last executing test programs: 7m32.157800892s ago: executing program 32 (id=635): syz_clone(0x4805cf0c237bbfc9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x48482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r2, &(0x7f00000194c0)=""/102376, 0x18fe8) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x200) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = dup3(r1, r4, 0x0) read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020) 7m22.039155414s ago: executing program 33 (id=660): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010101, 0x0, 0x2, 'fo\x00', 0x0, 0x20}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}], 0x1, 0x68034) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 6m48.615332217s ago: executing program 34 (id=758): openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0xe, 0xe, @generic=0xfe, 0x3e, 0x4, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%pS \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000680)={[0x400, 0x2, 0xfff, 0x80, 0x3, 0x1, 0x893, 0x80000001, 0x10000, 0xe, 0x7, 0x1, 0x9, 0x80000001, 0x10001, 0x8], 0xeeee8000, 0x180800}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000cd4ea0973374c15000000000021f0000", @ANYRES32=r5, @ANYBLOB="08000100e000000208000200e000000208000400ffffffff"], 0x30}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7ac30000010000000035dc1ba0b8000000000100", @ANYRES32=r6, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000001000000010000000f00"/24, @ANYRES32=r6, @ANYBLOB], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7ac30000010000000035dc1ba0b8000000000100", @ANYRES32=r6, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000001000000010000000f00"/24, @ANYRES32=r6, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110002", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x1f) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x1f) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000d93d6d160a0000000500000050800000", @ANYRES32, @ANYBLOB="d1faffff00"/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB="01000000000000000b9168037eeb", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) dup(r11) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r12, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r12, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r12, 0x5001, 0x0) 6m44.925113197s ago: executing program 35 (id=776): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) timer_create(0x1, &(0x7f0000000180)={0x0, 0x5, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1a, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x28) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="e80000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c00012800c0001006d6163766c616e00b0000280080001001000000008000300030000000800030003000000340005800a0004000180c200000e00000a00040000000000000000000a000400aaaaaaaaaabb00000a000400ffffffffffff0000060002"], 0xe8}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x284, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x265, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x58, "8b7668a21729e4ad77e366ae9e66d671f8bb54784e373e2223fde04977365429048047ad806c438142ae7889f37bbd41e50a26612ce77fcf71400d7c1e0a34b043fbb4ca6b6e5ecb7c8169982fe3f1261537a3b4467e0db0"}, {0xdd, 0xbb, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd528566752ef4090016895d45162f023cde71dbd618a52517986b705c5e653ee0e7edda93407e44be1c203b816d0181c08d643268af338ccd2d0a90dccc0d6a01613fb6ae8a1424"}, {0xdd, 0xbd, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe876ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df31389e8ac5150470ceda144758f"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x61, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b561"}]}}]}, 0x284}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000000000000000000000000000d96e6c8d5e85080045f00d80724e"], 0x34}], 0x1}, 0x0) 6m9.017390748s ago: executing program 36 (id=861): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-neon)\x00'}, 0x58) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) 5m57.863609274s ago: executing program 37 (id=879): r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) 5m52.328129707s ago: executing program 38 (id=888): add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfe00, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m46.237567361s ago: executing program 39 (id=897): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x100}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x0) 5m40.045711456s ago: executing program 40 (id=905): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x200f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x4e, 0xd7, 0x10, 0x1de1, 0xc102, 0x8433, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0x11, 0x4a, 0xfe}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000000080)=""/12, &(0x7f0000000000)=0xc) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x8, 0x0, "57e13f220e08"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m20.823700705s ago: executing program 41 (id=916): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x132, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x80000000, 0x42}) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) recvfrom$l2tp(r0, &(0x7f00000000c0)=""/132, 0x84, 0x20, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000001c0)=0x5b5, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) accept$ax25(r1, &(0x7f0000000200)={{0x3, @null}, [@bcast, @rose, @bcast, @netrom, @bcast, @bcast, @null, @default]}, &(0x7f0000000280)=0x48) socketpair(0x29, 0x2, 0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$rtc(&(0x7f0000000300), 0xfffffffffffffffa, 0x40) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000340)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) prlimit64(r5, 0x6, 0x0, &(0x7f0000000400)) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000480)={0x2, {0xfffffffe, 0x88, 0x4, 0x9}, {0x3a8a379e, 0x9, 0xffffffff, 0x5}, {0x7c0c, 0xad74fbd9}}) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x9, 0x103201) ioctl$SG_GET_SG_TABLESIZE(r7, 0x227f, &(0x7f0000000500)) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000600)={0x5f0, r10, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x58c, 0x11d, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x8}, {0x4, 0x8}, {0x3, 0x7}, {0x7, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb85, 0xf031, 0xf62, 0x4, 0xa, 0x8000, 0xb47]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8000, 0x1, 0x1e3b, 0x6, 0x8000, 0x138, 0x4]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x6c, 0x24, 0x16, 0x36, 0x36, 0x18, 0x9b0d01d58a48ab16, 0x18, 0x9, 0x3, 0x5, 0x18, 0x48, 0x1, 0x12, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x70b3, 0x6, 0x800, 0x1, 0x1, 0xa8, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x6, 0x36, 0x3, 0x1, 0x60, 0x9, 0xbf74601b8d310e9f, 0x36, 0x2f, 0xb, 0x4, 0x0, 0x16, 0x30, 0x60, 0x12, 0x6, 0x6c, 0x6, 0x48, 0x6c, 0x1, 0x12, 0xb, 0x1b, 0x5, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x0, 0x1, 0x2, 0x7b2, 0x3, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x18, 0x48, 0x18, 0x1b, 0x30, 0x24, 0x6, 0x30, 0x4, 0x36, 0x36, 0xb, 0x60, 0x1, 0x4, 0xb, 0x5, 0x60, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{}, {0x4, 0x6}, {0x7, 0x2}, {0x3}, {0x0, 0x9}, {0x7, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x6}, {}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x5}, {0x5, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x6, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0xa}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x4, 0x9}, {0x3, 0x4}, {0x3}, {0x7, 0xa}, {0x3, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x3}, {0x3, 0x2}, {0x5, 0x8}, {0x4}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x8}, {0x5, 0x6}, {0x1, 0x3}, {0x2, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x0, 0x24]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x3}, {0x2, 0x2}, {0x7, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0x7}, {0x2, 0x6}, {0x4, 0xa}, {0x6, 0x4}, {0x5, 0x6}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x7}, {0x0, 0x7}, {0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x5, 0x6}, {0x2}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x5, 0x8}, {}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc96, 0xccec, 0x2, 0x4000, 0x5, 0xffff, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe, 0x2, 0x0, 0xe33a, 0xfff7, 0x4, 0xfb2, 0x101]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1b, 0x4, 0x4, 0x9, 0x6c, 0x1b, 0x16, 0x6, 0x14, 0x9, 0x48, 0x36, 0x6c, 0x6, 0x2, 0x3, 0x1, 0x9, 0x9, 0x3, 0x9, 0x1b, 0x48, 0x0, 0x6]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x2}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x8}, {0x2}, {0x6, 0x9}, {0x4, 0x5}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x5, 0xfbff, 0x2e, 0x0, 0x7f, 0x401]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x69, 0x48, 0x24, 0x9, 0x0, 0x2, 0x6c, 0x12, 0x24, 0xc, 0x18, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4507, 0x1552, 0x3, 0x1000, 0x1, 0x3, 0x380, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1000, 0x68, 0x3, 0x5, 0x0, 0x2, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x9, 0xfff, 0x0, 0xf, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x8}, {0x2}, {0x5, 0x9}, {0x5, 0x8}, {0x6}, {0x7, 0x3}, {0x5, 0x3}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x6}, {0x2, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x8}, {0x6, 0x8}, {0x6, 0x8}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0xa}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x8}, {0x3, 0x4}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x19}, {0x4, 0x4}, {0x1, 0x3}, {0x3, 0x5}, {0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x3}, {0x4}, {0x5, 0x5}, {0x1}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffdd}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x40, 0x4, 0x39e8, 0x1, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x1}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a9c, 0x7f, 0x85, 0x3, 0x2, 0x4, 0xce, 0xf1c]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x7, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff38, 0x8, 0x56d8, 0x800, 0x1f, 0x6, 0x4c, 0xb6f2]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x9}, {0x1, 0x6}, {0x3, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x4, 0xfffc, 0x8, 0x8, 0x1, 0x162]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xedd7, 0x800, 0xb41c, 0xfff9, 0x4, 0x4, 0xa]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x18, 0x3, 0x12, 0xc, 0x18, 0x16, 0x48, 0x24, 0x4, 0xb, 0x4, 0x36, 0x48, 0x6c, 0x9, 0xb, 0x5, 0x18, 0x48, 0x3, 0x2]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x36, 0x18, 0x386ccc651aac05e8]}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x56, 0xfffd, 0x281a, 0x54f, 0x3, 0x800, 0x98]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x53}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}]}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x1}, 0x80) capset(&(0x7f0000000c80)={0x20080522, r5}, &(0x7f0000000cc0)={0x6, 0x77c616cb, 0x7, 0x13, 0x81, 0x80000000}) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) syz_open_dev$sndpcmp(&(0x7f0000000d40), 0x9, 0x2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r10, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x5a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004093}, 0x100) close_range(r6, r11, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000e80)={"6a81a272301f2bdba90b113706d3381c", 0x0, 0x0, {0x7, 0x9}, {0x2, 0xc}, 0x4, [0x7f, 0x3, 0x4, 0xf38, 0xd83f, 0x7, 0x8b, 0x1ff, 0x8, 0x4, 0x8000000000000001, 0xd0, 0x3, 0x1, 0x6, 0x10001]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000001000)={{r4}, r12, 0x2, @inherit={0x60, &(0x7f0000000f80)={0x0, 0x3, 0x8000000000000001, 0x7ff, {0x1, 0x88a, 0x9af, 0xe8, 0x7ff}, [0x7, 0x7f, 0x100]}}, @subvolid=0x1}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000002000)={@id={0x2, 0x0, @a}}) getsockname$l2tp6(r3, &(0x7f0000002040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002080)=0x20) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000020c0)={0x1, '\x00', 0x3}, 0x18) 4m53.82282s ago: executing program 5 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000051}}], 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7, 0x40000) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f00000001c0)=0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r8}, 0x10) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0xfc, 0x0}, 0x30004001) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000001500)={0x5, 0x165c, 0x7, 0x0, 0xc}) r11 = add_key$user(&(0x7f00000004c0), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000280)="ed62223461f02d63e7dfbe4fe373357ef335ab9c0cb010", 0x17, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r11, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={'blake2b-256\x00'}}) 4m52.437883973s ago: executing program 5 (id=972): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x5, 0x0, @SEQ_CONTROLLER=0xfe, 0x2, 0x7f, 0x7f}) 4m50.377685891s ago: executing program 5 (id=977): setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "160d945b384657cea911d4709c4780cb"}, 0x11, 0x3) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80000) sendto$unix(r0, &(0x7f0000000180)="221cb63f2d56d9998bc9d542c923a9ecaad9a1d4396e5ba8eda8c6c371eba4666780d26f773062df351fd7fcabae12eb7c02e5fcd5382e96fbdd70256bb6c0ac58bac44b064abea7e4135d2e0cb859cd9982e083d257c704b8d64452f8e335b3", 0x60, 0x10000850, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x80000001, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/video#\x00'}, {0x20, ',^%@)@'}, {0x20, 'security.evm\x00'}, {0x20, 'security.evm\x00'}], 0xa, "00dadd99b67e1879491fa59fb66d42b7e6d7f1a2cff07048ba1c88b2790b2aa47bfe38195e27e546a353a5a924831596e6c030c70d1fbf8753389bbf13c32be5184a670ee70878238a983b"}, 0x86) close_range(r0, r0, 0x2) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x2000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0x0}}, './file0\x00'}) renameat2(r2, &(0x7f0000000340)='\x00', r3, &(0x7f00000003c0)='./file0/file0\x00', 0x6) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000400)=0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000440)) removexattr(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)=@random={'os2.', ',^%@)@'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'hsr0\x00', &(0x7f0000000500)=@ethtool_regs={0x4, 0x5, 0xc0, "a7018de6c66e057f9b2f3907c1815aae99cf2acd0345a2d2f92416c390b7b81457a355beb8d418fce1dba0a6422d120d32751e62c2b68d0b2147f2d0c17ade8fe25b1ded7527c12186d210946ceae79c38791a268b75d417e259a6082cc3e2d9e346d18b78f92f2a784ca1031301ef8351dea5ad71fbb92a38e669d94f0e51d39cd7a58fa83e238741e826378bcdf07feac6299c4c03b451dd5cf11548e49d16acba31eab9948789c971280dd623ce9ee59bf562e34d6c8f2c5215e484af7c3a"}}) unshare(0x28000200) mknodat$null(r3, &(0x7f0000000640)='./file0/file0/file0\x00', 0x2, 0x103) write$binfmt_aout(r3, &(0x7f0000000680)={{0x0, 0x3, 0x7, 0x300, 0x16c, 0x5, 0x2f4, 0x1}, "44e63583c668656d0bc7dbe227d0de25b27cf76d8a956f8e59a99c39f36ce51169bcd4a03d465ce3f2d5163a8b3748eec35f63986c31af5b724b45d36fd6bc8117773ae1ef14796a3b6f0f887d0a4615c442e9fd364041d4dd06b7b23736b50fe7fb35d2b65e02c960eb9524c5ea44d9cfd89cd61b07f429c53ea69500f0f8400ff36232622f48efb70324518292a707f78680742bdfcb5d4674c751a940e7bf258884ec38bc3b1905f382fdda06d705ca1ffcfe8edff979db8eba849dbe48f7", ['\x00', '\x00']}, 0x2e0) syz_open_dev$tty20(0xc, 0x4, 0x0) connect$unix(r0, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r6 = accept4$vsock_stream(r3, &(0x7f0000000a00)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) write(r6, &(0x7f0000000a40)="fcaa1c1baf593669d8ef80688ab4960fb58a45c1e0ec202716e176cade092373d055c7ac05d376f0e5326b636f16ffeabb493da8383d134547967ad36fbd9614f830b591f1565c00310b41755658b0507ffc624ac2123a663c12ce1fdc403ada057ab4ef55997833c46f86503396eb88a17700c86c343f7e4d58db52f66620c2a95d51f996d685e22b1bbdc1127f122088cf1c49cc8168d22ab0c656aa8a619d8fad380db8afa317ff3f4bd96a5f0cc68b98ed283f8df8aba0f3f9943110eb33f84b0ce0b2955080", 0xc8) r7 = openat$cgroup_ro(r3, &(0x7f0000000b40)='memory.stat\x00', 0x0, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000b80)={0x1, 0x7}, 0x4) getpeername$unix(r3, &(0x7f0000000bc0), &(0x7f0000000c40)=0x6e) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000c80)="9ad4abafa3d14d4e734835dd446ecf9b2f7de777d2df4657e19a325e7892862cb59c660fd4b5468e085aa3805c0f773bfb", 0x31) setxattr$security_capability(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), &(0x7f0000000d40)=@v1={0x1000000, [{0x1c0, 0x6}]}, 0xc, 0x3) fsetxattr$smack_xattr_label(r0, &(0x7f0000000d80)='security.SMACK64IPOUT\x00', &(0x7f0000000dc0)={'2'}, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000e00)={0xfffffff8, 0x4, 0x7421, 0x7, 0x1a, "e396b408f0775ba7ba0c6c6ecd4b9bc5ed79e2"}) mount$fuse(0x0, &(0x7f0000000e40)='./file0/file0\x00', &(0x7f0000000e80), 0x41040, &(0x7f0000000ec0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@blksize}, {@allow_other}, {@blksize}, {@default_permissions}, {@allow_other}], [{@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '//\\U!