audit(1731010722.137:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.885101][ T29] audit: type=1326 audit(1731010722.137:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.8.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44bfd7e719 code=0x7ffc0000 [ 1037.979948][T16278] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 1039.305141][T16297] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2780'. [ 1040.049479][T16308] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2788'. [ 1040.714125][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 1040.801789][T16327] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2789'. [ 1041.268511][T16333] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2796'. [ 1041.406643][T16342] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2801'. [ 1041.636880][T16339] netlink: 'syz.7.2800': attribute type 39 has an invalid length. [ 1042.912674][T16367] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2807'. [ 1043.628294][T16349] IPVS: stopping master sync thread 14234 ... [ 1044.420606][T16379] vlan3: entered promiscuous mode [ 1044.488578][T16385] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2813'. [ 1045.834751][T16394] netlink: 'syz.8.2817': attribute type 4 has an invalid length. [ 1045.844598][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2817'. [ 1045.853726][T16394] netlink: 'syz.8.2817': attribute type 20 has an invalid length. [ 1046.011103][T16406] netlink: 'syz.4.2820': attribute type 4 has an invalid length. [ 1046.051492][T16405] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2820'. [ 1046.767178][ T5882] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1046.929036][ T5882] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1046.941868][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.955863][ T5882] usb 2-1: config 0 descriptor?? [ 1046.964172][ T5882] cp210x 2-1:0.0: cp210x converter detected [ 1047.540930][T16413] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 1048.133303][T16428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.142404][T16428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.228331][T16428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.237387][T16428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.252325][T16434] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2828'. [ 1048.324326][T16428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.356801][T16428] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 1048.418248][ T5882] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1048.449304][T16413] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 1048.495872][T16413] bond1 (unregistering): Released all slaves [ 1048.527704][ T5882] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1048.691502][ T5882] usb 2-1: USB disconnect, device number 41 [ 1048.708094][T15123] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1048.717621][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1048.736355][ T5882] cp210x 2-1:0.0: device disconnected [ 1048.947117][T15123] usb 8-1: Using ep0 maxpacket: 8 [ 1048.954446][T15123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.966206][T15123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.985736][T15123] usb 8-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1048.995389][T15123] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.012539][T15123] usb 8-1: config 0 descriptor?? [ 1049.053464][T16452] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1049.053464][T16452] program syz.0.2835 not setting count and/or reply_len properly [ 1049.354192][T16458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.680902][T15123] saitek 0003:06A3:0CCD.000C: unknown main item tag 0x0 [ 1049.688783][T15123] saitek 0003:06A3:0CCD.000C: unknown main item tag 0x0 [ 1050.026129][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.423197][T15123] saitek 0003:06A3:0CCD.000C: item fetching failed at offset 2/11 [ 1050.437625][T15123] saitek 0003:06A3:0CCD.000C: parse failed [ 1050.443954][T15123] saitek 0003:06A3:0CCD.000C: probe with driver saitek failed with error -22 [ 1050.493718][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.616353][ T5882] usb 8-1: USB disconnect, device number 21 [ 1051.716192][ T5882] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1052.087664][ T5882] usb 8-1: Using ep0 maxpacket: 16 [ 1052.096887][ T5882] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1052.118188][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1052.162267][ T5882] usb 8-1: Product: syz [ 1052.169058][ T5882] usb 8-1: Manufacturer: syz [ 1052.178105][ T5882] usb 8-1: SerialNumber: syz [ 1052.191317][ T5882] usb 8-1: config 0 descriptor?? [ 1052.258268][T16500] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1052.258268][T16500] program syz.0.2846 not setting count and/or reply_len properly [ 1052.418430][T15123] usb 8-1: USB disconnect, device number 22 [ 1053.716869][T16516] netlink: 'syz.0.2852': attribute type 4 has an invalid length. [ 1053.748668][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2852'. [ 1053.758389][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2852'. [ 1056.071000][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.257105][T15123] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1056.387255][T15123] usb 2-1: device descriptor read/64, error -71 [ 1056.677396][T15123] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1056.861368][T16547] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1056.861368][T16547] program syz.7.2861 not setting count and/or reply_len properly [ 1057.018522][T15123] usb 2-1: device descriptor read/64, error -71 [ 1057.127890][T15123] usb usb2-port1: attempt power cycle [ 1059.114580][T16572] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1061.488908][T16578] netlink: 'syz.1.2870': attribute type 4 has an invalid length. [ 1061.503000][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 1061.512091][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 1061.554113][T16588] syzkaller1: entered promiscuous mode [ 1061.578599][T16588] syzkaller1: entered allmulticast mode [ 1061.869438][T16595] syzkaller1: entered promiscuous mode [ 1061.874973][T16595] syzkaller1: entered allmulticast mode [ 1061.998236][T16599] usb usb8: usbfs: process 16599 (syz.7.2874) did not claim interface 0 before use [ 1063.465868][T16612] No such timeout policy "syz0" [ 1063.481068][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1063.481086][ T29] audit: type=1107 audit(1731010749.417:243): pid=16610 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='1{kpӗl+I%7ͤm[4Ggϳ~׏WoN`|׼e2v]- #(_)MI鐏iX$5@*>|' [ 1063.853732][ T5882] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1064.523720][T16640] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR [ 1064.534103][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 1064.550400][ T26] block nbd4: Attempted send on invalid socket [ 1064.557931][ T26] I/O error, dev nbd4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1064.668037][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.679678][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.709805][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1064.827602][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1064.917058][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.917348][T15123] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1064.957270][ T5882] usb 2-1: config 0 descriptor?? [ 1065.049629][T16655] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2892'. [ 1065.107769][T15123] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 1065.117684][T15123] usb 5-1: config 0 has no interface number 0 [ 1065.124020][T15123] usb 5-1: too many endpoints for config 0 interface 20 altsetting 20: 170, using maximum allowed: 30 [ 1065.453945][T15123] usb 5-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 1065.493390][T15123] usb 5-1: config 0 interface 20 has no altsetting 0 [ 1065.516195][T15123] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1065.536565][T15123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.564796][T15123] usb 5-1: config 0 descriptor?? [ 1065.572954][T15123] ums-realtek 5-1:0.20: USB Mass Storage device detected [ 1065.890045][T15123] usb 5-1: USB disconnect, device number 45 [ 1065.904461][T16660] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2893'. [ 1066.460015][ T5882] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1066.473328][ T5882] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1066.507151][ T5882] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1066.514603][ T5882] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1066.555355][ T5882] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1066.577068][ T5882] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1066.597546][ T5882] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 1066.634718][ T5882] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input39 [ 1066.701491][ T5882] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1066.934600][T15133] usb 2-1: USB disconnect, device number 45 [ 1067.079482][T16680] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2898'. [ 1067.666729][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.806917][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1067.867211][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1067.875946][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1067.886392][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1067.896783][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1067.906061][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1067.930456][T16690] vcan0 speed is unknown, defaulting to 1000 [ 1068.004729][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.084511][T16690] lo speed is unknown, defaulting to 1000 [ 1068.113839][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.197209][T15123] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1068.299159][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.385233][T15123] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1068.457314][T15123] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1068.535099][T15123] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1068.665613][T15123] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1068.697037][T15123] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.697551][T16704] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2904'. [ 1068.705130][T15123] usb 8-1: Product: syz [ 1068.719285][T15123] usb 8-1: Manufacturer: syz [ 1068.737054][T15123] usb 8-1: SerialNumber: syz [ 1068.747572][ T5910] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1068.817024][T15123] usb 8-1: config 0 descriptor?? [ 1068.917284][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 1068.949273][ T5910] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1069.140736][T15123] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1069.157072][ T5910] usb 5-1: config 1 has no interface number 1 [ 1069.163209][ T5910] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1069.213746][ T5910] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1069.227281][T16690] chnl_net:caif_netlink_parms(): no params data found [ 1069.265661][ T12] bridge_slave_1: left allmulticast mode [ 1069.270371][T15123] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1069.293927][ T12] bridge_slave_1: left promiscuous mode [ 1069.294059][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.316574][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.326867][T15123] usb 8-1: USB disconnect, device number 23 [ 1069.348540][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.369463][ T5910] usb 5-1: Product: syz [ 1069.373752][ T5910] usb 5-1: Manufacturer: syz [ 1069.387341][ T5910] usb 5-1: SerialNumber: syz [ 1069.408977][ T12] bridge_slave_0: left allmulticast mode [ 1069.442271][ T12] bridge_slave_0: left promiscuous mode [ 1069.457380][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.885724][ T12] bridge0: left promiscuous mode [ 1069.957499][ T5829] Bluetooth: hci2: command tx timeout [ 1070.456387][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2906'. [ 1070.661830][ T12] batman_adv: batadv0: Removing interface: erspan1 [ 1070.908574][T16727] overlayfs: missing 'workdir' [ 1071.082108][T16732] binder: 16729:16732 ioctl c0306201 20001a80 returned -14 [ 1071.107571][ T12] team0: Port device vlan0 removed [ 1071.347109][T15123] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1071.527253][T15123] usb 9-1: Using ep0 maxpacket: 32 [ 1071.534380][T15123] usb 9-1: config 0 has an invalid interface number: 83 but max is 0 [ 1071.543985][T15123] usb 9-1: config 0 has no interface number 0 [ 1071.562395][T15123] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 1071.577071][T15123] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.595608][T15123] usb 9-1: Product: syz [ 1071.605741][T15123] usb 9-1: Manufacturer: syz [ 1071.615854][T15123] usb 9-1: SerialNumber: syz [ 1071.628723][T15123] usb 9-1: config 0 descriptor?? [ 1072.047366][ T5829] Bluetooth: hci2: command tx timeout [ 1072.103582][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.122767][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.142683][ T12] bond0 (unregistering): Released all slaves [ 1072.234087][T15123] peak_usb 9-1:0.83 can0: unable to request usb[type=0 value=1] err=-71 [ 1072.292776][T15123] peak_usb 9-1:0.83: unable to read PCAN-USB Pro firmware info (err -71) [ 1072.310118][ T12] IPVS: stopping master sync thread 11784 ... [ 1072.347758][ T5910] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1072.376174][T15123] peak_usb 9-1:0.83: probe with driver peak_usb failed with error -71 [ 1072.384586][ T5910] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1072.416688][ T5910] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1072.444813][T15123] usb 9-1: USB disconnect, device number 14 [ 1072.485562][ T5910] usb 5-1: USB disconnect, device number 46 [ 1072.515578][T16737] FAULT_INJECTION: forcing a failure. [ 1072.515578][T16737] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.547970][T16737] CPU: 0 UID: 0 PID: 16737 Comm: syz.7.2910 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1072.558781][T16737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1072.568868][T16737] Call Trace: [ 1072.572171][T16737] [ 1072.575116][T16737] dump_stack_lvl+0x241/0x360 [ 1072.579837][T16737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1072.585053][T16737] ? __pfx__printk+0x10/0x10 [ 1072.589663][T16737] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1072.595228][T16737] ? __pfx___might_resched+0x10/0x10 [ 1072.600541][T16737] should_fail_ex+0x3b0/0x4e0 [ 1072.605243][T16737] should_failslab+0xac/0x100 [ 1072.609953][T16737] ? nfnetlink_rcv+0x1265/0x2ab0 [ 1072.614926][T16737] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1072.620242][T16737] nfnetlink_rcv+0x1265/0x2ab0 [ 1072.625034][T16737] ? __pfx_validate_chain+0x10/0x10 [ 1072.630284][T16737] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1072.635441][T16737] ? __lock_acquire+0x1384/0x2050 [ 1072.640525][T16737] ? netlink_deliver_tap+0x2e/0x1b0 [ 1072.645743][T16737] ? __pfx_lock_release+0x10/0x10 [ 1072.650803][T16737] ? netlink_deliver_tap+0x2e/0x1b0 [ 1072.656022][T16737] netlink_unicast+0x7f6/0x990 [ 1072.660810][T16737] ? __pfx_netlink_unicast+0x10/0x10 [ 1072.666106][T16737] ? __virt_addr_valid+0x183/0x530 [ 1072.671234][T16737] ? __check_object_size+0x48e/0x900 [ 1072.676548][T16737] netlink_sendmsg+0x8e4/0xcb0 [ 1072.681338][T16737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.686651][T16737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.691948][T16737] __sock_sendmsg+0x221/0x270 [ 1072.696640][T16737] ____sys_sendmsg+0x52a/0x7e0 [ 1072.701516][T16737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.706841][T16737] __sys_sendmsg+0x292/0x380 [ 1072.711544][T16737] ? __pfx___sys_sendmsg+0x10/0x10 [ 1072.716690][T16737] ? __pfx_vfs_write+0x10/0x10 [ 1072.721504][T16737] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1072.727856][T16737] ? do_syscall_64+0x100/0x230 [ 1072.732643][T16737] ? do_syscall_64+0xb6/0x230 [ 1072.737345][T16737] do_syscall_64+0xf3/0x230 [ 1072.741866][T16737] ? clear_bhb_loop+0x35/0x90 [ 1072.746565][T16737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.752472][T16737] RIP: 0033:0x7f899e17e719 [ 1072.756907][T16737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.776533][T16737] RSP: 002b:00007f899ef74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.784975][T16737] RAX: ffffffffffffffda RBX: 00007f899e335f80 RCX: 00007f899e17e719 [ 1072.792969][T16737] RDX: 0000000000048800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1072.800963][T16737] RBP: 00007f899ef74090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.808962][T16737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.816961][T16737] R13: 0000000000000000 R14: 00007f899e335f80 R15: 00007ffd89bb1ad8 [ 1072.824965][T16737] [ 1073.467233][T16690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.475671][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.496158][T16690] bridge_slave_0: entered allmulticast mode [ 1073.523696][T16690] bridge_slave_0: entered promiscuous mode [ 1073.545819][T16690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.573700][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.584986][T16690] bridge_slave_1: entered allmulticast mode [ 1073.595977][T16690] bridge_slave_1: entered promiscuous mode [ 1073.816086][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.893617][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.070294][ T12] hsr_slave_0: left promiscuous mode [ 1074.148073][ T5829] Bluetooth: hci2: command tx timeout [ 1074.207872][T16750] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2914'. [ 1074.233984][ T12] hsr_slave_1: left promiscuous mode [ 1074.307808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.415176][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.484583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.545842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.663574][ T12] veth1_macvtap: left promiscuous mode [ 1074.694586][ T12] veth0_macvtap: left promiscuous mode [ 1074.973704][ T12] infiniband syz1: set down [ 1075.063401][T16763] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2916'. [ 1075.545992][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1075.618882][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1076.045476][T14557] smc: removing ib device syz1 [ 1076.125106][T16690] team0: Port device team_slave_0 added [ 1076.197764][ T5829] Bluetooth: hci2: command tx timeout [ 1076.209870][T15133] vcan0 speed is unknown, defaulting to 1000 [ 1076.223422][T16768] netlink: 'syz.1.2915': attribute type 39 has an invalid length. [ 1076.347258][T16690] team0: Port device team_slave_1 added [ 1076.475979][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.498087][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.526791][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.615593][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.645169][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.671594][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.721210][T16690] hsr_slave_0: entered promiscuous mode [ 1076.744897][T16690] hsr_slave_1: entered promiscuous mode [ 1076.837062][T16776] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2919'. [ 1076.988204][T16776] overlayfs: missing 'workdir' [ 1077.372627][T16782] FAULT_INJECTION: forcing a failure. [ 1077.372627][T16782] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.392154][T16782] CPU: 1 UID: 0 PID: 16782 Comm: syz.1.2920 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1077.402965][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1077.413045][T16782] Call Trace: [ 1077.416348][T16782] [ 1077.419299][T16782] dump_stack_lvl+0x241/0x360 [ 1077.424006][T16782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1077.429242][T16782] ? __pfx__printk+0x10/0x10 [ 1077.433864][T16782] ? __kmalloc_node_noprof+0xb7/0x440 [ 1077.439270][T16782] ? __pfx___might_resched+0x10/0x10 [ 1077.444585][T16782] should_fail_ex+0x3b0/0x4e0 [ 1077.449291][T16782] should_failslab+0xac/0x100 [ 1077.454007][T16782] __kmalloc_node_noprof+0xdf/0x440 [ 1077.459232][T16782] ? __kvmalloc_node_noprof+0x72/0x190 [ 1077.464719][T16782] ? bpf_uprobe_multi_link_attach+0x430/0xc20 [ 1077.470816][T16782] __kvmalloc_node_noprof+0x72/0x190 [ 1077.476132][T16782] bpf_uprobe_multi_link_attach+0x44f/0xc20 [ 1077.482066][T16782] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1077.488511][T16782] ? __fget_files+0x3f3/0x470 [ 1077.493211][T16782] ? __fget_files+0x29/0x470 [ 1077.497839][T16782] ? bpf_prog_attach_check_attach_type+0x3e7/0x4b0 [ 1077.504372][T16782] link_create+0x6e3/0x860 [ 1077.508825][T16782] __sys_bpf+0x4bc/0x810 [ 1077.513095][T16782] ? __pfx___sys_bpf+0x10/0x10 [ 1077.517893][T16782] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1077.523905][T16782] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1077.530264][T16782] ? do_syscall_64+0x100/0x230 [ 1077.535091][T16782] __x64_sys_bpf+0x7c/0x90 [ 1077.539617][T16782] do_syscall_64+0xf3/0x230 [ 1077.544141][T16782] ? clear_bhb_loop+0x35/0x90 [ 1077.548845][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.554759][T16782] RIP: 0033:0x7eff2257e719 [ 1077.559193][T16782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.578819][T16782] RSP: 002b:00007eff232c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.587264][T16782] RAX: ffffffffffffffda RBX: 00007eff22735f80 RCX: 00007eff2257e719 [ 1077.595261][T16782] RDX: 000000000000003c RSI: 00000000200012c0 RDI: 000000000000001c [ 1077.603253][T16782] RBP: 00007eff232c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.611243][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.619238][T16782] R13: 0000000000000000 R14: 00007eff22735f80 R15: 00007ffd4979a818 [ 1077.627335][T16782] [ 1077.630466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.077205][T16690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1078.800064][T16690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1078.903222][T16690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1078.970321][T16790] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1078.970321][T16790] program syz.1.2922 not setting count and/or reply_len properly [ 1078.994713][T16690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1079.124849][T16690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.174809][T16690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.205363][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.212626][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.260866][T16690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1079.273127][T16690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1079.292677][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.299835][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.344430][T16794] netlink: 'syz.1.2924': attribute type 39 has an invalid length. [ 1079.437249][T15123] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1079.587587][T15123] usb 8-1: Using ep0 maxpacket: 16 [ 1079.660945][T16690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.677325][T15123] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.695852][T15123] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.431406][T15123] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1080.442765][T15123] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1080.452604][T15123] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 