}{^$(/]'}}, {@obj_user={'obj_user', 0x3d, '!\'!]$&'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@euid_lt={'euid<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@audit}]}}) ioctl$int_in(r6, 0x73, &(0x7f0000001080)=0x6) 4m49.252100116s ago: executing program 5 (id=981): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000036000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x8d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1900) move_mount(r5, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 4m48.093088628s ago: executing program 5 (id=983): socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x200001ff, 0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f00000196c0)=""/102400, 0x19000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$kcm(0x10, 0x2, 0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f00000000c0)={0x2800000000000000, 0x5, 0x31f, 0x8aa, 0x6, 0x80000000, "aa1ef470db8ed64bb2cd04f1f2d5b8de", 0x6, 0x9, 0xc, 0x2, 0x7, 0x2, 0x7}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@enum64={0x4, 0x5, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x9}, {0x7, 0xd2, 0x3}, {0xe, 0x1, 0xe7}, {0x2, 0x7fff, 0xffff3c36}, {0x5, 0x7, 0x9}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x61, 0x4f]}}, &(0x7f0000000c40)=""/3, 0x67, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) mount$bpf(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x4001, &(0x7f0000001480)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'upperdir'}}, {@smackfsdef={'smackfsdef', 0x3d, 'workdir'}}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 4m47.284152273s ago: executing program 5 (id=987): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x8041) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x40000000, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf7", 0x8f, 0xbcff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)='w', 0xff1d}], 0x1}}], 0x1, 0x0) 4m47.140543598s ago: executing program 42 (id=987): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x8041) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x40000000, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf7", 0x8f, 0xbcff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)='w', 0xff1d}], 0x1}}], 0x1, 0x0) 4m7.621912997s ago: executing program 7 (id=1082): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) 4m4.007020312s ago: executing program 7 (id=1090): creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x8b) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b00000001"], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0xe4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="97eb000014006bcd9e", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000028b8fbf0135480cbed3121033a279d9a5bdaeb50be23a96fc70148acd2a3eb2eb0fc76130e409a700052fa4c5f2b9dab8790c3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESDEC=r5, @ANYRES8=r5, @ANYRES64=r5, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00120000bf8610000000000007080000f8c3bb025effffffbfa400000000000007040000f080ffffff02000008000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m2.920118567s ago: executing program 7 (id=1092): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdba035c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c704160234cbe6711c76372076e94c9a1511974e3c6c948f3c1294d5273b7a8785638e015ca186365a0780c2abe89b9b661b33c94fed77b62accd2319f7cc36deaac42e1f85059724848efddfd2fd9555a7e2cdc4bdc7c14c5f8233a3f909b1ff3d0ed093a9221a96ef9594df01d3b07fc56c717e7d23805960abc946277f852e3c636ef3e7518d28582c6717ca362bb5460958fb62dbc25cdb17b35954f2bd35afabd0bdc9c0b31dabebf7d8b68f9aac69a29e3add723905b5988511a65bb33d4fcb23a0b1fbc634f46391a1764097542333aa1757d46df95992eb7c83e0ebf40a96f8cb53b2b9857b58855773a94c12f82ff7e87ce85bf2c8353a37bda9c3addb6e4c508c41a87e9acc76e3fa36cd08ef780fae25ed3ed2c5ba39c712447023375f8f9bff0f2002b635a07bce90bb5facb3f37daf64bbf0449e9fdf53c5a464e5b4df46de633e0ef3e2bc51b7637fcb48d48111f94b0dd01cb84e8de5390f1ea5d11fa153a67b"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x200000, 0xffffffff}, 0xfffffd2f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m1.844511911s ago: executing program 7 (id=1094): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000036000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x8d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1900) move_mount(r4, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 3m56.339054151s ago: executing program 7 (id=1103): socket$kcm(0x29, 0x2, 0x0) (async) socket$inet6(0xa, 0x806, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES16=r0], 0x2c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004010) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) (async) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4010, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532302c616669643d30783030303030303030303030303030ba2480524c5db44930352c6163636573733d757365722c7375626a5f726f6c653d2f212e21222e2d2e2c00"]) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f0000000000)=""/8, 0x2}, 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3m55.816098205s ago: executing program 1 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d5010cb601e439581f47299223309b00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) ioperm(0x5, 0x81, 0x8) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7ffc0000) 3m55.593231539s ago: executing program 7 (id=1107): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x470741) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x2, 0x5, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x1, 0x3}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000240), 0x0, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xa02, 0x0) (async) r9 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x11105}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r9, 0x780, 0x0, 0xc, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) 3m55.401157912s ago: executing program 43 (id=1107): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x470741) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x2, 0x5, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x1, 0x3}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000240), 0x0, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xa02, 0x0) (async) r9 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x11105}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r9, 0x780, 0x0, 0xc, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) 3m55.329817823s ago: executing program 1 (id=1110): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000002200099f0000000000006000002", 0x11) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x40100) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="b75268b96bc507bca9005439ab86a419c6c8e163c6468b339c1fb53d09c6072b50409b4e3941c63575d5257e4a7361acce74f77a9a9a769b41c5f35b195289c7a3b971298abee10a54167bbf3cca"], 0x11}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 3m55.063727604s ago: executing program 1 (id=1111): socket$pptp(0x18, 0x1, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) io_setup(0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xd, 0xa, 0x3, "3258c546dacccfae1e008faa001b0000f4ff4000", 0x31424752}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x0, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$can_bcm(0x1d, 0x2, 0x2) 3m53.457502962s ago: executing program 1 (id=1113): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000036000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x8d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1900) move_mount(r4, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 3m52.248791178s ago: executing program 1 (id=1116): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r4, &(0x7f0000000280)=""/44, 0x2c) ioctl$KDMKTONE(r5, 0x4b30, 0x8000000000000001) 3m51.334444372s ago: executing program 1 (id=1120): syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64], 0x0) 3m50.028701435s ago: executing program 44 (id=1120): syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64], 0x0) 2m36.981995437s ago: executing program 4 (id=1274): ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x6, {0xfffe, 0x0, 0x8000}}}) r0 = socket$inet(0x2, 0x800, 0x5) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r5, r5}, &(0x7f00000000c0)=""/28, 0x1c, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) 2m35.330432568s ago: executing program 4 (id=1279): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x88) ioperm(0x0, 0x1, 0x6) (async, rerun: 64) map_shadow_stack(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) close(r0) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) fcntl$lock(r6, 0x26, &(0x7f0000000380)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) (async, rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), r5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000180)={0x30, r9, 0x1, 0x3fffffd, 0x20, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x28, 0x8001}}}}}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r12) sendmsg$IEEE802154_ASSOCIATE_REQ(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, r13, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x30}}, 0x0) (async, rerun: 32) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000440)="5896a82b15fe658303fb0b7a72a744af0d446d3581dc1f72449a89e97aa4bd0e73a7d36fe62684d9596c02492785f06c9f6342c82658d3c8b84d5460df1b4345773c16ace561060b19ac34d6eb3cc0a8df6b1cbd1bccf604d3a7b57ae7c265bac4a22042185d1c29d5a99248212d21ab16bb2014c31ffca78894416158c4d76f438b5809cf1a1e704d39aa3a9184936cd62979296f97a5942b35a0b81df879e1f7b1d09d93aef048f9ae1a81f633e4f1a69896582791fb58ac9406332d5d7d5f0e5216f8dbc0be2879366405a888431cb2af58eaa7054cd01a") (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r9, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004) (async) shutdown(r1, 0x1) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m34.839982627s ago: executing program 4 (id=1281): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000019300)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x182) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x183800) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06464ce, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = signalfd4(r6, &(0x7f0000000000)={[0x8]}, 0x8, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x800) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r7) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000008) ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f00000001c0)={0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m33.535286495s ago: executing program 4 (id=1286): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x17, 0x2, 0x0, 0x27, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd26, 0x3503}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private0, 0x2b, 0x14, 0x14}, @sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0x6, 0x2d}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_ident={0x2, 0xb, 0x5, 0x0, 0xfe}, @sadb_x_sec_ctx={0x19, 0x18, 0xa4, 0x3, 0xc0, "469347c65345034499a76699047cd6a142201401fe6d5fa7650286f8fbf524bf8529f747a892d83ba4e86c757cb5598771cfd8ba819349cb3f7ad08e8e9cf94337da57823661ec88e7614677523097f2bef05b566fe522ed10b74f6e231c035db4b8ea0eb272ec3c3e186cfdd087210bfb7c142f127546df6700edbabde2a5cbe143a5645d3c354ef90d23eabcb22664e8ad631274a5d4a8388586f9ec8581d9a6279c7ffdf7d5e1da162cfcd574a5f5b69fda5e764fb3a03f17d13b9eea03a4"}]}, 0x138}}, 0x4044800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x2000000, 0x20, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffe64}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4a95}, @IFLA_LINK_NETNSID={0x0, 0x25, 0x1}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x2000000, 0x20, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffe64}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4a95}, @IFLA_LINK_NETNSID={0x0, 0x25, 0x1}]}, 0x5c}}, 0x0) 2m32.784225668s ago: executing program 4 (id=1290): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='limits\x00') unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') setns(r1, 0x20000) read$hiddev(r0, &(0x7f0000000300)=""/51, 0x33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x8, 0x30, r3, 0x83000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x4, 0x4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000100)) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000080)=@id, 0x10, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4097, 0x1001}], 0x1}, 0x2000}], 0x1, 0x0, 0x0) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="08000800000012000000000000004500002800000000001e9078ac1e0001ac1414bb0000883e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=r3], 0x36) 2m29.544140929s ago: executing program 4 (id=1300): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) unshare(0x60480) r2 = socket(0x840000000002, 0x3, 0x100) pwritev2(r2, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x4, 0x400, 0x0, 0x100000001, 0x240000, r1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) connect$unix(r10, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x5c) connect$unix(r9, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) read(r7, &(0x7f0000000cc0)=""/384, 0x180) r12 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x101, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000000540)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r14, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r12, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) splice(r4, 0x0, r3, 0x0, 0x800000000000045, 0x0) 2m14.075711176s ago: executing program 45 (id=1300): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) unshare(0x60480) r2 = socket(0x840000000002, 0x3, 0x100) pwritev2(r2, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x4, 0x400, 0x0, 0x100000001, 0x240000, r1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) connect$unix(r10, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x5c) connect$unix(r9, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) read(r7, &(0x7f0000000cc0)=""/384, 