25 [ 1080.469929][T16690] veth0_vlan: entered promiscuous mode [ 1080.480427][T16690] veth1_vlan: entered promiscuous mode [ 1080.506583][T16805] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2925'. [ 1080.542486][T15123] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.551717][T15123] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1080.562117][T15123] usb 8-1: SerialNumber: syz [ 1080.602739][T16690] veth0_macvtap: entered promiscuous mode [ 1080.622447][T16690] veth1_macvtap: entered promiscuous mode [ 1080.657209][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.679772][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.703520][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.727423][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.738661][T16690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.748399][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2927'. [ 1080.770873][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.784437][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.795018][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.795450][T15133] usb 8-1: USB disconnect, device number 24 [ 1080.805744][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.806897][T16690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.119953][T16690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.195890][T16690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.266344][ T29] audit: type=1326 audit(1731010767.207:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16818 comm="syz.1.2929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff2257e719 code=0x0 [ 1081.295032][T16690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.360224][T16690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.140254][T14560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.155233][T14560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.564358][T14550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.952883][T14550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.192268][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1084.222959][T16840] overlayfs: missing 'workdir' [ 1085.106793][T16848] netlink: 'syz.7.2936': attribute type 4 has an invalid length. [ 1085.134381][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2936'. [ 1085.481416][T16843] netlink: 165 bytes leftover after parsing attributes in process `syz.8.2934'. [ 1086.326318][T16864] netlink: 'syz.7.2942': attribute type 39 has an invalid length. [ 1086.826470][ T5882] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1087.050146][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1087.082227][ T5882] usb 2-1: config 0 has no interfaces? [ 1087.154073][ T5882] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1087.275172][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.330021][ T5882] usb 2-1: Product: syz [ 1087.348310][ T5882] usb 2-1: Manufacturer: syz [ 1087.352990][ T5882] usb 2-1: SerialNumber: syz [ 1087.360294][ T5882] usb 2-1: config 0 descriptor?? [ 1087.677987][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2947'. [ 1087.747065][ T5882] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1087.828031][T16883] overlayfs: missing 'workdir' [ 1088.619539][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.630739][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.667311][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1088.702259][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.722814][ T5882] usb 1-1: config 0 descriptor?? [ 1089.465178][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 1089.471383][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1089.481579][ T5882] usb 1-1: USB disconnect, device number 61 [ 1091.052265][ T5882] usb 2-1: USB disconnect, device number 46 [ 1091.097874][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1091.112979][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1091.122598][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1091.127694][T16920] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 1091.145858][T16919] FAULT_INJECTION: forcing a failure. [ 1091.145858][T16919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.169089][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1091.178693][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1091.181784][T16919] CPU: 1 UID: 0 PID: 16919 Comm: syz.8.2958 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1091.196405][T16919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1091.206457][T16919] Call Trace: [ 1091.209740][T16919] [ 1091.212685][T16919] dump_stack_lvl+0x241/0x360 [ 1091.217385][T16919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1091.222595][T16919] ? __pfx__printk+0x10/0x10 [ 1091.227191][T16919] ? snprintf+0xda/0x120 [ 1091.231429][T16919] should_fail_ex+0x3b0/0x4e0 [ 1091.236099][T16919] _copy_to_user+0x31/0xb0 [ 1091.240615][T16919] simple_read_from_buffer+0xca/0x150 [ 1091.246015][T16919] proc_fail_nth_read+0x1e9/0x250 [ 1091.251046][T16919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.256610][T16919] ? rw_verify_area+0x55e/0x6f0 [ 1091.261464][T16919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.267043][T16919] vfs_read+0x1fc/0xb70 [ 1091.271217][T16919] ? fdget_pos+0x24e/0x320 [ 1091.275642][T16919] ? __pfx_vfs_read+0x10/0x10 [ 1091.280318][T16919] ? __fget_files+0x3f3/0x470 [ 1091.285000][T16919] ? fdget_pos+0x24e/0x320 [ 1091.287196][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1091.289408][T16919] ksys_read+0x183/0x2b0 [ 1091.289440][T16919] ? __pfx_ksys_read+0x10/0x10 [ 1091.289464][T16919] ? do_syscall_64+0x100/0x230 [ 1091.310149][T16919] ? do_syscall_64+0xb6/0x230 [ 1091.314846][T16919] do_syscall_64+0xf3/0x230 [ 1091.319354][T16919] ? clear_bhb_loop+0x35/0x90 [ 1091.324026][T16919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.329910][T16919] RIP: 0033:0x7f44bfd7d15c [ 1091.334320][T16919] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1091.353923][T16919] RSP: 002b:00007f44c0aec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1091.362337][T16919] RAX: ffffffffffffffda RBX: 00007f44bff35f80 RCX: 00007f44bfd7d15c [ 1091.370320][T16919] RDX: 000000000000000f RSI: 00007f44c0aec0a0 RDI: 0000000000000004 [ 1091.378302][T16919] RBP: 00007f44c0aec090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.386271][T16919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.394245][T16919] R13: 0000000000000000 R14: 00007f44bff35f80 R15: 00007fffaa204688 [ 1091.402226][T16919] [ 1091.719398][T16930] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2959'. [ 1091.783202][ T5910] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1091.841273][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2961'. [ 1092.114297][T16941] overlayfs: missing 'workdir' [ 1092.538740][ T5910] usb 9-1: config 5 has an invalid interface number: 123 but max is 0 [ 1092.547221][ T5910] usb 9-1: config 5 has no interface number 0 [ 1092.556858][ T5910] usb 9-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1092.611567][ T5910] usb 9-1: config 5 interface 123 has no altsetting 0 [ 1092.618858][T16913] chnl_net:caif_netlink_parms(): no params data found [ 1092.677822][ T5910] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1092.698396][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.706404][ T5910] usb 9-1: Product: syz [ 1092.719052][ T5910] usb 9-1: Manufacturer: syz [ 1092.723760][ T5910] usb 9-1: SerialNumber: syz [ 1092.867970][T16949] program syz.7.2963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.879466][T16950] program syz.7.2963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1093.033784][T16957] vivid-000: ================= START STATUS ================= [ 1093.054794][T16957] vivid-000: Radio HW Seek Mode: Bounded [ 1093.081401][T16957] vivid-000: Radio Programmable HW Seek: false [ 1093.098878][ T5910] ni6501 9-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1093.106621][T16957] vivid-000: RDS Rx I/O Mode: Block I/O [ 1093.109176][T16913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.124502][ T5910] usb 9-1: USB disconnect, device number 15 [ 1093.127309][T16957] vivid-000: Generate RBDS Instead of RDS: false [ 1093.137325][T16913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.167868][T16913] bridge_slave_0: entered allmulticast mode [ 1093.199089][T16913] bridge_slave_0: entered promiscuous mode [ 1093.216481][T16957] vivid-000: RDS Reception: true [ 1093.236733][T16957] vivid-000: RDS Program Type: 0 inactive [ 1093.261671][T16957] vivid-000: RDS PS Name: inactive [ 1093.262857][T16913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.299399][T16913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.307531][T16913] bridge_slave_1: entered allmulticast mode [ 1093.315223][T16913] bridge_slave_1: entered promiscuous mode [ 1093.321380][ T5838] Bluetooth: hci3: command tx timeout [ 1093.344109][T16957] vivid-000: RDS Radio Text: inactive [ 1093.368363][T16913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.383149][T16913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.420772][T16957] vivid-000: RDS Traffic Announcement: false inactive [ 1093.450521][T16913] team0: Port device team_slave_0 added [ 1093.474169][T16913] team0: Port device team_slave_1 added [ 1093.484250][T16957] vivid-000: RDS Traffic Program: false inactive [ 1093.500965][T16913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.508361][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.534333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.541034][T16913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.554896][T16913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.563160][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.589100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.610628][T16957] vivid-000: RDS Music: false inactive [ 1093.616498][T16957] vivid-000: ================== END STATUS ================== [ 1093.626473][T16913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.122110][T16913] hsr_slave_0: entered promiscuous mode [ 1094.155658][T16913] hsr_slave_1: entered promiscuous mode [ 1094.238759][T16913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.317131][T15133] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 1094.329651][T16913] Cannot create hsr debugfs directory [ 1094.487332][T15133] usb 8-1: device descriptor read/64, error -71 [ 1094.737129][T15133] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 1094.927203][T15133] usb 8-1: device descriptor read/64, error -71 [ 1095.052054][T15133] usb usb8-port1: attempt power cycle [ 1095.091595][T16913] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1095.126868][T16913] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1095.143741][T16913] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1095.167552][T16913] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1095.296791][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.351199][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.397153][ T5838] Bluetooth: hci3: command tx timeout [ 1095.417601][T15133] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 1095.431550][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.438781][T14548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.472288][T15133] usb 8-1: device descriptor read/8, error -71 [ 1095.472993][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.485642][T14548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.499397][T16969] xt_CT: No such helper "syz0" [ 1095.685927][T16981] ip6t_REJECT: ECHOREPLY is not supported [ 1095.701417][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.717676][T15133] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 1095.717737][ T5910] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1095.760598][T16984] binder: 16980:16984 ioctl c0306201 20000080 returned -14 [ 1095.777541][T15133] usb 8-1: device descriptor read/8, error -71 [ 1095.887182][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 1095.888035][T15133] usb usb8-port1: unable to enumerate USB device [ 1095.893995][ T5910] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.908650][T16913] veth0_vlan: entered promiscuous mode [ 1095.929019][T16913] veth1_vlan: entered promiscuous mode [ 1095.966590][T16913] veth0_macvtap: entered promiscuous mode [ 1095.990641][T16913] veth1_macvtap: entered promiscuous mode [ 1096.003380][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.013966][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.024190][ T5910] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.037664][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1096.046781][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.055335][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.055361][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.055379][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.055393][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.055407][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.055421][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.067577][T16913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.142100][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.154602][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.164669][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.176759][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.188881][T16913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.199653][T16913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.221910][T16913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.325445][T16913] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.336778][T16913] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.348253][T16913] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.364808][T16913] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.428318][T16991] netlink: 'syz.8.2971': attribute type 4 has an invalid length. [ 1096.434532][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.445240][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2971'. [ 1096.502830][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.910961][ T5910] usb 1-1: usb_control_msg returned -71 [ 1096.916613][ T5910] usbtmc 1-1:16.0: can't read capabilities [ 1096.969812][ T5910] usb 1-1: USB disconnect, device number 62 [ 1097.030587][T14550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.038573][T14550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.066693][T14550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.077836][T14550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.105266][T16998] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1097.105266][T16998] program syz.1.2972 not setting count and/or reply_len properly [ 1097.203861][T17001] netlink: 'syz.9.2953': attribute type 1 has an invalid length. [ 1097.337446][T15133] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1097.477641][ T5838] Bluetooth: hci3: command tx timeout [ 1097.498626][T15133] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1097.520346][T15133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.534685][T17005] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2976'. [ 1097.548899][T15133] usb 8-1: config 0 descriptor?? [ 1097.555962][T15133] cp210x 8-1:0.0: cp210x converter detected [ 1097.578745][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1097.589989][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1097.614551][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1097.624147][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1097.632488][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1097.644384][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1097.964091][T16996] netlink: 'syz.7.2973': attribute type 1 has an invalid length. [ 1098.009932][T16996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.047825][T16996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.066571][T17006] chnl_net:caif_netlink_parms(): no params data found [ 1098.108626][T16996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.130797][T16996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.163314][T16996] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1098.180111][T16996] bond0: (slave batadv2): Enslaving as a backup interface with an up link [ 1098.314403][T16996] bond0 (unregistering): (slave batadv2): Releasing backup interface [ 1098.331528][T17029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2981'. [ 1098.367630][T16996] bond0 (unregistering): Released all slaves [ 1098.473344][T17006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.618835][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.697507][T17006] bridge_slave_0: entered allmulticast mode [ 1098.719503][T17006] bridge_slave_0: entered promiscuous mode [ 1098.758276][T17006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.782971][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.802297][T17006] bridge_slave_1: entered allmulticast mode [ 1098.819441][T17006] bridge_slave_1: entered promiscuous mode [ 1099.066737][T15133] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1099.074709][T15133] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1099.083272][T15133] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1099.108485][T15133] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1099.118929][T15133] usb 8-1: USB disconnect, device number 29 [ 1099.292810][T15133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1099.305612][T15133] cp210x 8-1:0.0: device disconnected [ 1099.376063][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.389814][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.434402][T17006] team0: Port device team_slave_0 added [ 1099.443300][T17006] team0: Port device team_slave_1 added [ 1099.488604][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.495590][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.521969][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.534578][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.541754][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.568096][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.593179][ T5829] Bluetooth: hci3: command tx timeout [ 1099.651119][T17031] infiniband syz0: set active [ 1099.674999][T17031] infiniband syz0: added veth0_vlan [ 1099.700232][T17031] syz0: rxe_create_cq: returned err = -12 [ 1099.706060][T17031] infiniband syz0: Couldn't create ib_mad CQ [ 1099.712866][T17031] infiniband syz0: Couldn't open port 1 [ 1099.747116][T17031] RDS/IB: syz0: added [ 1099.751465][T17031] smc: adding ib device syz0 with port count 1 [ 1099.758091][ T5829] Bluetooth: hci0: command tx timeout [ 1099.827721][T17031] smc: ib device syz0 port 1 has pnetid [ 1099.920420][T17006] hsr_slave_0: entered promiscuous mode [ 1099.929339][T17006] hsr_slave_1: entered promiscuous mode [ 1099.949857][T17006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1100.016701][T17006] Cannot create hsr debugfs directory [ 1101.692259][T17006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.839734][ T5829] Bluetooth: hci0: command tx timeout [ 1102.489117][T17006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.835350][ T29] audit: type=1326 audit(1731011045.165:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17083 comm="syz.0.3001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7e719 code=0x0 [ 1103.887532][ T5829] Bluetooth: hci0: command tx timeout [ 1104.416234][T17095] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1104.553374][T17006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.973576][T17006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.169480][ T5829] Bluetooth: hci0: command tx timeout [ 1106.521814][T17006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1106.743935][T17006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1106.776848][T17006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1106.792397][T17006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1107.550700][T17006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.602616][T17006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.662121][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.669301][T10769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.728542][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.735730][T10769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.897378][T17127] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1107.906874][T17127] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1107.917934][T17127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1107.926153][T17127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1107.952939][T17127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1108.001696][T17138] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3022'. [ 1108.007860][ T29] audit: type=1400 audit(1731011049.955:246): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=17141 comm="syz.0.3023" [ 1108.020403][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3022'. [ 1108.039018][T17127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1108.057188][T17127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1108.070574][T17127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1108.080075][T17127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1108.086148][T17127] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1108.115599][T17127] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1108.313994][T17152] bridge1: entered promiscuous mode [ 1108.413146][T17006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.456408][T17006] veth0_vlan: entered promiscuous mode [ 1108.467339][T17006] veth1_vlan: entered promiscuous mode [ 1108.488654][T17006] veth0_macvtap: entered promiscuous mode [ 1108.497524][T17006] veth1_macvtap: entered promiscuous mode [ 1108.513442][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.524128][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.534031][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.544620][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.554526][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.565169][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.575228][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.585867][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.597423][T17006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.607117][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.617898][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.627830][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.638342][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.649344][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.662720][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.672821][T17006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.683842][T17006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.695472][T17006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.712755][T17006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.721786][T17006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.730666][T17006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.817248][T17006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.543183][T17170] bridge0: port 3(vlan2) entered blocking state [ 1109.566815][T17170] bridge0: port 3(vlan2) entered disabled state [ 1109.576737][T17170] vlan2: entered allmulticast mode [ 1109.640852][T17170] vlan2: left allmulticast mode [ 1109.737333][T14541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.783508][T10769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.800557][T14541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.975527][T17179] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 1109.984517][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 1109.997662][T17179] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1110.006489][T17179] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1110.015390][T17179] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1110.024220][T17179] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1110.071771][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 1110.078192][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 1110.084553][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 1110.578991][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1110.585138][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 1110.592395][T10769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.132159][T17197] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2974'. [ 1112.157064][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 1112.615059][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1112.625618][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 1114.582984][ T5882] IPVS: starting estimator thread 0... [ 1114.696637][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 1114.703224][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1114.709575][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 1114.787473][T17219] IPVS: using max 19 ests per chain, 45600 per kthread [ 1115.759260][T17228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1115.926065][T17252] random: crng reseeded on system resumption [ 1116.039709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.153801][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 1118.783822][T17287] batman_adv: batadv0: adding TT local entry 00:00:00:00:00:00 to non-existent VLAN 3072 [ 1119.614343][ T29] audit: type=1400 audit(1731011061.555:247): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=17303 comm="syz.1.3080" [ 1119.811699][T17309] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3082'. [ 1124.727152][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 1124.768510][T17346] netlink: 'syz.8.3092': attribute type 1 has an invalid length. [ 1124.796463][T17346] bond1 (unregistering): Released all slaves [ 1125.557850][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3096'. [ 1125.715906][T17371] block device autoloading is deprecated and will be removed. [ 1125.810924][T17371] syz.8.3099: attempt to access beyond end of device [ 1125.810924][T17371] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1126.470961][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1126.480038][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1127.270552][T17382] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1127.303943][T15128] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1127.412028][T17391] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3102'. [ 1127.482281][T14824] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1127.734425][T15128] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1127.771421][T15128] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.921520][T15128] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1127.939271][T15128] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.959406][T15128] usb 10-1: Product: syz [ 1127.969229][T15128] usb 10-1: Manufacturer: syz [ 1127.974020][T15128] usb 10-1: SerialNumber: syz [ 1127.985101][T15128] usb 10-1: config 0 descriptor?? [ 1127.996297][T15128] ims_pcu 10-1:0.0: Missing CDC union descriptor [ 1128.003735][T15128] ims_pcu 10-1:0.0: probe with driver ims_pcu failed with error -22 [ 1128.374486][T17365] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 1128.402259][T17365] openvswitch: netlink: Actions may not be safe on all matching packets [ 1128.437486][T14824] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1128.440543][T15128] usb 10-1: USB disconnect, device number 2 [ 1128.446537][T14824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.446563][T14824] usb 9-1: Product: syz [ 1128.446580][T14824] usb 9-1: Manufacturer: syz [ 1128.446596][T14824] usb 9-1: SerialNumber: syz [ 1128.476427][T14824] usb 9-1: config 0 descriptor?? [ 1128.562638][ T47] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1128.615011][T14824] usb 9-1: Firmware version (0.0) predates our first public release. [ 1128.627167][T15133] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1128.662509][T14824] usb 9-1: Please update to version 0.2 or newer [ 1128.739030][T14824] usb 9-1: USB disconnect, device number 16 [ 1128.747457][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1128.776408][ T47] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1128.780333][T15133] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1128.786575][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.810832][T15133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.815229][T17407] netlink: 'syz.8.3108': attribute type 39 has an invalid length. [ 1128.836832][T15133] usb 8-1: config 0 descriptor?? [ 1128.841253][ T47] usb 2-1: config 0 descriptor?? [ 1128.844689][T15133] cp210x 8-1:0.0: cp210x converter detected [ 1128.859483][ T47] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1128.888490][ T47] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1129.096896][ T47] usb 2-1: USB disconnect, device number 47 [ 1129.703467][T17403] netlink: 'syz.7.3106': attribute type 1 has an invalid length. [ 1129.820245][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.836167][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.928096][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.936709][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.083407][T17403] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1130.775401][T17403] bond0: (slave batadv3): Enslaving as a backup interface with an up link [ 1130.830797][T15133] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1130.839312][T15133] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1130.854707][T15133] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1130.922700][T15133] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1131.039650][T15133] usb 8-1: USB disconnect, device number 30 [ 1131.053663][T15133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1131.063225][T15133] cp210x 8-1:0.0: device disconnected [ 1131.806412][T17434] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1132.234167][T17444] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3118'. [ 1132.345406][T17446] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3116'. [ 1132.377397][T17446] overlayfs: missing 'workdir' [ 1135.234240][T14825] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1135.580898][T17475] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3129'. [ 1135.847294][T14825] usb 1-1: Using ep0 maxpacket: 8 [ 1135.863981][T14825] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1135.949040][T14825] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1136.006848][T14825] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1136.074028][T14825] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1136.117155][T14825] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1136.143405][T14825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.348063][T14825] usb 1-1: usb_control_msg returned -71 [ 1136.367324][T14825] usbtmc 1-1:16.0: can't read capabilities [ 1136.406861][T14825] usb 1-1: USB disconnect, device number 63 [ 1136.504245][T17504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3135'. [ 1136.533950][T17504] overlayfs: missing 'workdir' [ 1139.819462][T17524] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3143'. [ 1140.292852][T17547] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3148'. [ 1140.323807][T17547] overlayfs: missing 'workdir' [ 1140.387270][T14824] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1140.581697][T14824] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1140.987531][T14824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.002735][T14824] usb 2-1: Product: syz [ 1141.015142][T14824] usb 2-1: Manufacturer: syz [ 1141.035503][T14824] usb 2-1: SerialNumber: syz [ 1141.233508][T14824] usb 2-1: config 0 descriptor?? [ 1141.811649][T14824] usb 2-1: Firmware version (0.0) predates our first public release. [ 1141.820623][T14824] usb 2-1: Please update to version 0.2 or newer [ 1141.873287][T14824] usb 2-1: Firmware: build ôടǡ [ 1142.159099][ T29] audit: type=1326 audit(1731011084.105:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17570 comm="syz.8.3154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44bfd7e719 code=0x0 [ 1142.826437][T17581] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1142.826437][T17581] program syz.0.3156 not setting count and/or reply_len properly [ 1143.160058][ T5882] usb 2-1: USB disconnect, device number 48 [ 1143.267515][T17584] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3157'. [ 1144.387935][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3163'. [ 1144.466707][T17600] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3162'. [ 1144.511364][T17600] overlayfs: missing 'workdir' [ 1145.157292][ T5882] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1145.474180][ T5882] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1146.433376][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.443467][ T5882] usb 2-1: config 0 descriptor?? [ 1146.449098][ T5882] usb 2-1: can't set config #0, error -71 [ 1146.456006][ T5882] usb 2-1: USB disconnect, device number 49 [ 1146.685739][T17620] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1146.685739][T17620] program syz.1.3168 not setting count and/or reply_len properly [ 1147.841709][T17630] netlink: 165 bytes leftover after parsing attributes in process `syz.7.3171'. [ 1147.945094][T17637] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3169'. [ 1147.980002][T17637] overlayfs: missing 'workdir' [ 1148.172646][T17639] FAULT_INJECTION: forcing a failure. [ 1148.172646][T17639] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.597191][T17639] CPU: 1 UID: 0 PID: 17639 Comm: syz.7.3173 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1148.608016][T17639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1148.618098][T17639] Call Trace: [ 1148.621410][T17639] [ 1148.624364][T17639] dump_stack_lvl+0x241/0x360 [ 1148.629071][T17639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.634297][T17639] ? __pfx__printk+0x10/0x10 [ 1148.638919][T17639] ? __kmalloc_node_noprof+0xb7/0x440 [ 1148.644311][T17639] ? __pfx___might_resched+0x10/0x10 [ 1148.649620][T17639] ? vsnprintf+0x1ccd/0x1da0 [ 1148.654221][T17639] should_fail_ex+0x3b0/0x4e0 [ 1148.658901][T17639] should_failslab+0xac/0x100 [ 1148.663580][T17639] __kmalloc_node_noprof+0xdf/0x440 [ 1148.668779][T17639] ? __kvmalloc_node_noprof+0x72/0x190 [ 1148.674240][T17639] ? __pfx_gtp_link_setup+0x10/0x10 [ 1148.679437][T17639] __kvmalloc_node_noprof+0x72/0x190 [ 1148.684725][T17639] alloc_netdev_mqs+0x9b/0x1000 [ 1148.689580][T17639] ? __pfx_gtp_link_setup+0x10/0x10 [ 1148.694777][T17639] ? bpf_lsm_capable+0x9/0x10 [ 1148.699458][T17639] rtnl_create_link+0x2f9/0xc20 [ 1148.704402][T17639] rtnl_newlink+0x1423/0x20a0 [ 1148.709083][T17639] ? rtnl_newlink+0xac1/0x20a0 [ 1148.713858][T17639] ? __pfx_rtnl_newlink+0x10/0x10 [ 1148.718885][T17639] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1148.724775][T17639] ? rcu_is_watching+0x15/0xb0 [ 1148.729535][T17639] ? trace_contention_end+0x3c/0x120 [ 1148.734815][T17639] ? __mutex_lock+0x2ef/0xd70 [ 1148.739494][T17639] ? __pfx_lock_release+0x10/0x10 [ 1148.744526][T17639] ? __pfx_rtnl_newlink+0x10/0x10 [ 