0x180) r12 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x101, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000000540)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r14, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r12, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) splice(r4, 0x0, r3, 0x0, 0x800000000000045, 0x0) 37.42571838s ago: executing program 6 (id=1977): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 36.936053606s ago: executing program 6 (id=1982): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010100, {[@generic={0x88, 0x2}, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x3, 0x2f) r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fcntl$addseals(r1, 0x409, 0xe) ftruncate(r1, 0x800000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x50, 0x0, 0x5f}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) unshare(0x2040600) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x9, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x10001, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x1]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 36.637473629s ago: executing program 6 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (fail_nth: 1) 36.132824252s ago: executing program 6 (id=1989): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x8d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1900) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 35.138719803s ago: executing program 6 (id=1996): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010100, {[@generic={0x88, 0x2}, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x3, 0x2f) r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fcntl$addseals(r1, 0x409, 0xe) ftruncate(r1, 0x800000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x50, 0x0, 0x5f}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) unshare(0x2040600) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x9, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x10001, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x1]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 34.786395415s ago: executing program 6 (id=1999): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x8, 0x5, 0xa, 0xe, 0xb, 0x7, 0x10, 0x9, 0x57, 0x6, 0x4, 0x31, 0x6, 0x91}, 0xe) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2}) shutdown(r0, 0x1) (fail_nth: 5) 34.548609893s ago: executing program 46 (id=1999): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x8, 0x5, 0xa, 0xe, 0xb, 0x7, 0x10, 0x9, 0x57, 0x6, 0x4, 0x31, 0x6, 0x91}, 0xe) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2}) shutdown(r0, 0x1) (fail_nth: 5) 9.432239575s ago: executing program 3 (id=2183): ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000800)) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x1ff, @empty, 0xffffffff}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000), 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chmod(0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x8, 0x5, 0xa, 0xe, 0xb, 0x7, 0x10, 0x9, 0x57, 0x6, 0x4, 0x31, 0x6, 0x91}, 0xe) r2 = epoll_create1(0x80000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x16, 0x16, 0x16e, &(0x7f0000001040)}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x1) 8.947133495s ago: executing program 3 (id=2185): r0 = socket(0x1000000010, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, r1}, 0x50) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9d, 0xaf, 0x49, 0x20, 0x10cf, 0x8067, 0x2c27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc3, 0x58, 0xf5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_open_dev$usbfs(&(0x7f0000000040), 0xe, 0x80801) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f00000000c0), 0x20000000}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x1, 0x60bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1}, {0x5, 0xfff4}, {0x5, 0xe}}}, 0x24}}, 0x30044880) 5.939222342s ago: executing program 3 (id=2206): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x8d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2101c84, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1900) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 4.523191997s ago: executing program 3 (id=2211): ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x6, {0xfffe, 0x0, 0x8000}}}) r0 = socket$inet(0x2, 0x800, 0x5) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r5, r5}, &(0x7f00000000c0)=""/28, 0x1c, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) 3.957667874s ago: executing program 2 (id=2219): statx(0xffffffffffffffff, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x2, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='f2fs_sync_fs\x00'}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6(0xa, 0x8000000000080001, 0x0) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0xc0403d11, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x0, 0xfffffff7}, {0x6, 0x3, 0xfb}]}) (async) write$ppp(r0, &(0x7f00000004c0)="1632", 0x2) r5 = mq_open(&(0x7f0000000300)='e\xeeQ\x92o', 0x42, 0x104, 0x0) r6 = dup2(r5, r5) mknodat$null(r6, &(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x103) ioperm(0x0, 0x1, 0x6) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xfffffffe, @private0}, {0xa, 0x1000, 0xfffffffd, @remote, 0xffffc}, r8}}, 0x48) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.388088621s ago: executing program 9 (id=2224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}}, 0x0) 3.312271413s ago: executing program 2 (id=2225): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (fail_nth: 1) 2.94363388s ago: executing program 2 (id=2227): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 2.793742054s ago: executing program 9 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}}, 0x0) 2.534942347s ago: executing program 0 (id=2231): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x62, 0x0, 0x0) 2.534180426s ago: executing program 3 (id=2232): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) pipe(&(0x7f0000000640)={0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002640)=r1, 0x4) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x15}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x38}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x440000d0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 2.479376997s ago: executing program 9 (id=2233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 2.372210978s ago: executing program 2 (id=2234): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010100, {[@generic={0x88, 0x2}, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$inet6(0xa, 0x3, 0x2f) r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fcntl$addseals(r0, 0x409, 0xe) ftruncate(r0, 0x800000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) unshare(0x2040600) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x9, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x10001, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x1]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.316378311s ago: executing program 9 (id=2235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) (fail_nth: 7) 2.146933597s ago: executing program 8 (id=2236): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x10) 2.113597036s ago: executing program 2 (id=2237): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (fail_nth: 4) 2.084388972s ago: executing program 0 (id=2238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[], 0x38}}, 0x0) 1.835250429s ago: executing program 8 (id=2239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) (fail_nth: 3) 1.636324056s ago: executing program 8 (id=2240): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f2828"], 0xe0}], 0x1}, 0x0) 1.269533127s ago: executing program 9 (id=2241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.269241368s ago: executing program 9 (id=2242): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e70009053ec7"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r9, 0xfbff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000440)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.194267012s ago: executing program 8 (id=2243): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}}, 0x0) 1.169387932s ago: executing program 2 (id=2244): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x48482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r2, &(0x7f00000194c0)=""/102376, 0x18fe8) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x42, 0x1, 0x1, 0x6, 0x82c, 0x81, 0x101, 0x0, 0x6, 0x6, 0x91e, 0x400, 0x1, 0x8, 0x2, 0x2, 0x8000, 0x9c, 0x3}}) r4 = dup3(r1, r3, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000000800)={0x2020}, 0x2020) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.168812964s ago: executing program 0 (id=2245): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.021758874s ago: executing program 8 (id=2246): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000840)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{0x0}], 0x1) 884.156564ms ago: executing program 0 (id=2247): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010100, {[@generic={0x88, 0x2}, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$inet6(0xa, 0x3, 0x2f) r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fcntl$addseals(r0, 0x409, 0xe) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) unshare(0x2040600) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x9, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x10001, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x1]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 856.084395ms ago: executing program 3 (id=2248): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x88c89f4a26451bde) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000000)={0x0, [0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2, 0xc, 0xff, 0x0, 0x0, 0x43, 0x6, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11], 0x9}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 762.633682ms ago: executing program 0 (id=2249): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) 182.108µs ago: executing program 0 (id=2250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001080)="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", 0x112}, {&(0x7f0000002580)="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", 0xeef}], 0x2, 0x0, 0x0, 0x4004055}, 0x0) 0s ago: executing program 8 (id=2251): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc", 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x47cc, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): media_entity: media entity 'dvb-demux' registered. [ 572.872879][ T9726] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 572.881867][ T9726] error writing reg: 0xff, val: 0x00 [ 572.947063][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1324'. [ 572.965263][ T9726] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 573.044167][ T9726] usb 4-1: USB disconnect, device number 62 [ 573.334366][T12143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.383464][T12143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.107477][ T5895] usb 7-1: USB disconnect, device number 17 [ 575.255769][ T30] kauditd_printk_skb: 25041 callbacks suppressed [ 575.255789][ T30] audit: type=1400 audit(1732520356.451:570080): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5212 comm="udevd" name="devices" dev="sysfs" ino=7 [ 575.610739][T12217] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.644267][T12217] audit: audit_lost=252079 audit_rate_limit=0 audit_backlog_limit=64 [ 575.671310][T12218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.698956][T12218] audit: audit_lost=252080 audit_rate_limit=0 audit_backlog_limit=64 [ 575.724948][T12217] audit: backlog limit exceeded [ 575.736229][ T5212] audit: audit_backlog=66 > audit_backlog_limit=64 [ 575.742998][ T5212] audit: audit_lost=252081 audit_rate_limit=0 audit_backlog_limit=64 [ 575.751285][T12218] audit: backlog limit exceeded [ 575.759478][ T9470] audit: audit_backlog=66 > audit_backlog_limit=64 [ 576.251658][T12224] tmpfs: Unknown parameter 'grpquoda_inode_hardlimit' [ 577.579998][T12260] x_tables: duplicate underflow at hook 2 [ 578.987853][T10881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.999142][T10881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.007380][T10881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.016695][T10881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.024462][T10881] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 579.036330][T10881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.492387][T12292] macvlan1: entered allmulticast mode [ 579.531455][T12292] veth1_vlan: entered allmulticast mode [ 579.683511][T12292] team0: Port device macvlan1 added [ 580.270695][ T30] kauditd_printk_skb: 20196 callbacks suppressed [ 580.270743][ T30] audit: type=1400 audit(1732520361.461:577400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12306 comm="modprobe" name="usr" dev="sda1" ino=1409 [ 580.401717][T12306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.410076][T12307] audit: audit_backlog=66 > audit_backlog_limit=64 [ 580.534101][ T30] audit: type=1400 audit(1732520361.491:577401): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5194 comm="syslogd" name="/" dev="sda1" ino=2 [ 580.559065][T12308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.573146][T12306] audit: audit_lost=256390 audit_rate_limit=0 audit_backlog_limit=64 [ 580.599589][T12307] audit: audit_lost=256391 audit_rate_limit=0 audit_backlog_limit=64 [ 580.599776][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.607842][T12307] audit: backlog limit exceeded [ 580.607876][T12307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.681502][T12272] chnl_net:caif_netlink_parms(): no params data found [ 581.145967][T10881] Bluetooth: hci5: command tx timeout [ 581.839990][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.869390][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.906547][T12272] bridge_slave_0: entered allmulticast mode [ 581.933136][T12272] bridge_slave_0: entered promiscuous mode [ 581.962070][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.010801][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.035267][T12272] bridge_slave_1: entered allmulticast mode [ 582.079286][T12272] bridge_slave_1: entered promiscuous mode [ 583.227513][T10881] Bluetooth: hci5: command tx timeout [ 586.325929][T10881] Bluetooth: hci5: command tx timeout [ 587.377653][T12337] audit_log_start: 5753 callbacks suppressed [ 587.377667][T12337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.410171][ T9470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.607387][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.614081][ T5194] audit: audit_lost=257581 audit_rate_limit=0 audit_backlog_limit=64 [ 587.624531][ T5194] audit: backlog limit exceeded [ 587.630562][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.699563][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.709370][ T9554] audit: audit_lost=257582 audit_rate_limit=0 audit_backlog_limit=64 [ 587.715709][ T30] audit: type=1400 audit(1732520367.491:579630): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=9554 comm="syz-executor" opid=12333 ocomm="syz.0.1360" [ 587.725650][T12337] audit: audit_lost=257583 audit_rate_limit=0 audit_backlog_limit=64 [ 587.925293][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.007794][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.169736][T12272] team0: Port device team_slave_0 added [ 588.223714][T12272] team0: Port device team_slave_1 added [ 588.347542][T10882] Bluetooth: hci5: command tx timeout [ 588.489114][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.509993][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.637852][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.708732][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.755069][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.852620][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.890714][T12348] sch_tbf: burst 141 is lower than device ip6tnl0 mtu (1452) ! [ 589.660904][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1368'. [ 590.286052][T12272] hsr_slave_0: entered promiscuous mode [ 590.333580][T12272] hsr_slave_1: entered promiscuous mode [ 590.359175][T12272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.366546][T12389] kvm: emulating exchange as write [ 590.367349][T12272] Cannot create hsr debugfs directory [ 590.393714][T12385] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 590.428305][T12385] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 590.439454][T12385] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 590.449431][T12385] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 591.578300][ T5895] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 591.735747][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 591.764822][ T5895] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 591.789932][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.804933][ T5895] usb 7-1: Product: syz [ 591.809699][ T5895] usb 7-1: Manufacturer: syz [ 591.814365][ T5895] usb 7-1: SerialNumber: syz [ 591.891304][ T5895] r8152-cfgselector 7-1: Unknown version 0x0000 [ 591.898182][ T5895] r8152-cfgselector 7-1: config 0 descriptor?? [ 592.086643][ T9769] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 592.227612][ T9769] usb 3-1: device descriptor read/64, error -71 [ 592.386910][ T30] kauditd_printk_skb: 19150 callbacks suppressed [ 592.386932][ T30] audit: type=1400 audit(1732520373.581:588113): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5506 comm="dhcpcd" name="/" dev="sda1" ino=2 [ 592.424447][ T5506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.427092][T12416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.441164][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.447779][ C0] audit: audit_lost=261148 audit_rate_limit=0 audit_backlog_limit=64 [ 592.455924][ C0] audit: backlog limit exceeded [ 592.460844][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.463946][T12416] audit: audit_lost=261149 audit_rate_limit=0 audit_backlog_limit=64 [ 592.468376][ T9554] audit: audit_lost=261150 audit_rate_limit=0 audit_backlog_limit=64 [ 592.484688][ T9554] audit: backlog limit exceeded [ 592.489923][ T9769] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 592.625805][ T9769] usb 3-1: device descriptor read/64, error -71 [ 592.736039][ T9769] usb usb3-port1: attempt power cycle [ 592.765932][T12272] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 592.805286][T12272] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 592.838730][T12272] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 592.910174][T12272] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 593.086224][ T9769] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 593.116802][ T9769] usb 3-1: device descriptor read/8, error -71 [ 593.260567][T12272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.318953][T12272] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.365987][ T9769] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 593.404277][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1379'. [ 593.407032][ T9769] usb 3-1: device descriptor read/8, error -71 [ 593.440826][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.448028][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.477411][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.484564][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.545173][T12423] block nbd3: not configured, cannot reconfigure [ 593.552742][T12424] block nbd3: not configured, cannot reconfigure [ 593.574982][ T9769] usb usb3-port1: unable to enumerate USB device [ 593.584808][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 593.612640][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 593.615699][T12422] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1379'. [ 593.641877][T12272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.676307][T12423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1379'. [ 593.692404][T12272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.243387][T12272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.255321][ T5895] r8152-cfgselector 7-1: Unknown version 0x0000 [ 594.282384][ T5895] r8152-cfgselector 7-1: bad CDC descriptors [ 594.904930][ T5895] r8152-cfgselector 7-1: USB disconnect, device number 18 [ 595.885937][ T5897] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 596.080075][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 596.105923][ T5897] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 596.132755][T12272] veth0_vlan: entered promiscuous mode [ 596.138552][ T5897] usb 3-1: config 0 interface 0 has no altsetting 1 [ 596.145208][ T5897] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 596.171867][T12272] veth1_vlan: entered promiscuous mode [ 596.185690][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.264631][ T5897] usb 3-1: config 0 descriptor?? [ 596.266706][T12272] veth0_macvtap: entered promiscuous mode [ 596.292683][T12272] veth1_macvtap: entered promiscuous mode [ 596.373819][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.400219][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.495643][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.510216][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.602523][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.613155][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.623102][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.634144][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.644483][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.673000][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.683180][ T5897] Bluetooth: Can't get state to change to load ram patch err [ 596.692220][ T5897] Bluetooth: Loading patch file failed [ 596.701467][ T5897] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 596.728023][ T5897] usb 3-1: USB disconnect, device number 90 [ 596.734092][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.768736][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.779553][T12377] udevd[12377]: setting owner of /dev/bus/usb/003/090 to uid=0, gid=0 failed: No such file or directory [ 596.791029][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.820081][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.861817][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.896694][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.925485][T12272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.941782][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.995717][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.011708][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.033266][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.054902][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.071490][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.081577][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.092295][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.103298][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.114414][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.124786][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.135894][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.159090][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.182526][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.199269][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.211172][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.234873][T12272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.406189][ T30] kauditd_printk_skb: 23836 callbacks suppressed [ 597.406234][ T30] audit: type=1400 audit(1732520378.591:601731): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 597.544895][ T5506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.553281][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.560120][ T5506] audit: audit_lost=264599 audit_rate_limit=0 audit_backlog_limit=64 [ 597.677109][ T9814] audit: audit_lost=264600 audit_rate_limit=0 audit_backlog_limit=64 [ 597.741179][T12489] rose0: tun_chr_ioctl cmd 1074025677 [ 597.746852][T12489] rose0: linktype set to 1 [ 597.769133][ T5506] audit: backlog limit exceeded [ 597.804279][ T30] audit: type=1400 audit(1732520378.631:601732): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9814 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 597.834922][ T5194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.878381][T12272] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.892424][ T5194] audit: audit_lost=264601 audit_rate_limit=0 audit_backlog_limit=64 [ 597.919377][ T5506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 597.966590][T12272] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.975359][T12272] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.994059][T12272] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.002733][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 598.321261][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.335743][T12494] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 598.380377][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.488853][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.529010][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.784896][T12504] program syz.3.1395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.048632][T12513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1396'. [ 599.125858][ T1201] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 599.286279][ T1201] usb 9-1: Using ep0 maxpacket: 32 [ 599.324964][ T1201] usb 9-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 599.332408][T12524] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 12524 comm: syz.0.1399) [ 599.357208][ T1201] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 599.405819][ T1201] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 599.414920][ T1201] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.478024][ T1201] usb 9-1: config 0 descriptor?? [ 600.175236][T12534] xt_l2tp: unknown flags: 3b [ 600.316298][ T5897] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 600.380657][ T1201] usb 9-1: string descriptor 0 read error: -71 [ 600.400238][ T1201] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 600.435058][ T1201] usb 9-1: USB disconnect, device number 5 [ 600.481661][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 600.507841][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 600.529927][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 600.563139][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 600.576108][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.607588][ T5897] usb 3-1: Product: syz [ 600.611829][ T5897] usb 3-1: Manufacturer: syz [ 600.629550][ T5897] usb 3-1: SerialNumber: syz [ 600.645941][ T5897] usb 3-1: config 0 descriptor?? [ 600.697379][ T5897] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 600.716142][ T5897] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 601.226861][T12552] netlink: 1304 bytes leftover after parsing attributes in process `syz.8.1405'. [ 601.290215][ T5897] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 601.302738][ T5897] em28xx 3-1:0.0: Config register raw data: 0x41 [ 601.888314][T12568] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 601.921253][T12568] macvlan0: entered promiscuous mode [ 601.926784][T12568] macvlan0: entered allmulticast mode [ 601.940559][T12568] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 601.951371][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 601.998628][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1408'. [ 602.417877][ T30] kauditd_printk_skb: 22702 callbacks suppressed [ 602.417896][ T30] audit: type=1400 audit(1732520383.611:612552): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12586 comm="syz-executor" name="2" dev="tmpfs" ino=23 [ 602.431710][T12584] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.444498][T12586] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.451347][T12587] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.473817][T12587] audit: audit_lost=268608 audit_rate_limit=0 audit_backlog_limit=64 [ 602.486282][T12586] audit: audit_lost=268609 audit_rate_limit=0 audit_backlog_limit=64 [ 602.493015][T12587] audit: backlog limit exceeded [ 602.511229][T12586] audit: backlog limit exceeded [ 602.511541][T12584] audit: audit_lost=268610 audit_rate_limit=0 audit_backlog_limit=64 [ 602.516289][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.572629][ T1201] usb 3-1: USB disconnect, device number 91 [ 602.579745][ T1201] em28xx 3-1:0.0: Disconnecting em28xx [ 602.598206][ T1201] em28xx 3-1:0.0: Freeing device [ 604.591503][T12613] input: syz0 as /devices/virtual/input/input32 [ 606.522118][T10882] Bluetooth: hci2: command 0x0406 tx timeout [ 606.528423][T10882] Bluetooth: hci3: command 0x0406 tx timeout [ 606.569065][T12653] Smack: duplicate mount options [ 606.667236][ T5950] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 606.826472][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 606.843750][ T5950] usb 3-1: config 32 has an invalid interface number: 204 but max is 0 [ 606.855972][ T5950] usb 3-1: config 32 has no interface number 0 [ 606.876614][ T5950] usb 3-1: New USB device found, idVendor=1740, idProduct=0602, bcdDevice=2a.af [ 606.910973][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.960619][ T5950] usb 3-1: Product: syz [ 606.970772][ T5950] usb 3-1: Manufacturer: syz [ 606.975423][ T5950] usb 3-1: SerialNumber: syz [ 607.275276][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1429'. [ 607.327572][ T5950] usb 3-1: USB disconnect, device number 92 [ 607.358442][T12675] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 607.430740][T12681] audit_log_start: 19637 callbacks suppressed [ 607.430762][T12681] audit: audit_backlog=66 > audit_backlog_limit=64 [ 607.442205][ T9470] audit: audit_backlog=66 > audit_backlog_limit=64 [ 607.444088][T12681] audit: audit_lost=272696 audit_rate_limit=0 audit_backlog_limit=64 [ 607.458936][T12681] audit: backlog limit exceeded [ 607.463859][T12681] audit: audit_backlog=66 > audit_backlog_limit=64 [ 607.471094][T12681] audit: audit_lost=272697 audit_rate_limit=0 audit_backlog_limit=64 [ 607.477179][ T9470] audit: audit_lost=272698 audit_rate_limit=0 audit_backlog_limit=64 [ 607.479310][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 607.493808][ C0] audit: audit_lost=272699 audit_rate_limit=0 audit_backlog_limit=64 [ 607.501921][ C0] audit: backlog limit exceeded [ 608.078262][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'. [ 608.429935][T12719] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1442'. [ 608.829983][T12729] x_tables: unsorted underflow at hook 2 [ 610.562859][T12788] netlink: 'syz.2.1465': attribute type 29 has an invalid length. [ 610.572758][T12788] netlink: 'syz.2.1465': attribute type 29 has an invalid length. [ 610.582356][T12788] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1465'. [ 