1148.749550][T17639] rtnetlink_rcv_msg+0x73f/0xcf0 [ 1148.754482][T17639] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1148.759590][T17639] ? __lock_acquire+0x1384/0x2050 [ 1148.764618][T17639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1148.770087][T17639] netlink_rcv_skb+0x1e3/0x430 [ 1148.774866][T17639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1148.780319][T17639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1148.785620][T17639] ? netlink_deliver_tap+0x2e/0x1b0 [ 1148.790823][T17639] netlink_unicast+0x7f6/0x990 [ 1148.795596][T17639] ? __pfx_netlink_unicast+0x10/0x10 [ 1148.800878][T17639] ? __virt_addr_valid+0x183/0x530 [ 1148.805989][T17639] ? __check_object_size+0x48e/0x900 [ 1148.811281][T17639] netlink_sendmsg+0x8e4/0xcb0 [ 1148.816052][T17639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.821378][T17639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.826661][T17639] __sock_sendmsg+0x221/0x270 [ 1148.831333][T17639] ____sys_sendmsg+0x52a/0x7e0 [ 1148.836111][T17639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1148.841405][T17639] __sys_sendmsg+0x292/0x380 [ 1148.846003][T17639] ? __pfx___sys_sendmsg+0x10/0x10 [ 1148.851120][T17639] ? __pfx_vfs_write+0x10/0x10 [ 1148.855900][T17639] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1148.862228][T17639] ? do_syscall_64+0x100/0x230 [ 1148.866991][T17639] ? do_syscall_64+0xb6/0x230 [ 1148.871668][T17639] do_syscall_64+0xf3/0x230 [ 1148.876169][T17639] ? clear_bhb_loop+0x35/0x90 [ 1148.880848][T17639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.886736][T17639] RIP: 0033:0x7f899e17e719 [ 1148.891151][T17639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.910843][T17639] RSP: 002b:00007f899ef74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.919258][T17639] RAX: ffffffffffffffda RBX: 00007f899e335f80 RCX: 00007f899e17e719 [ 1148.927224][T17639] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1148.935279][T17639] RBP: 00007f899ef74090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.943246][T17639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.951213][T17639] R13: 0000000000000000 R14: 00007f899e335f80 R15: 00007ffd89bb1ad8 [ 1148.959193][T17639] [ 1151.380483][T17664] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3180'. [ 1151.461128][T17666] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1151.461128][T17666] program syz.0.3181 not setting count and/or reply_len properly [ 1152.581440][T17670] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3183'. [ 1156.125231][T17700] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3187'. [ 1156.576071][T17711] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1156.576071][T17711] program syz.1.3194 not setting count and/or reply_len properly [ 1157.613016][T17722] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3196'. [ 1158.122980][T17728] binder: 17724:17728 ioctl c0306201 20000080 returned -14 [ 1158.410667][ T5910] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1159.427614][ T5910] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1159.440310][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.656471][ T5910] usb 2-1: config 0 descriptor?? [ 1159.663396][ T5910] cp210x 2-1:0.0: cp210x converter detected [ 1159.686325][T17751] netlink: 'syz.8.3205': attribute type 39 has an invalid length. [ 1160.479073][T17727] netlink: 'syz.1.3197': attribute type 1 has an invalid length. [ 1161.344613][T17765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.363048][T17765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.400508][T17727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.409533][T17727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.489045][T17727] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1161.520897][T17727] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 1161.564578][T17766] netlink: 'syz.7.3207': attribute type 39 has an invalid length. [ 1161.725335][T17770] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3209'. [ 1161.755036][ T5910] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1161.767127][ T5910] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1161.823975][ T5910] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1161.949123][ T5910] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1161.978632][ T5910] usb 2-1: USB disconnect, device number 50 [ 1161.989355][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1162.008848][ T5910] cp210x 2-1:0.0: device disconnected [ 1163.606602][T17800] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3217'. [ 1165.877075][T17822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3219'. [ 1165.914074][T17822] overlayfs: missing 'workdir' [ 1165.919341][ T8] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1166.630571][T17812] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3223'. [ 1166.697460][ T8] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1166.724575][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.785647][ T8] usb 8-1: config 0 descriptor?? [ 1166.831239][ T8] cp210x 8-1:0.0: cp210x converter detected [ 1168.270455][ T8] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1168.278053][ T8] cp210x 8-1:0.0: querying part number failed [ 1168.285669][ T8] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1168.330092][ T8] usb 8-1: USB disconnect, device number 31 [ 1168.338661][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1168.347167][ T8] cp210x 8-1:0.0: device disconnected [ 1169.250608][ T5882] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1169.361977][T17856] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3232'. [ 1169.668300][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1169.679381][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1169.693628][T17847] Bluetooth: MGMT ver 1.23 [ 1169.704632][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1169.726978][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1169.735005][ T5882] usb 1-1: SerialNumber: syz [ 1169.742395][T17849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1170.011253][T17849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1170.183167][T17871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3237'. [ 1170.237474][T17871] overlayfs: missing 'workdir' [ 1171.672312][ T5882] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1171.704616][ T5882] usb 1-1: USB disconnect, device number 64 [ 1171.717769][ T5829] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1171.798457][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 1171.810826][T17885] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.3238'. [ 1172.236602][T15128] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1172.547505][T15128] usb 8-1: Using ep0 maxpacket: 32 [ 1172.557171][T15128] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.569296][T15128] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.579898][T15128] usb 8-1: New USB device found, idVendor=1e9c, idProduct=2d51, bcdDevice= 0.00 [ 1172.675947][T15128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.768013][T15128] usb 8-1: config 0 descriptor?? [ 1173.072624][T17896] netlink: 'syz.0.3243': attribute type 4 has an invalid length. [ 1173.210375][T15128] hid-generic 0003:1E9C:2D51.000E: unknown main item tag 0x0 [ 1173.222638][T17898] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3244'. [ 1173.227210][T15128] hid-generic 0003:1E9C:2D51.000E: unknown main item tag 0x0 [ 1173.248944][T17898] FAULT_INJECTION: forcing a failure. [ 1173.248944][T17898] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.252257][T15128] hid-generic 0003:1E9C:2D51.000E: unknown main item tag 0x0 [ 1173.283859][T17898] CPU: 1 UID: 0 PID: 17898 Comm: syz.9.3244 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1173.287178][T15128] hid-generic 0003:1E9C:2D51.000E: unknown main item tag 0x0 [ 1173.294657][T17898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1173.312114][T17898] Call Trace: [ 1173.314092][T15128] hid-generic 0003:1E9C:2D51.000E: unknown main item tag 0x0 [ 1173.315393][T17898] [ 1173.325701][T17898] dump_stack_lvl+0x241/0x360 [ 1173.330412][T17898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1173.335632][T17898] ? __pfx__printk+0x10/0x10 [ 1173.337306][T15128] hid-generic 0003:1E9C:2D51.000E: hidraw0: USB HID v0.00 Device [HID 1e9c:2d51] on usb-dummy_hcd.7-1/input0 [ 1173.340221][T17898] ? __fib6_clean_all+0x456/0x4b0 [ 1173.356794][T17898] ? __fib6_clean_all+0xae/0x4b0 [ 1173.361769][T17898] should_fail_ex+0x3b0/0x4e0 [ 1173.366481][T17898] should_failslab+0xac/0x100 [ 1173.371197][T17898] ? __alloc_skb+0x1c3/0x440 [ 1173.375900][T17898] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1173.381722][T17898] __alloc_skb+0x1c3/0x440 [ 1173.386163][T17898] ? fib6_flush_trees+0x191/0x200 [ 1173.391221][T17898] ? __pfx___alloc_skb+0x10/0x10 [ 1173.396175][T17898] ? cap_capable+0x1b4/0x250 [ 1173.400793][T17898] ? print_irqtrace_events+0x220/0x230 [ 1173.406273][T17898] ? cap_capable+0x1b4/0x250 [ 1173.410888][T17898] ? safesetid_security_capable+0xb2/0x1d0 [ 1173.416711][T17898] ? __pfx_fib6_flush_trees+0x10/0x10 [ 1173.422100][T17898] xfrm_set_default+0x1f1/0x740 [ 1173.426972][T17898] xfrm_user_rcv_msg+0x75b/0xa80 [ 1173.431932][T17898] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1173.437444][T17898] ? __mutex_trylock_common+0x183/0x2e0 [ 1173.443006][T17898] ? __pfx___might_resched+0x10/0x10 [ 1173.448322][T17898] netlink_rcv_skb+0x1e3/0x430 [ 1173.453103][T17898] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1173.458582][T17898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1173.463914][T17898] xfrm_netlink_rcv+0x79/0x90 [ 1173.468612][T17898] netlink_unicast+0x7f6/0x990 [ 1173.473406][T17898] ? __pfx_netlink_unicast+0x10/0x10 [ 1173.478706][T17898] ? __virt_addr_valid+0x183/0x530 [ 1173.483835][T17898] ? __check_object_size+0x48e/0x900 [ 1173.489148][T17898] netlink_sendmsg+0x8e4/0xcb0 [ 1173.493951][T17898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.499269][T17898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.504567][T17898] __sock_sendmsg+0x221/0x270 [ 1173.509266][T17898] ____sys_sendmsg+0x52a/0x7e0 [ 1173.514057][T17898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.519384][T17898] __sys_sendmsg+0x292/0x380 [ 1173.523993][T17898] ? __pfx___sys_sendmsg+0x10/0x10 [ 1173.529139][T17898] ? __pfx_vfs_write+0x10/0x10 [ 1173.533951][T17898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1173.540307][T17898] ? do_syscall_64+0x100/0x230 [ 1173.545099][T17898] ? do_syscall_64+0xb6/0x230 [ 1173.549794][T17898] do_syscall_64+0xf3/0x230 [ 1173.554572][T17898] ? clear_bhb_loop+0x35/0x90 [ 1173.559271][T17898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.565186][T17898] RIP: 0033:0x7fc8a6d7e719 [ 1173.569618][T17898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.589247][T17898] RSP: 002b:00007fc8a7c26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.597685][T17898] RAX: ffffffffffffffda RBX: 00007fc8a6f35f80 RCX: 00007fc8a6d7e719 [ 1173.605672][T17898] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 1173.613660][T17898] RBP: 00007fc8a7c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.621651][T17898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.629640][T17898] R13: 0000000000000000 R14: 00007fc8a6f35f80 R15: 00007ffe0e93dc88 [ 1173.637652][T17898] [ 1173.640324][ T5829] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1173.649824][ T5829] Bluetooth: hci5: Injecting HCI hardware error event [ 1173.659708][ T5829] Bluetooth: hci5: hardware error 0x00 [ 1173.756446][T17903] FAULT_INJECTION: forcing a failure. [ 1173.756446][T17903] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.769532][T17903] CPU: 1 UID: 0 PID: 17903 Comm: syz.8.3246 