610.850777][T12798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1463'. [ 610.900081][T12803] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1470'. [ 612.047084][T12848] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 612.093493][T12848] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 612.437742][ T30] kauditd_printk_skb: 19470 callbacks suppressed [ 612.437764][ T30] audit: type=1400 audit(1732520393.631:631558): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=12859 comm="cmp" path="/lib/libresolv.so.2" dev="sda1" ino=1115 [ 612.479461][T12860] audit: audit_backlog=65 > audit_backlog_limit=64 [ 612.479488][T12859] audit: audit_backlog=65 > audit_backlog_limit=64 [ 612.496368][T12859] audit: audit_lost=275374 audit_rate_limit=0 audit_backlog_limit=64 [ 612.504672][ T30] audit: type=1400 audit(1732520393.631:631559): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12860 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 612.514628][T12859] audit: backlog limit exceeded [ 612.524943][T12860] audit: audit_lost=275375 audit_rate_limit=0 audit_backlog_limit=64 [ 612.545969][T12859] audit: audit_backlog=65 > audit_backlog_limit=64 [ 612.556768][T12860] audit: backlog limit exceeded [ 612.563674][ T30] audit: type=1400 audit(1732520393.631:631560): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12860 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 612.994414][T12867] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 613.371358][T12876] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 614.875158][T12928] netlink: 'syz.0.1507': attribute type 29 has an invalid length. [ 614.911655][T12880] lo speed is unknown, defaulting to 1000 [ 614.919742][T12880] lo speed is unknown, defaulting to 1000 [ 614.923943][T12928] netlink: 'syz.0.1507': attribute type 29 has an invalid length. [ 614.946815][T12928] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1507'. [ 614.957968][T12928] unsupported nla_type 40 [ 615.026326][T12880] lo speed is unknown, defaulting to 1000 [ 615.054348][T12880] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 615.170478][T12880] lo speed is unknown, defaulting to 1000 [ 615.177487][T12939] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 615.208175][T12880] lo speed is unknown, defaulting to 1000 [ 615.237691][T12880] lo speed is unknown, defaulting to 1000 [ 615.266048][T12880] lo speed is unknown, defaulting to 1000 [ 615.285053][T12880] lo speed is unknown, defaulting to 1000 [ 615.341121][T12880] lo speed is unknown, defaulting to 1000 [ 615.369719][T12880] lo speed is unknown, defaulting to 1000 [ 615.397642][T12880] lo speed is unknown, defaulting to 1000 [ 615.433735][T12880] lo speed is unknown, defaulting to 1000 [ 615.467702][T12880] lo speed is unknown, defaulting to 1000 [ 615.511054][T12929] infiniband syz1: set active [ 615.536113][T12929] infiniband syz1: added macvlan0 [ 615.770346][T12929] RDS/IB: syz1: added [ 615.775506][T12929] smc: adding ib device syz1 with port count 1 [ 615.827332][T12929] smc: ib device syz1 port 1 has pnetid [ 616.082898][T12966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1518'. [ 616.204327][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 616.904020][T12989] tipc: Started in network mode [ 616.912268][T12989] tipc: Node identity 3e9c4d04b8b3, cluster identity 4711 [ 616.936754][T12989] tipc: Enabled bearer , priority 0 [ 617.162125][T12995] tipc: Resetting bearer [ 617.249951][T12988] tipc: Resetting bearer [ 617.445828][ T30] kauditd_printk_skb: 14314 callbacks suppressed [ 617.445848][ T30] audit: type=1400 audit(1732520398.631:642515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9470 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 617.484984][T13005] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.485277][T10909] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.495713][T13005] audit: audit_lost=276497 audit_rate_limit=0 audit_backlog_limit=64 [ 617.506987][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.513528][ C0] audit: audit_lost=276498 audit_rate_limit=0 audit_backlog_limit=64 [ 617.521691][ C0] audit: backlog limit exceeded [ 617.521733][T10909] audit: audit_lost=276499 audit_rate_limit=0 audit_backlog_limit=64 [ 617.529484][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.541383][ C0] audit: audit_lost=276500 audit_rate_limit=0 audit_backlog_limit=64 [ 617.974409][ T1201] tipc: Node number set to 2251246852 [ 618.091824][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 618.101044][T13029] netlink: 'syz.3.1539': attribute type 22 has an invalid length. [ 618.137776][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 620.711538][T12988] tipc: Disabling bearer [ 622.456073][ T30] kauditd_printk_skb: 8714 callbacks suppressed [ 622.456103][ T30] audit: type=1400 audit(1732520403.651:648106): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 622.517308][ T30] audit: type=1400 audit(1732520403.671:648107): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=82 comm="kworker/u8:5" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 622.540414][ T30] audit: type=1400 audit(1732520403.681:648108): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=13099 comm="syz-executor" opid=13099 ocomm="syz-executor" [ 622.559441][ T30] audit: type=1400 audit(1732520403.701:648109): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 622.579773][ T30] audit: type=1400 audit(1732520403.701:648110): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 622.599785][ T30] audit: type=1400 audit(1732520403.701:648111): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 622.619515][ T30] audit: type=1400 audit(1732520403.701:648112): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 622.638858][ T30] audit: type=1400 audit(1732520403.701:648113): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 622.658357][ T30] audit: type=1400 audit(1732520403.701:648114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 622.678553][ T30] audit: type=1400 audit(1732520403.701:648115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13099 comm="syz-executor" name="143" dev="tmpfs" ino=780 [ 623.104338][T13112] siw: device registration error -23 [ 623.482457][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 623.522126][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 623.545094][T13125] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 623.562996][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1578'. [ 623.647149][T12617] block nbd0: Receive control failed (result -107) [ 624.377462][T13160] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 624.476219][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1595'. [ 624.822822][T13176] siw: device registration error -23 [ 626.366888][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'. [ 627.466135][ T30] kauditd_printk_skb: 8479 callbacks suppressed [ 627.466155][ T30] audit: type=1400 audit(1732520408.661:654236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13243 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 627.508545][ T30] audit: type=1400 audit(1732520408.661:654237): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13244 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 627.530020][ T30] audit: type=1400 audit(1732520408.661:654238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13244 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 627.561237][ T30] audit: type=1400 audit(1732520408.661:654239): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13244 comm="syz-executor" name="160" dev="tmpfs" ino=869 [ 627.563707][ T9470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 627.580715][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 627.593683][ C0] audit: audit_lost=278332 audit_rate_limit=0 audit_backlog_limit=64 [ 627.601815][ C0] audit: backlog limit exceeded [ 627.607680][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 627.610870][T10909] audit: audit_backlog=65 > audit_backlog_limit=64 [ 630.054227][T13275] siw: device registration error -23 [ 630.078133][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1642'. [ 633.215807][ T30] kauditd_printk_skb: 2719 callbacks suppressed [ 633.215825][ T30] audit: type=1400 audit(1732520414.191:656373): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 633.985947][ T30] audit: type=1400 audit(1732520414.461:656374): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=9470 comm="syz-executor" opid=13288 ocomm="syz.3.1647" [ 634.036428][ T30] audit: type=1400 audit(1732520414.691:656375): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 634.039709][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.065846][ T9554] audit: audit_lost=278533 audit_rate_limit=0 audit_backlog_limit=64 [ 634.073957][ T9554] audit: backlog limit exceeded [ 634.078973][ T30] audit: type=1400 audit(1732520415.141:656376): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=9470 comm="syz-executor" opid=13288 ocomm="syz.3.1647" [ 634.079993][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.097491][ T30] audit: type=1400 audit(1732520415.161:656377): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13303 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 634.097536][ T30] audit: type=1400 audit(1732520415.161:656378): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13303 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 635.082935][T13339] input: syz0 as /devices/virtual/input/input33 [ 637.351619][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 637.413945][T13376] input: syz0 as /devices/virtual/input/input34 [ 637.924695][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 637.991285][ T9] usb 4-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 638.001739][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 638.014784][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 638.024856][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.041516][ T9] usb 4-1: config 0 descriptor?? [ 638.225976][ T30] kauditd_printk_skb: 5431 callbacks suppressed [ 638.225998][ T30] audit: type=1400 audit(1732520419.411:660128): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12272 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 638.266011][T13387] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.272645][T13387] audit: audit_lost=279095 audit_rate_limit=0 audit_backlog_limit=64 [ 638.280905][T13387] audit: backlog limit exceeded [ 638.286209][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.286235][ C0] audit: audit_lost=279096 audit_rate_limit=0 audit_backlog_limit=64 [ 638.286256][ C0] audit: backlog limit exceeded [ 638.293544][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.293570][ C0] audit: audit_lost=279097 audit_rate_limit=0 audit_backlog_limit=64 [ 638.293592][ C0] audit: backlog limit exceeded [ 638.401549][ T9] usb 4-1: string descriptor 0 read error: -71 [ 638.418024][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 638.469683][ T9] usb 4-1: USB disconnect, device number 63 [ 639.153858][T13417] input: syz0 as /devices/virtual/input/input35 [ 640.637447][T13456] input: syz0 as /devices/virtual/input/input36 [ 640.805620][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 641.068162][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 641.177177][ T9] usb 3-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 641.201670][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 641.254131][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 641.272476][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.294888][ T9] usb 3-1: config 0 descriptor?? [ 641.517328][ T9] usb 3-1: string descriptor 0 read error: -71 [ 641.525469][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 641.553666][ T9] usb 3-1: USB disconnect, device number 93 [ 641.976282][ T5893] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 642.128042][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 642.135676][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.162508][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.196197][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.232766][ T5893] usb 9-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 642.304223][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.469722][T13502] input: syz0 as /devices/virtual/input/input37 [ 642.470371][ T5893] usb 9-1: config 0 descriptor?? [ 643.382578][ T30] kauditd_printk_skb: 7132 callbacks suppressed [ 643.383023][ T30] audit: type=1400 audit(1732520424.241:665436): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13479 comm="syz.8.1724" name="/" dev="proc" ino=1 [ 643.525970][ T5893] wacom 0003:056A:00B5.0017: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 643.541922][ T5893] wacom 0003:056A:00B5.0017: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.8-1/input0 [ 643.556833][ T5893] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:00B5.0017/input/input38 [ 643.577362][ T30] audit: type=1400 audit(1732520424.241:665437): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13479 comm="syz.8.1724" name="151" dev="proc" ino=45603 [ 643.603328][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.620523][ T9814] audit: audit_lost=279707 audit_rate_limit=0 audit_backlog_limit=64 [ 643.620570][ T9470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.629145][ T9814] audit: backlog limit exceeded [ 643.636116][ T30] audit: type=1400 audit(1732520424.241:665438): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=13479 comm="syz.8.1724" name="mountinfo" dev="proc" ino=45007 [ 643.641316][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.661020][ T30] audit: type=1400 audit(1732520424.251:665439): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=13479 comm="syz.8.1724" path="/proc/151/mountinfo" dev="proc" ino=45007 [ 643.661071][ T30] audit: type=1400 audit(1732520424.261:665440): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13479 comm="syz.8.1724" name="newroot" dev="tmpfs" ino=2 [ 643.744704][T13506] netlink: 200 bytes leftover after parsing attributes in process `syz.8.1724'. [ 644.824324][ T5897] usb 9-1: USB disconnect, device number 6 [ 646.818414][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 646.976320][ T9] usb 4-1: device descriptor read/64, error -71 [ 647.546091][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 647.685867][ T9] usb 4-1: device descriptor read/64, error -71 [ 647.796318][ T9] usb usb4-port1: attempt power cycle [ 648.145750][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 648.190073][ T9] usb 4-1: device descriptor read/8, error -71 [ 648.409066][ T30] kauditd_printk_skb: 6595 callbacks suppressed [ 648.409086][ T30] audit: type=1400 audit(1732520429.601:671041): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13564 comm="syz.3.1753" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 648.480606][ T30] audit: type=1400 audit(1732520429.651:671042): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13599 comm="syz.6.1764" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 648.493429][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.503942][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 648.529596][ T9814] audit: audit_lost=280043 audit_rate_limit=0 audit_backlog_limit=64 [ 648.540524][ T9814] audit: backlog limit exceeded [ 648.575043][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.583604][ T30] audit: type=1400 audit(1732520429.651:671043): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13599 comm="syz.6.1764" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 648.599866][ T9814] audit: audit_lost=280044 audit_rate_limit=0 audit_backlog_limit=64 [ 648.616362][ T9] usb 4-1: device descriptor read/8, error -71 [ 648.622715][T13569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.625654][ T9814] audit: backlog limit exceeded [ 648.737167][ T9] usb usb4-port1: unable to enumerate USB device [ 649.315781][ T5893] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 649.818154][ T5893] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 649.835083][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.855645][ T5893] usb 9-1: Product: syz [ 649.859951][ T5893] usb 9-1: Manufacturer: syz [ 649.864578][ T5893] usb 9-1: SerialNumber: syz [ 649.922729][ T5893] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 649.963349][ T5897] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 650.297083][ T5893] usb 9-1: USB disconnect, device number 7 [ 651.461093][ T5897] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 651.468214][ T5897] ath9k_htc: Failed to initialize the device [ 651.476821][ T5893] usb 9-1: ath9k_htc: USB layer deinitialized [ 651.678178][T13686] tipc: Failed to remove unknown binding: 66,1,1/0:1586622990/1586622992 [ 652.071630][T13694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 652.081040][T13694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 652.292963][T13698] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1795'. [ 653.420418][T13729] audit_log_start: 8193 callbacks suppressed [ 653.420439][T13729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.442079][T13729] audit: audit_lost=281080 audit_rate_limit=0 audit_backlog_limit=64 [ 653.453092][ T30] audit: type=1400 audit(1732520434.571:676147): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9470 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 653.474041][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.480637][ C0] audit: audit_lost=281081 audit_rate_limit=0 audit_backlog_limit=64 [ 653.488787][ C0] audit: backlog limit exceeded [ 653.493924][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.500542][ C0] audit: audit_lost=281082 audit_rate_limit=0 audit_backlog_limit=64 [ 653.508684][ C0] audit: backlog limit exceeded [ 653.520547][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.669372][T13733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1809'. [ 653.822524][T13737] tipc: Started in network mode [ 653.828701][T13737] tipc: Node identity 1, cluster identity 1 [ 653.835698][T13737] tipc: Node number set to 1 [ 654.984237][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1823'. [ 656.019432][T13788] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1831'. [ 656.039594][T13788] 9pnet_fd: Insufficient options for proto=fd [ 656.298631][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1835'. [ 656.509227][T13768] lo speed is unknown, defaulting to 1000 [ 656.515075][T13768] lo speed is unknown, defaulting to 1000 [ 656.588653][T13768] lo speed is unknown, defaulting to 1000 [ 656.595325][T13808] tipc: Started in network mode [ 656.615958][T13808] tipc: Node identity 1, cluster identity 1 [ 656.637786][T13808] tipc: Node number set to 1 [ 656.686078][T13768] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 656.877189][T13768] lo speed is unknown, defaulting to 1000 [ 656.884117][T13768] lo speed is unknown, defaulting to 1000 [ 656.901588][T13768] lo speed is unknown, defaulting to 1000 [ 656.908979][T13768] lo speed is unknown, defaulting to 1000 [ 656.916176][T13768] lo speed is unknown, defaulting to 1000 [ 656.924818][T13768] lo speed is unknown, defaulting to 1000 [ 656.931700][T13768] lo speed is unknown, defaulting to 1000 [ 656.942818][T13768] lo speed is unknown, defaulting to 1000 [ 657.201925][T13768] lo speed is unknown, defaulting to 1000 [ 657.209534][T13768] lo speed is unknown, defaulting to 1000 [ 657.446284][T13829] kernel profiling enabled (shift: 7) [ 657.708069][T13840] FAULT_INJECTION: forcing a failure. [ 657.708069][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 657.794814][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.8.1850 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 657.805294][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.815378][T13840] Call Trace: [ 657.818680][T13840] [ 657.821638][T13840] dump_stack_lvl+0x241/0x360 [ 657.826371][T13840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.831606][T13840] ? __pfx__printk+0x10/0x10 [ 657.836235][T13840] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 657.842249][T13840] ? __pfx___might_resched+0x10/0x10 [ 657.847591][T13840] should_fail_ex+0x3b0/0x4e0 [ 657.852331][T13840] should_failslab+0xac/0x100 [ 657.857052][T13840] ? __alloc_skb+0x1c3/0x440 [ 657.861680][T13840] kmem_cache_alloc_node_noprof+0x71/0x320 [ 657.867554][T13840] __alloc_skb+0x1c3/0x440 [ 657.872025][T13840] ? __pfx___alloc_skb+0x10/0x10 [ 657.877000][T13840] ? __pfx_tc_del_tfilter+0x10/0x10 [ 657.882244][T13840] ? netlink_ack_tlv_len+0x6e/0x200 [ 657.887488][T13840] netlink_ack+0x13f/0xa30 [ 657.891946][T13840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.897468][T13840] netlink_rcv_skb+0x262/0x430 [ 657.902264][T13840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.907743][T13840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.913086][T13840] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.918313][T13840] netlink_unicast+0x7f6/0x990 [ 657.923200][T13840] ? __pfx_netlink_unicast+0x10/0x10 [ 657.928498][T13840] ? __virt_addr_valid+0x183/0x530 [ 657.933626][T13840] ? __check_object_size+0x48e/0x900 [ 657.938926][T13840] netlink_sendmsg+0x8e4/0xcb0 [ 657.943713][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.949118][T13840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.954428][T13840] __sock_sendmsg+0x221/0x270 [ 657.959123][T13840] ____sys_sendmsg+0x52a/0x7e0 [ 657.963907][T13840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.969207][T13840] ? __fget_files+0x2a/0x410 [ 657.973808][T13840] ? __fget_files+0x2a/0x410 [ 657.978417][T13840] __sys_sendmsg+0x269/0x350 [ 657.983019][T13840] ? __pfx_lock_release+0x10/0x10 [ 657.988070][T13840] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.993210][T13840] ? __pfx_vfs_write+0x10/0x10 [ 657.998029][T13840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 658.004379][T13840] ? do_syscall_64+0x100/0x230 [ 658.009203][T13840] ? do_syscall_64+0xb6/0x230 [ 658.013906][T13840] do_syscall_64+0xf3/0x230 [ 658.018424][T13840] ? clear_bhb_loop+0x35/0x90 [ 658.023116][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.029028][T13840] RIP: 0033:0x7f29a337e819 [ 658.033455][T13840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.053072][T13840] RSP: 002b:00007f29a41d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.061497][T13840] RAX: ffffffffffffffda RBX: 00007f29a3535fa0 RCX: 00007f29a337e819 [ 658.069487][T13840] RDX: 0000000030044880 RSI: 0000000020000340 RDI: 0000000000000003 [ 658.077471][T13840] RBP: 00007f29a41d1090 R08: 0000000000000000 R09: 0000000000000000 [ 658.085450][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.093451][T13840] R13: 0000000000000000 R14: 00007f29a3535fa0 R15: 00007ffea6e28698 [ 658.101488][T13840] [ 658.426671][ T30] kauditd_printk_skb: 7947 callbacks suppressed [ 658.426692][ T30] audit: type=1400 audit(1732520439.611:681017): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=13847 comm="syz-executor" name="87" dev="tmpfs" ino=454 [ 658.448365][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.454214][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.465614][ C0] audit: audit_lost=282111 audit_rate_limit=0 audit_backlog_limit=64 [ 658.473721][ C0] audit: backlog limit exceeded [ 658.478730][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.485269][ C0] audit: audit_lost=282112 audit_rate_limit=0 audit_backlog_limit=64 [ 658.486279][T13847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.493369][ C0] audit: backlog limit exceeded [ 658.505592][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 660.579166][T13878] netlink: 'syz.8.1865': attribute type 3 has an invalid length. [ 660.975421][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 660.985097][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 660.994824][T13890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1871'. [ 661.226033][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 661.252782][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 661.297124][T13895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1873'. [ 662.131783][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1883'. [ 662.141146][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1883'. [ 662.150354][T13920] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1883'. [ 662.225756][ T5897] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 662.375842][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 662.384246][ T5897] usb 3-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 662.406124][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 662.425231][ T5897] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 662.444921][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.467471][ T5897] usb 3-1: config 0 descriptor?? [ 662.684479][ T5897] usb 3-1: string descriptor 0 read error: -71 [ 662.693479][ T5897] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 662.703788][ T5897] usb 3-1: USB disconnect, device number 94 [ 663.227518][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1894'. [ 663.436186][ T30] kauditd_printk_skb: 5384 callbacks suppressed [ 663.436207][ T30] audit: type=1400 audit(1732520444.631:686220): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13956 comm="modprobe" name="/" dev="sda1" ino=2 [ 663.470482][T13956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.478550][T13959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.485096][T13959] audit: audit_lost=282175 audit_rate_limit=0 audit_backlog_limit=64 [ 663.486828][T13956] audit: audit_lost=282176 audit_rate_limit=0 audit_backlog_limit=64 [ 663.496895][ T30] audit: type=1400 audit(1732520444.631:686221): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13956 comm="modprobe" name="usr" dev="sda1" ino=1409 [ 663.520779][T13959] audit: backlog limit exceeded [ 663.525770][T13956] audit: backlog limit exceeded [ 663.533348][T13959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.540032][T13956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.445740][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 665.521788][T13996] FAULT_INJECTION: forcing a failure. [ 665.521788][T13996] name failslab, interval 1, probability 0, space 0, times 0 [ 665.574318][T13996] CPU: 0 UID: 0 PID: 13996 Comm: syz.6.1914 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 665.584825][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.594960][T13996] Call Trace: [ 665.598273][T13996] [ 665.601239][T13996] dump_stack_lvl+0x241/0x360 [ 665.605960][T13996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.611201][T13996] ? __pfx__printk+0x10/0x10 [ 665.615847][T13996] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 665.621876][T13996] should_fail_ex+0x3b0/0x4e0 [ 665.626590][T13996] should_failslab+0xac/0x100 [ 665.631311][T13996] ? __alloc_skb+0x1c3/0x440 [ 665.635964][T13996] kmem_cache_alloc_node_noprof+0x71/0x320 [ 665.641843][T13996] __alloc_skb+0x1c3/0x440 [ 665.646304][T13996] ? __pfx___alloc_skb+0x10/0x10 [ 665.651277][T13996] ? sctp_ulpq_tail_event+0x820/0xb70 [ 665.656704][T13996] skb_copy_expand+0x199/0xb60 [ 665.661535][T13996] sctp_ulpevent_make_send_failed_event+0x5e/0xb80 [ 665.668101][T13996] sctp_datamsg_put+0x3a4/0x570 [ 665.673010][T13996] sctp_chunk_free+0x4a/0x60 [ 665.677638][T13996] __sctp_outq_teardown+0x7c6/0x9b0 [ 665.682886][T13996] sctp_association_free+0x21a/0x7b0 [ 665.688240][T13996] sctp_do_sm+0x4393/0x60c0 [ 665.692805][T13996] ? __pfx_sctp_do_sm+0x10/0x10 [ 665.697733][T13996] ? __local_bh_enable_ip+0x168/0x200 [ 665.703154][T13996] ? lockdep_hardirqs_on+0x99/0x150 [ 665.708410][T13996] ? trace_inet_sock_set_state+0x90/0x230 [ 665.714179][T13996] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 665.719517][T13996] ? __pfx_sctp_shutdown+0x10/0x10 [ 665.724682][T13996] inet_shutdown+0x1fd/0x390 [ 665.729324][T13996] __x64_sys_shutdown+0x13f/0x1a0 [ 665.734399][T13996] do_syscall_64+0xf3/0x230 [ 665.738944][T13996] ? clear_bhb_loop+0x35/0x90 [ 665.743665][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.749604][T13996] RIP: 0033:0x7fd63a77e819 [ 665.754053][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.773709][T13996] RSP: 002b:00007fd63b65b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 665.782190][T13996] RAX: ffffffffffffffda RBX: 00007fd63a935fa0 RCX: 00007fd63a77e819 [ 665.790200][T13996] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 665.798199][T13996] RBP: 00007fd63b65b090 R08: 0000000000000000 R09: 0000000000000000 [ 665.806221][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.814218][T13996] R13: 0000000000000000 R14: 00007fd63a935fa0 R15: 00007ffd507b9898 [ 665.822245][T13996] [ 665.855342][ T9] usb 9-1: device descriptor read/64, error -71 [ 665.994811][T14010] __nla_validate_parse: 5 callbacks suppressed [ 665.994835][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 666.020912][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 666.035191][T14010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1920'. [ 666.126010][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 666.256959][ T9] usb 9-1: device descriptor read/64, error -71 [ 666.373247][ T9] usb usb9-port1: attempt power cycle [ 666.796319][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 666.847473][ T9] usb 9-1: device descriptor read/8, error -71 [ 667.105997][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 667.141916][ T9] usb 9-1: device descriptor read/8, error -71 [ 667.268764][ T9] usb usb9-port1: unable to enumerate USB device [ 667.363342][T14029] lo speed is unknown, defaulting to 1000 [ 667.503879][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 667.513357][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 667.524272][T14047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1934'. [ 667.842066][T14029] siw: device registration error -23 [ 668.240390][ T5895] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 668.410038][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 668.435886][ T5895] usb 3-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 668.448201][ T30] kauditd_printk_skb: 7307 callbacks suppressed [ 668.448217][ T30] audit: type=1400 audit(1732520449.621:690749): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=10909 comm="syz-executor" name="cgroup" dev="tmpfs" ino=720 [ 668.465637][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 668.475463][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.496879][T12272] audit: audit_lost=283109 audit_rate_limit=0 audit_backlog_limit=64 [ 668.505962][T14069] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.508218][ T5895] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 668.513091][T12272] audit: backlog limit exceeded [ 668.527486][ T30] audit: type=1400 audit(1732520449.641:690750): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=10909 comm="syz-executor" name="134" dev="tmpfs" ino=719 [ 668.535350][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.548065][T14069] audit: audit_lost=283110 audit_rate_limit=0 audit_backlog_limit=64 [ 668.557196][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.564612][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.570378][ C0] audit: audit_lost=283111 audit_rate_limit=0 audit_backlog_limit=64 [ 668.593103][ T5895] usb 3-1: config 0 descriptor?? [ 668.817492][ T5895] usb 3-1: string descriptor 0 read error: -71 [ 668.836160][ T5895] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 668.855382][ T5895] usb 3-1: USB disconnect, device number 95 [ 670.330384][T14090] lo speed is unknown, defaulting to 1000 [ 670.824095][T14090] siw: device registration error -23 [ 672.323813][ T5897] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 672.546013][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 672.557728][ T5897] usb 4-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 672.606040][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 672.655361][ T5897] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 672.684089][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.726706][ T5897] usb 4-1: config 0 descriptor?? [ 672.955841][ T5897] usb 4-1: string descriptor 0 read error: -71 [ 672.965347][ T5897] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 672.997297][ T5897] usb 4-1: USB disconnect, device number 68 [ 673.503028][T10909] audit_log_start: 5376 callbacks suppressed [ 673.503050][T10909] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.516381][ T30] audit: type=1400 audit(1732520454.691:695185): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10909 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 673.546978][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.547160][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.560099][ C0] audit: audit_lost=283426 audit_rate_limit=0 audit_backlog_limit=64 [ 673.568247][ C0] audit: backlog limit exceeded [ 673.573747][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.580324][ C0] audit: audit_lost=283427 audit_rate_limit=0 audit_backlog_limit=64 [ 673.588455][ C0] audit: backlog limit exceeded [ 673.593612][T12272] audit: audit_lost=283428 audit_rate_limit=0 audit_backlog_limit=64 [ 673.943436][T14152] lo speed is unknown, defaulting to 1000 [ 674.275787][T14152] siw: device registration error -23 [ 674.415139][T14185] FAULT_INJECTION: forcing a failure. [ 674.415139][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 674.439969][T14185] CPU: 0 UID: 0 PID: 14185 Comm: syz.6.1986 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 674.450459][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 674.460546][T14185] Call Trace: [ 674.463854][T14185] [ 674.466818][T14185] dump_stack_lvl+0x241/0x360 [ 674.471617][T14185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.476858][T14185] ? __pfx__printk+0x10/0x10 [ 674.481492][T14185] ? __kmalloc_noprof+0xb0/0x400 [ 674.486483][T14185] ? __pfx___might_resched+0x10/0x10 [ 674.491846][T14185] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 674.497843][T14185] should_fail_ex+0x3b0/0x4e0 [ 674.502548][T14185] ? sock_kmalloc+0xd7/0x160 [ 674.507177][T14185] should_failslab+0xac/0x100 [ 674.511863][T14185] ? sock_kmalloc+0xd7/0x160 [ 674.516476][T14185] __kmalloc_noprof+0xd8/0x400 [ 674.521261][T14185] sock_kmalloc+0xd7/0x160 [ 674.525702][T14185] alg_setkey+0x59/0x1b0 [ 674.529982][T14185] alg_setsockopt+0x383/0x450 [ 674.534691][T14185] ? __pfx_alg_setsockopt+0x10/0x10 [ 674.539909][T14185] do_sock_setsockopt+0x3af/0x720 [ 674.544953][T14185] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 674.550534][T14185] ? __fget_files+0x395/0x410 [ 674.555232][T14185] ? __fget_files+0x2a/0x410 [ 674.559844][T14185] __x64_sys_setsockopt+0x1ee/0x280 [ 674.565077][T14185] do_syscall_64+0xf3/0x230 [ 674.569609][T14185] ? clear_bhb_loop+0x35/0x90 [ 674.574301][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.580232][T14185] RIP: 0033:0x7fd63a77e819 [ 674.584659][T14185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.604291][T14185] RSP: 002b:00007fd63b65b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 674.612726][T14185] RAX: ffffffffffffffda RBX: 00007fd63a935fa0 RCX: 00007fd63a77e819 [ 674.620707][T14185] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 674.628686][T14185] RBP: 00007fd63b65b090 R08: 0000000000000020 R09: 0000000000000000 [ 674.636665][T14185] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.644640][T14185] R13: 0000000000000000 R14: 00007fd63a935fa0 R15: 00007ffd507b9898 [ 674.652629][T14185] [ 676.289839][T14213] lo speed is unknown, defaulting to 1000 [ 676.328409][T14210] siw: device registration error -23 [ 676.774912][T10881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 676.786034][T10881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 676.819165][T10881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 676.828610][T10881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.864721][T10881] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 676.873803][T10881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 677.306557][T14223] lo speed is unknown, defaulting to 1000 [ 678.179698][T14223] chnl_net:caif_netlink_parms(): no params data found [ 678.295737][ T5897] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 678.343203][T14223] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.355912][T14223] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.363196][T14223] bridge_slave_0: entered allmulticast mode [ 678.388683][T14223] bridge_slave_0: entered promiscuous mode [ 678.412171][T14223] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.420018][T14223] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.427524][T14223] bridge_slave_1: entered allmulticast mode [ 678.436387][ T5897] usb 3-1: device descriptor read/64, error -71 [ 678.438759][T14223] bridge_slave_1: entered promiscuous mode [ 678.504362][T14223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.506022][ T30] kauditd_printk_skb: 5688 callbacks suppressed [ 678.506039][ T30] audit: type=1400 audit(1732520459.701:699769): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=14255 comm="modprobe" name="libpcre2-8.so.0.11.0" dev="sda1" ino=1638 [ 678.535767][T14223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.581275][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.595843][ T30] audit: type=1400 audit(1732520459.731:699770): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=14255 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.11.0" dev="sda1" ino=1638 [ 678.596573][T14259] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.626422][ T9554] audit: audit_lost=283798 audit_rate_limit=0 audit_backlog_limit=64 [ 678.634579][ T9554] audit: backlog limit exceeded [ 678.639755][T14242] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.642390][ T30] audit: type=1400 audit(1732520459.731:699771): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=14255 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.11.0" dev="sda1" ino=1638 [ 678.646723][T14242] audit: audit_lost=283799 audit_rate_limit=0 audit_backlog_limit=64 [ 678.685589][T14259] audit: audit_lost=283800 audit_rate_limit=0 audit_backlog_limit=64 [ 678.695737][ T5897] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 678.770219][T14223] team0: Port device team_slave_0 added [ 678.801956][T14223] team0: Port device team_slave_1 added [ 678.907779][ T5897] usb 3-1: device descriptor read/64, error -71 [ 678.918172][T14223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.925159][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.957167][T14223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.969926][T14223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.977080][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.004416][T14223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.006140][T12617] Bluetooth: hci2: command tx timeout [ 679.037442][ T5897] usb usb3-port1: attempt power cycle [ 679.153967][T14223] hsr_slave_0: entered promiscuous mode [ 679.160752][T14223] hsr_slave_1: entered promiscuous mode [ 679.167198][T14223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.174866][T14223] Cannot create hsr debugfs directory [ 679.181084][T14256] lo speed is unknown, defaulting to 1000 [ 679.248194][T14258] siw: device registration error -23 [ 679.555892][ T5897] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 679.591715][ T5897] usb 3-1: device descriptor read/8, error -71 [ 679.935765][ T5897] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 679.972732][ T5897] usb 3-1: device descriptor read/8, error -71 [ 680.177762][ T5897] usb usb3-port1: unable to enumerate USB device [ 680.783661][T14223] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 680.817292][T14223] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 680.849035][T14223] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 680.859597][T14223] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 680.950338][T14223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.988011][T14223] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.027734][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.034939][ T7630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.065975][T12617] Bluetooth: hci2: command tx timeout [ 681.085253][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.092438][ T7630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.839358][T14295] syz.3.2030 uses old SIOCAX25GETINFO [ 682.131330][T14223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.252273][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 682.254329][T14309] lo speed is unknown, defaulting to 1000 [ 682.295956][ T9726] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 682.445853][ T9726] usb 4-1: Using ep0 maxpacket: 32 [ 682.456869][ T9726] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 682.486846][ T9726] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 682.505646][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 682.534400][ T9726] usb 4-1: Product: syz [ 682.551438][ T9726] usb 4-1: Manufacturer: syz [ 682.595697][ T9726] usb 4-1: SerialNumber: syz [ 682.608911][ T9726] usb 4-1: config 0 descriptor?? [ 682.671731][T14309] siw: device registration error -23 [ 682.755014][T14326] can0: slcan on ttyS3. [ 682.998230][T14325] can0 (unregistered): slcan off ttyS3. [ 683.146432][T12617] Bluetooth: hci2: command tx timeout [ 683.526031][T14223] veth0_vlan: entered promiscuous mode [ 683.543473][ T30] kauditd_printk_skb: 6790 callbacks suppressed [ 683.543493][ T30] audit: type=1400 audit(1732520464.731:704448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14334 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 683.601119][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.601624][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.608625][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.614243][ C0] audit: audit_lost=284505 audit_rate_limit=0 audit_backlog_limit=64 [ 683.622002][T14223] veth1_vlan: entered promiscuous mode [ 683.628925][ C0] audit: backlog limit exceeded [ 683.640473][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.647028][ T9554] audit: audit_lost=284506 audit_rate_limit=0 audit_backlog_limit=64 [ 683.647048][ T9554] audit: backlog limit exceeded [ 683.647070][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.836863][T14223] veth0_macvtap: entered promiscuous mode [ 683.856660][T14223] veth1_macvtap: entered promiscuous mode [ 683.869287][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.879903][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.890052][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.900729][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.911661][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.923308][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.933459][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.944229][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.954337][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.964987][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.975107][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.985719][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.995695][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.006230][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.017016][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.028821][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.038778][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.049316][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.060525][T14223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.116997][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.129471][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.139669][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.150847][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.160883][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.171691][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.181685][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.192349][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.202413][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.214074][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.224965][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.235510][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.245438][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.255974][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.266010][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.276531][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.286472][T14223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.297029][T14223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.308193][T14223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.320277][T14223] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.346443][T14223] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.355197][T14223] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.364368][T14223] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.392072][ T9768] usb 4-1: USB disconnect, device number 69 [ 684.524482][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.536094][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.672671][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.681098][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.774068][T14356] netlink: 'syz.8.2050': attribute type 1 has an invalid length. [ 685.243035][T12617] Bluetooth: hci2: command tx timeout [ 685.382496][T14368] lo speed is unknown, defaulting to 1000 [ 685.408993][T14371] siw: device registration error -23 [ 685.927059][T14395] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 686.109672][T14398] FAULT_INJECTION: forcing a failure. [ 686.109672][T14398] name failslab, interval 1, probability 0, space 0, times 0 [ 686.135823][T14398] CPU: 0 UID: 0 PID: 14398 Comm: syz.3.2064 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 686.146299][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 686.156384][T14398] Call Trace: [ 686.159687][T14398] [ 686.162645][T14398] dump_stack_lvl+0x241/0x360 [ 686.167362][T14398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.172588][T14398] ? __pfx__printk+0x10/0x10 [ 686.177227][T14398] ? fs_reclaim_acquire+0x93/0x130 [ 686.182402][T14398] ? __pfx___might_resched+0x10/0x10 [ 686.187744][T14398] should_fail_ex+0x3b0/0x4e0 [ 686.192463][T14398] ? tomoyo_encode2+0x27e/0x550 [ 686.197375][T14398] should_failslab+0xac/0x100 [ 686.202087][T14398] ? tomoyo_encode2+0x27e/0x550 [ 686.206978][T14398] __kmalloc_noprof+0xd8/0x400 [ 686.211780][T14398] tomoyo_encode2+0x27e/0x550 [ 686.216521][T14398] tomoyo_check_unix_address+0x333/0x890 [ 