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1173.780327][T17903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1173.790407][T17903] Call Trace: [ 1173.793702][T17903] [ 1173.796636][T17903] dump_stack_lvl+0x241/0x360 [ 1173.801330][T17903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1173.806557][T17903] ? __pfx__printk+0x10/0x10 [ 1173.811183][T17903] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1173.817191][T17903] ? __pfx___might_resched+0x10/0x10 [ 1173.822498][T17903] ? kfree+0x4e/0x440 [ 1173.826500][T17903] ? __nla_parse+0x40/0x60 [ 1173.830948][T17903] should_fail_ex+0x3b0/0x4e0 [ 1173.835656][T17903] should_failslab+0xac/0x100 [ 1173.840355][T17903] ? __alloc_skb+0x1c3/0x440 [ 1173.844971][T17903] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1173.850772][T17903] __alloc_skb+0x1c3/0x440 [ 1173.855183][T17903] ? __pfx___alloc_skb+0x10/0x10 [ 1173.860133][T17903] ? netlink_ack_tlv_len+0x6e/0x200 [ 1173.865359][T17903] netlink_ack+0x13f/0xa30 [ 1173.869811][T17903] netlink_rcv_skb+0x262/0x430 [ 1173.874595][T17903] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1173.880077][T17903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1173.885396][T17903] xfrm_netlink_rcv+0x79/0x90 [ 1173.890071][T17903] netlink_unicast+0x7f6/0x990 [ 1173.894837][T17903] ? __pfx_netlink_unicast+0x10/0x10 [ 1173.900124][T17903] ? __virt_addr_valid+0x183/0x530 [ 1173.905242][T17903] ? __check_object_size+0x48e/0x900 [ 1173.910537][T17903] netlink_sendmsg+0x8e4/0xcb0 [ 1173.915322][T17903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.920624][T17903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.925910][T17903] __sock_sendmsg+0x221/0x270 [ 1173.930583][T17903] ____sys_sendmsg+0x52a/0x7e0 [ 1173.935346][T17903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.940639][T17903] __sys_sendmsg+0x292/0x380 [ 1173.945223][T17903] ? __pfx___sys_sendmsg+0x10/0x10 [ 1173.950335][T17903] ? __pfx_vfs_write+0x10/0x10 [ 1173.955103][T17903] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1173.961440][T17903] ? do_syscall_64+0x100/0x230 [ 1173.966223][T17903] ? do_syscall_64+0xb6/0x230 [ 1173.970901][T17903] do_syscall_64+0xf3/0x230 [ 1173.975391][T17903] ? clear_bhb_loop+0x35/0x90 [ 1173.980059][T17903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.985946][T17903] RIP: 0033:0x7f44bfd7e719 [ 1173.990352][T17903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.009948][T17903] RSP: 002b:00007f44c0aec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.018353][T17903] RAX: ffffffffffffffda RBX: 00007f44bff35f80 RCX: 00007f44bfd7e719 [ 1174.026309][T17903] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1174.034272][T17903] RBP: 00007f44c0aec090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.042239][T17903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.050202][T17903] R13: 0000000000000000 R14: 00007f44bff35f80 R15: 00007fffaa204688 [ 1174.058167][T17903] [ 1174.197153][T17911] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3247'. [ 1174.702800][T17915] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3249'. [ 1175.194589][T17919] binder: 17918:17919 ioctl c0306201 20000080 returned -14 [ 1175.617538][ T8] usb 8-1: USB disconnect, device number 32 [ 1175.730495][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1175.895510][T17930] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3253'. [ 1176.327999][T17932] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.3255'. [ 1177.246652][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3256'. [ 1177.319320][T17946] overlayfs: missing 'workdir' [ 1178.076570][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.360232][T17963] netlink: 'syz.7.3262': attribute type 39 has an invalid length. [ 1179.402140][T17960] netlink: 'syz.1.3260': attribute type 4 has an invalid length. [ 1179.711862][T17970] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3263'. [ 1180.425208][T17977] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1181.013101][T17980] binder: 17972:17980 ioctl c0306201 20000080 returned -14 [ 1183.397114][T15128] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1183.558991][T15128] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1183.631951][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3274'. [ 1183.666318][T18006] overlayfs: missing 'workdir' [ 1184.288503][T15128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.337085][T15128] usb 8-1: config 0 descriptor?? [ 1184.353418][T15128] cp210x 8-1:0.0: cp210x converter detected [ 1184.577370][ T47] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1185.369292][T17994] netlink: 'syz.7.3272': attribute type 1 has an invalid length. [ 1185.384234][ T8] IPVS: starting estimator thread 0... [ 1185.450923][T18009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.478057][T18010] IPVS: using max 22 ests per chain, 52800 per kthread [ 1185.493894][T18009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.750370][ T47] usb 2-1: device not accepting address 51, error -71 [ 1185.794761][T18016] netlink: 'syz.1.3276': attribute type 4 has an invalid length. [ 1186.386206][T18021] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3277'. [ 1187.198303][T15128] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1187.208011][T15128] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1187.215656][T15128] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1187.235277][T15128] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1187.375407][T15128] usb 8-1: USB disconnect, device number 33 [ 1187.456693][T14825] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1187.787414][T15128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1187.807380][T15128] cp210x 8-1:0.0: device disconnected [ 1188.097346][T14825] usb 10-1: Using ep0 maxpacket: 32 [ 1188.104611][T14825] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1188.116271][T14825] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.195007][T18035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3283'. [ 1188.251121][T18035] overlayfs: missing 'workdir' [ 1188.856147][T14825] usb 10-1: config 0 descriptor?? [ 1188.857157][T18037] binder: 18032:18037 ioctl c0306201 20000080 returned -14 [ 1188.878987][T14825] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1188.921692][T14825] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1189.537919][ T47] usb 10-1: USB disconnect, device number 3 [ 1190.055232][T18051] usb usb8: usbfs: process 18051 (syz.1.3285) did not claim interface 0 before use [ 1190.079738][T14825] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1190.283421][T14825] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1190.346189][T14825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.596190][T14825] usb 9-1: config 0 descriptor?? [ 1190.625034][T14825] cp210x 9-1:0.0: cp210x converter detected [ 1190.702785][T18055] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3288'. [ 1190.887972][T18061] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3289'. [ 1191.043774][T18066] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1191.043774][T18066] program syz.7.3292 not setting count and/or reply_len properly [ 1191.072363][T18046] netlink: 'syz.8.3286': attribute type 1 has an invalid length. [ 1191.129395][T18046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.151201][T18046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.220234][T18046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.241141][T18046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.298739][T18046] bond1 (unregistering): Released all slaves [ 1191.541304][T14825] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1191.549257][T14825] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1191.563106][T14825] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 1191.602080][T14825] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1191.667509][T14825] usb 9-1: USB disconnect, device number 17 [ 1191.697936][T14825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1191.723657][T14825] cp210x 9-1:0.0: device disconnected [ 1191.886545][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3294'. [ 1191.919459][T18083] overlayfs: missing 'workdir' [ 1192.639532][T18082] netlink: 'syz.0.3295': attribute type 39 has an invalid length. [ 1192.794251][T18090] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3296'. [ 1192.825745][T18090] overlayfs: missing 'workdir' [ 1194.072359][T18096] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1194.072359][T18096] program syz.0.3298 not setting count and/or reply_len properly [ 1194.428321][ T5910] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1194.597682][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 1194.617610][ T5910] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1194.637096][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.666797][ T5910] usb 1-1: config 0 descriptor?? [ 1194.687539][ T5910] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1194.727854][ T5910] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1194.782139][T18108] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1194.782139][T18108] program syz.1.3303 not setting count and/or reply_len properly [ 1194.807750][T14824] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1194.933055][T18111] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1194.973697][T14825] usb 1-1: USB disconnect, device number 65 [ 1194.993493][T14824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.005878][T14824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.215898][T18117] netlink: 'syz.1.3306': attribute type 39 has an invalid length. [ 1195.216055][T14824] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1195.233039][T14824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.253812][T14824] usb 9-1: config 0 descriptor?? [ 1195.469105][T18106] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3302'. [ 1195.692462][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 1195.702193][T14824] usbhid 9-1:0.0: can't add hid device: -71 [ 1195.800188][ T5882] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1195.800381][T14824] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1195.819350][T14824] usb 9-1: USB disconnect, device number 18 [ 1195.978617][ T5882] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1195.990632][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.001551][T18130] netlink: 'syz.7.3309': attribute type 39 has an invalid length. [ 1196.051803][ T5882] usb 2-1: config 0 descriptor?? [ 1196.069126][ T5882] cp210x 2-1:0.0: cp210x converter detected [ 1197.679658][T18120] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 1197.716380][T18120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.725263][T18120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.945487][T18152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.993567][T18152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.063193][T18153] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1198.249749][T18120] bond2 (unregistering): Released all slaves [ 1198.453660][T18159] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1198.453660][T18159] program syz.0.3318 not setting count and/or reply_len properly [ 1198.543277][ T5882] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1198.554360][ T5882] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1198.562224][ T5882] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1198.580531][ T5882] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1198.620235][ T5882] usb 2-1: USB disconnect, device number 53 [ 1198.637196][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1198.670151][ T5882] cp210x 2-1:0.0: device disconnected [ 1198.721256][T18165] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1199.640258][T18181] FAULT_INJECTION: forcing a failure. [ 1199.640258][T18181] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.677547][T18181] CPU: 1 UID: 0 PID: 18181 Comm: syz.0.3324 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 1199.688370][T18181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1199.698465][T18181] Call Trace: [ 1199.701772][T18181] [ 1199.704728][T18181] dump_stack_lvl+0x241/0x360 [ 1199.709437][T18181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1199.714675][T18181] ? __pfx__printk+0x10/0x10 [ 1199.719295][T18181] ? __kmalloc_noprof+0xb0/0x400 [ 1199.724260][T18181] ? __pfx___might_resched+0x10/0x10 [ 1199.729579][T18181] should_fail_ex+0x3b0/0x4e0 [ 1199.734287][T18181] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1199.740555][T18181] should_failslab+0xac/0x100 [ 1199.745243][T18181] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1199.751492][T18181] __kmalloc_noprof+0xd8/0x400 [ 1199.756261][T18181] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1199.762342][T18181] genl_rcv_msg+0x802/0xec0 [ 1199.766847][T18181] ? mark_lock+0x9a/0x360 [ 1199.771180][T18181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1199.776223][T18181] ? __pfx_lock_acquire+0x10/0x10 [ 1199.781249][T18181] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1199.786626][T18181] ? __pfx_nl80211_deauthenticate+0x10/0x10 [ 1199.792521][T18181] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1199.797991][T18181] ? __pfx___might_resched+0x10/0x10 [ 1199.803289][T18181] netlink_rcv_skb+0x1e3/0x430 [ 1199.808055][T18181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1199.813093][T18181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1199.818386][T18181] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1199.823857][T18181] genl_rcv+0x28/0x40 [ 1199.827841][T18181] netlink_unicast+0x7f6/0x990 [ 1199.832607][T18181] ? __pfx_netlink_unicast+0x10/0x10 [ 1199.837887][T18181] ? __virt_addr_valid+0x183/0x530 [ 1199.843010][T18181] ? __check_object_size+0x48e/0x900 [ 1199.848313][T18181] netlink_sendmsg+0x8e4/0xcb0 [ 1199.853083][T18181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1199.858373][T18181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1199.863654][T18181] __sock_sendmsg+0x221/0x270 [ 1199.868331][T18181] ____sys_sendmsg+0x52a/0x7e0 [ 1199.873102][T18181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1199.878399][T18181] __sys_sendmsg+0x292/0x380 [ 1199.883095][T18181] ? __pfx___sys_sendmsg+0x10/0x10 [ 1199.888414][T18181] ? __pfx_vfs_write+0x10/0x10 [ 1199.893211][T18181] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1199.899558][T18181] ? do_syscall_64+0x100/0x230 [ 1199.904332][T18181] ? do_syscall_64+0xb6/0x230 [ 1199.909014][T18181] do_syscall_64+0xf3/0x230 [ 1199.913525][T18181] ? clear_bhb_loop+0x35/0x90 [ 1199.918226][T18181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.924126][T18181] RIP: 0033:0x7fdd61d7e719 [ 1199.928597][T18181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.948223][T18181] RSP: 002b:00007fdd62aff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1199.956647][T18181] RAX: ffffffffffffffda RBX: 00007fdd61f35f80 RCX: 00007fdd61d7e719 [ 1199.964631][T18181] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000003 [ 1199.972612][T18181] RBP: 00007fdd62aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.980590][T18181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.988568][T18181] R13: 0000000000000000 R14: 00007fdd61f35f80 R15: 00007ffd0ac8f578 [ 1199.996571][T18181] [ 1200.818438][T18191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1200.826406][T18191] IPv6: NLM_F_CREATE should be set when creating new route [ 1201.226437][T18193] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3329'. [ 1201.296546][T18195] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3330'. [ 1201.397062][T14824] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1202.541172][T18210] netlink: 'syz.1.3336': attribute type 11 has an invalid length. [ 1202.877313][T14824] usb 10-1: Using ep0 maxpacket: 8 [ 1202.884533][T14824] usb 10-1: config 0 has an invalid interface number: 145 but max is 0 [ 1202.893146][T14824] usb 10-1: config 0 has no interface number 0 [ 1203.269328][T18215] program syz.1.3336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.311281][T14824] usb 10-1: New USB device found, idVendor=0df6, idProduct=0059, bcdDevice=e1.fc [ 1203.327831][T14824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.358175][T14824] usb 10-1: Product: syz [ 1203.372054][T14824] usb 10-1: Manufacturer: syz [ 1203.396094][T14824] usb 10-1: SerialNumber: syz [ 1203.588787][T14824] usb 10-1: config 0 descriptor?? [ 1203.594071][ T5910] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1203.619523][T14824] usb 10-1: can't set config #0, error -71 [ 1203.626842][T14824] usb 10-1: USB disconnect, device number 4 [ 1203.782198][ T5910] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1203.796551][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.823173][ T5910] usb 8-1: config 0 descriptor?? [ 1203.848265][ T5910] cp210x 8-1:0.0: cp210x converter detected [ 1204.415034][T18202] netlink: 'syz.7.3334': attribute type 1 has an invalid length. [ 1204.740116][T18230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.768273][T18230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.830764][T18202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.847647][T18202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.015278][T18230] bond3 (unregistering): Released all slaves [ 1205.140939][T18233] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3342'. [ 1205.204836][ T5910] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1205.233482][ T5910] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1205.241312][ T5910] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 1205.264092][ T5910] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1205.272288][T18238] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1205.282189][ T5910] usb 8-1: USB disconnect, device number 34 [ 1205.304909][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1205.313778][ T5910] cp210x 8-1:0.0: device disconnected [ 1205.530186][T18242] netlink: 'syz.1.3346': attribute type 39 has an invalid length. [ 1207.150056][T18270] binder: 18266:18270 ioctl c0306201 20000080 returned -14 [ 1207.254966][T18273] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3355'. [ 1207.464905][T18281] netlink: 'syz.9.3360': attribute type 39 has an invalid length. [ 1208.177031][ T5882] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1208.419902][ T5882] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1208.429980][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.720855][ T5882] usb 10-1: config 0 descriptor?? [ 1208.742638][ T5882] cp210x 10-1:0.0: cp210x converter detected [ 1209.364951][T18304] netlink: 'syz.9.3363': attribute type 1 has an invalid length. [ 1209.490985][T18304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.546170][T18304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.608217][T18291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.663570][T18291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.891180][T18304] bond1 (unregistering): Released all slaves [ 1209.952305][ T5882] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1210.087029][ T5882] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1210.095282][ T5882] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1210.124148][T18316] netlink: 'syz.8.3371': attribute type 4 has an invalid length. [ 1210.161221][T18316] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3371'. [ 1210.199584][ T5882] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1210.299408][ T5882] usb 10-1: USB disconnect, device number 5 [ 1210.431222][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1210.496520][ T5882] cp210x 10-1:0.0: device disconnected [ 1210.512492][T18319] nfs4: Unknown parameter '!.]' [ 1210.521059][ T5829] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1210.686176][T18324] netlink: 'syz.1.3374': attribute type 39 has an invalid length. [ 1211.577007][ T5882] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1211.925604][ T5882] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1212.045782][ T5882] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1212.328097][ T5882] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.337300][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1212.345314][ T5882] usb 9-1: SerialNumber: syz [ 1212.403764][T18343] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.437602][T18355] netlink: 'syz.0.3388': attribute type 39 has an invalid length. [ 1212.625862][T18343] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.657137][T15133] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1212.857004][T18371] netlink: 'syz.7.3393': attribute type 4 has an invalid length. [ 1212.907613][T15133] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1212.926352][T15133] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.961531][T18371] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3393'. [ 1213.330944][ T5882] cdc_ether 9-1:1.0 eth17: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1213.367938][T15133] usb 10-1: config 0 descriptor?? [ 1213.388871][T15133] cp210x 10-1:0.0: cp210x converter detected [ 1214.351305][T18361] netlink: 'syz.9.3389': attribute type 1 has an invalid length. [ 1214.382777][T18383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3397'. [ 1214.397884][T18361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.417206][T18361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.448737][T18361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.476684][T18361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.682761][T18388] bond1 (unregistering): Released all slaves [ 1214.801382][T15133] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1214.819697][T15133] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1214.837607][T15133] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1214.849331][T15133] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1214.867753][T15133] usb 10-1: USB disconnect, device number 6 [ 1214.887424][T15133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1214.895348][T15133] cp210x 10-1:0.0: device disconnected [ 1215.237634][T18392] netlink: 165 bytes leftover after parsing attributes in process `syz.7.3400'. [ 1215.571351][ T5910] usb 9-1: USB disconnect, device number 19 [ 1215.591917][ T5910] cdc_ether 9-1:1.0 eth17: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 1215.770009][T18396] netlink: 'syz.1.3402': attribute type 39 has an invalid length. [ 1215.806226][T18411] bridge_slave_0: default FDB implementation only supports local addresses [ 1216.020129][T18415] netlink: 'syz.9.3409': attribute type 4 has an invalid length. [ 1216.179966][T18418] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3409'. [ 1216.463508][T18422] usb usb8: usbfs: process 18422 (syz.0.3411) did not claim interface 0 before use [ 1217.025396][ T12] unregister_netdevice: waiting for vcan0 to become free. Usage count = 4 [ 1217.045322][ T12] ref_tracker: vcan0@ffff888063d20620 has 1/1 users at [ 1217.045322][ T12] ib_device_set_netdev+0x2cb/0x6b0 [ 1217.045322][ T12] rxe_register_device+0x21e/0x380 [ 1217.045322][ T12] rxe_net_add+0x98/0x110 [ 1217.045322][ T12] rxe_newlink+0xde/0x1a0 [ 1217.045322][ T12] nldev_newlink+0x5c0/0x640 [ 1217.045322][ T12] rdma_nl_rcv+0x6dd/0x9e0 [ 1217.045322][ T12] netlink_unicast+0x7f6/0x990 [ 1217.045322][ T12] netlink_sendmsg+0x8e4/0xcb0 [ 1217.045322][ T12] __sock_sendmsg+0x221/0x270 [ 1217.045322][ T12] ____sys_sendmsg+0x52a/0x7e0 [ 1217.045322][ T12] __sys_sendmsg+0x292/0x380 [ 1217.045322][ T12] do_syscall_64+0xf3/0x230 [ 1217.045322][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.045322][ T12]