686.222210][T14398] ? tomoyo_check_unix_address+0x15d/0x890 [ 686.228071][T14398] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 686.234289][T14398] tomoyo_socket_connect_permission+0x23a/0x370 [ 686.240588][T14398] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 686.247405][T14398] ? __pfx_current_check_access_socket+0x10/0x10 [ 686.253761][T14398] ? __might_fault+0xaa/0x120 [ 686.258477][T14398] ? __might_fault+0xc6/0x120 [ 686.263226][T14398] security_socket_connect+0xc6/0x2a0 [ 686.268638][T14398] __sys_connect+0x1d3/0x2d0 [ 686.273266][T14398] ? __fget_files+0x2a/0x410 [ 686.277901][T14398] ? __pfx___sys_connect+0x10/0x10 [ 686.283070][T14398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 686.289439][T14398] ? do_syscall_64+0x100/0x230 [ 686.294240][T14398] __x64_sys_connect+0x7a/0x90 [ 686.299159][T14398] do_syscall_64+0xf3/0x230 [ 686.303703][T14398] ? clear_bhb_loop+0x35/0x90 [ 686.308415][T14398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.314341][T14398] RIP: 0033:0x7f584c57e819 [ 686.318786][T14398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.338428][T14398] RSP: 002b:00007f584d3b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 686.346890][T14398] RAX: ffffffffffffffda RBX: 00007f584c735fa0 RCX: 00007f584c57e819 [ 686.354891][T14398] RDX: 0000000000000025 RSI: 0000000020000000 RDI: 0000000000000004 [ 686.362887][T14398] RBP: 00007f584d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 686.370886][T14398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.378893][T14398] R13: 0000000000000000 R14: 00007f584c735fa0 R15: 00007ffe2a25f6c8 [ 686.386911][T14398] [ 686.389988][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.343651][T14428] FAULT_INJECTION: forcing a failure. [ 687.343651][T14428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.399693][T14419] lo speed is unknown, defaulting to 1000 [ 687.407925][T14420] siw: device registration error -23 [ 687.414990][T14428] CPU: 1 UID: 0 PID: 14428 Comm: syz.0.2075 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 687.425454][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 687.435538][T14428] Call Trace: [ 687.438947][T14428] [ 687.441906][T14428] dump_stack_lvl+0x241/0x360 [ 687.446634][T14428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.451876][T14428] ? __pfx__printk+0x10/0x10 [ 687.456535][T14428] ? __pfx_lock_release+0x10/0x10 [ 687.461599][T14428] should_fail_ex+0x3b0/0x4e0 [ 687.466337][T14428] _copy_from_user+0x2f/0xc0 [ 687.466798][ T9726] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 687.470943][T14428] copy_msghdr_from_user+0xae/0x680 [ 687.470990][T14428] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 687.471023][T14428] ? __fget_files+0x2a/0x410 [ 687.471051][T14428] ? __fget_files+0x2a/0x410 [ 687.471083][T14428] __sys_sendmsg+0x209/0x350 [ 687.471112][T14428] ? __pfx_lock_release+0x10/0x10 [ 687.471140][T14428] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.513653][T14428] ? __pfx_vfs_write+0x10/0x10 [ 687.518491][T14428] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 687.524871][T14428] ? do_syscall_64+0x100/0x230 [ 687.529689][T14428] ? do_syscall_64+0xb6/0x230 [ 687.534412][T14428] do_syscall_64+0xf3/0x230 [ 687.538956][T14428] ? clear_bhb_loop+0x35/0x90 [ 687.543680][T14428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.549632][T14428] RIP: 0033:0x7f6c8157e819 [ 687.554086][T14428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.573744][T14428] RSP: 002b:00007f6c823a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.582292][T14428] RAX: ffffffffffffffda RBX: 00007f6c81735fa0 RCX: 00007f6c8157e819 [ 687.589243][T14436] FAULT_INJECTION: forcing a failure. [ 687.589243][T14436] name failslab, interval 1, probability 0, space 0, times 0 [ 687.590299][T14428] RDX: 0000000000000010 RSI: 0000000020000680 RDI: 0000000000000004 [ 687.590321][T14428] RBP: 00007f6c823a4090 R08: 0000000000000000 R09: 0000000000000000 [ 687.590339][T14428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.626856][T14428] R13: 0000000000000000 R14: 00007f6c81735fa0 R15: 00007fff67e59228 [ 687.634859][T14428] [ 687.637899][T14436] CPU: 0 UID: 0 PID: 14436 Comm: syz.9.2078 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 687.648346][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 687.658405][T14436] Call Trace: [ 687.661680][T14436] [ 687.664611][T14436] dump_stack_lvl+0x241/0x360 [ 687.669319][T14436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.674538][T14436] ? __pfx__printk+0x10/0x10 [ 687.679157][T14436] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 687.685150][T14436] ? __pfx___might_resched+0x10/0x10 [ 687.690458][T14436] should_fail_ex+0x3b0/0x4e0 [ 687.695176][T14436] should_failslab+0xac/0x100 [ 687.699885][T14436] ? __alloc_skb+0x1c3/0x440 [ 687.704482][T14436] kmem_cache_alloc_node_noprof+0x71/0x320 [ 687.710314][T14436] __alloc_skb+0x1c3/0x440 [ 687.714746][T14436] ? __pfx___alloc_skb+0x10/0x10 [ 687.719692][T14436] ? netlink_autobind+0xd6/0x2f0 [ 687.724638][T14436] ? netlink_autobind+0x2b0/0x2f0 [ 687.729681][T14436] netlink_sendmsg+0x638/0xcb0 [ 687.734476][T14436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.739783][T14436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.745090][T14436] __sock_sendmsg+0x221/0x270 [ 687.749787][T14436] ____sys_sendmsg+0x52a/0x7e0 [ 687.754567][T14436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.759863][T14436] ? __fget_files+0x2a/0x410 [ 687.764466][T14436] ? __fget_files+0x2a/0x410 [ 687.769108][T14436] __sys_sendmsg+0x269/0x350 [ 687.773727][T14436] ? __pfx_lock_release+0x10/0x10 [ 687.778767][T14436] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.783900][T14436] ? __pfx_vfs_write+0x10/0x10 [ 687.788707][T14436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 687.795044][T14436] ? do_syscall_64+0x100/0x230 [ 687.799850][T14436] ? do_syscall_64+0xb6/0x230 [ 687.804561][T14436] do_syscall_64+0xf3/0x230 [ 687.809088][T14436] ? clear_bhb_loop+0x35/0x90 [ 687.813784][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.819705][T14436] RIP: 0033:0x7fd73157e819 [ 687.824143][T14436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.843767][T14436] RSP: 002b:00007fd732457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.852213][T14436] RAX: ffffffffffffffda RBX: 00007fd731735fa0 RCX: 00007fd73157e819 [ 687.860203][T14436] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 687.868184][T14436] RBP: 00007fd732457090 R08: 0000000000000000 R09: 0000000000000000 [ 687.876162][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.884147][T14436] R13: 0000000000000000 R14: 00007fd731735fa0 R15: 00007ffdeb5b0168 [ 687.892156][T14436] [ 687.958234][ T9726] usb 4-1: Using ep0 maxpacket: 8 [ 687.998317][ T9726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.035588][ T9726] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 688.060660][ T9726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 688.071836][ T9726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 688.083848][ T9726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 688.094766][ T9726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 688.105975][ T9726] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.187631][T14442] netlink: 'syz.8.2081': attribute type 1 has an invalid length. [ 688.243815][ T9726] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 688.254310][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.262823][ T9726] usb 4-1: Product: syz [ 688.267115][ T9726] usb 4-1: Manufacturer: syz [ 688.271736][ T9726] usb 4-1: SerialNumber: syz [ 688.292711][ T9726] usb 4-1: config 0 descriptor?? [ 688.299018][T14423] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 688.486514][ T9726] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 688.494318][ T9726] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5 [ 688.560588][ T30] kauditd_printk_skb: 7824 callbacks suppressed [ 688.560650][ T30] audit: type=1400 audit(1732520469.751:710190): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14449 comm="syz-executor" name="243" dev="tmpfs" ino=1300 [ 688.638255][ T30] audit: type=1400 audit(1732520469.751:710191): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14449 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 688.831832][ T30] audit: type=1400 audit(1732520469.751:710192): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14449 comm="syz-executor" name="/" dev="proc" ino=1 [ 689.035469][ T30] audit: type=1400 audit(1732520469.751:710193): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14449 comm="syz-executor" name="/" dev="proc" ino=1 [ 689.055935][ T30] audit: type=1400 audit(1732520469.751:710194): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14449 comm="syz-executor" name="710" dev="proc" ino=49146 [ 689.075590][ T30] audit: type=1400 audit(1732520469.751:710195): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=14449 comm="syz-executor" name="oom_score_adj" dev="proc" ino=49147 [ 689.086522][T14452] audit: audit_backlog=65 > audit_backlog_limit=64 [ 689.096178][ T30] audit: type=1400 audit(1732520469.751:710196): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=14449 comm="syz-executor" path="/proc/710/oom_score_adj" dev="proc" ino=49147 [ 689.105682][T14452] audit: audit_lost=285205 audit_rate_limit=0 audit_backlog_limit=64 [ 689.122729][ T30] audit: type=1400 audit(1732520469.751:710197): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14449 comm="syz-executor" name="243" dev="tmpfs" ino=1300 [ 689.886161][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.952566][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.052604][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2089'. [ 691.229828][ T9726] usb 4-1: USB disconnect, device number 70 [ 692.680698][T14511] input: syz0 as /devices/virtual/input/input46 [ 693.137368][T14516] tipc: Started in network mode [ 693.142386][T14516] tipc: Node identity 1, cluster identity 1 [ 693.175682][T14516] tipc: Node number set to 1 [ 693.385899][T14522] FAULT_INJECTION: forcing a failure. [ 693.385899][T14522] name failslab, interval 1, probability 0, space 0, times 0 [ 693.409838][T14522] CPU: 0 UID: 0 PID: 14522 Comm: syz.9.2106 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 693.420319][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 693.430402][T14522] Call Trace: [ 693.433700][T14522] [ 693.436648][T14522] dump_stack_lvl+0x241/0x360 [ 693.441354][T14522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.446563][T14522] ? __pfx__printk+0x10/0x10 [ 693.451168][T14522] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 693.456722][T14522] ? __pfx___might_resched+0x10/0x10 [ 693.462023][T14522] should_fail_ex+0x3b0/0x4e0 [ 693.466711][T14522] ? sk_prot_alloc+0x58/0x210 [ 693.471418][T14522] should_failslab+0xac/0x100 [ 693.476108][T14522] ? sk_prot_alloc+0x58/0x210 [ 693.480798][T14522] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 693.486203][T14522] sk_prot_alloc+0x58/0x210 [ 693.490712][T14522] ? sk_alloc+0x26/0x370 [ 693.494978][T14522] sk_alloc+0x38/0x370 [ 693.499070][T14522] unix_create1+0xb4/0x7a0 [ 693.503499][T14522] ? __pfx_smack_socket_connect+0x10/0x10 [ 693.509264][T14522] unix_stream_connect+0x321/0x10e0 [ 693.514496][T14522] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 693.521302][T14522] ? __pfx_current_check_access_socket+0x10/0x10 [ 693.527652][T14522] ? __might_fault+0xaa/0x120 [ 693.532345][T14522] ? __pfx_unix_stream_connect+0x10/0x10 [ 693.538005][T14522] __sys_connect+0x288/0x2d0 [ 693.542613][T14522] ? __fget_files+0x2a/0x410 [ 693.547235][T14522] ? __pfx___sys_connect+0x10/0x10 [ 693.552366][T14522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 693.558732][T14522] ? do_syscall_64+0x100/0x230 [ 693.563518][T14522] __x64_sys_connect+0x7a/0x90 [ 693.568388][T14522] do_syscall_64+0xf3/0x230 [ 693.572917][T14522] ? clear_bhb_loop+0x35/0x90 [ 693.577618][T14522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.583538][T14522] RIP: 0033:0x7fd73157e819 [ 693.587969][T14522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.607605][T14522] RSP: 002b:00007fd732457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 693.616041][T14522] RAX: ffffffffffffffda RBX: 00007fd731735fa0 RCX: 00007fd73157e819 [ 693.624028][T14522] RDX: 0000000000000025 RSI: 0000000020000000 RDI: 0000000000000004 [ 693.632017][T14522] RBP: 00007fd732457090 R08: 0000000000000000 R09: 0000000000000000 [ 693.640006][T14522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.647987][T14522] R13: 0000000000000000 R14: 00007fd731735fa0 R15: 00007ffdeb5b0168 [ 693.655979][T14522] [ 693.681129][ T30] kauditd_printk_skb: 4087 callbacks suppressed [ 693.681170][ T30] audit: type=1400 audit(1732520474.861:713510): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14506 comm="syz.3.2101" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 693.724145][ T30] audit: type=1400 audit(1732520474.861:713511): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14506 comm="syz.3.2101" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 693.755663][ T30] audit: type=1400 audit(1732520474.861:713512): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=14506 comm="syz.3.2101" saddr=10.128.0.169 src=30008 daddr=10.128.10.49 dest=34130 netif=eth0 [ 693.788092][ T30] audit: type=1400 audit(1732520474.901:713513): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14526 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 693.821505][ T30] audit: type=1400 audit(1732520474.901:713514): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14526 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 693.858153][ T30] audit: type=1400 audit(1732520474.901:713515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14526 comm="syz-executor" name="245" dev="tmpfs" ino=1310 [ 693.887065][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.893650][T12272] audit: audit_lost=285464 audit_rate_limit=0 audit_backlog_limit=64 [ 693.902501][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.909111][ C0] audit: audit_lost=285465 audit_rate_limit=0 audit_backlog_limit=64 [ 694.092191][T14537] ntfs3(nullb0): Primary boot signature is not NTFS. [ 694.125648][T14537] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 694.163724][T14534] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 694.216400][T14534] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 694.609053][T14552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2115'. [ 694.649856][T14554] input: syz0 as /devices/virtual/input/input47 [ 694.946733][T14560] FAULT_INJECTION: forcing a failure. [ 694.946733][T14560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.990479][T14560] CPU: 1 UID: 0 PID: 14560 Comm: syz.9.2117 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 695.000928][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 695.010982][T14560] Call Trace: [ 695.014303][T14560] [ 695.017237][T14560] dump_stack_lvl+0x241/0x360 [ 695.021929][T14560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.027150][T14560] ? __pfx__printk+0x10/0x10 [ 695.031773][T14560] ? __pfx_lock_release+0x10/0x10 [ 695.036810][T14560] should_fail_ex+0x3b0/0x4e0 [ 695.041497][T14560] _copy_from_user+0x2f/0xc0 [ 695.046109][T14560] copy_msghdr_from_user+0xae/0x680 [ 695.051343][T14560] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 695.057160][T14560] ? __fget_files+0x2a/0x410 [ 695.061757][T14560] ? __fget_files+0x2a/0x410 [ 695.066371][T14560] __sys_sendmsg+0x209/0x350 [ 695.070991][T14560] ? __pfx_lock_release+0x10/0x10 [ 695.076026][T14560] ? __pfx___sys_sendmsg+0x10/0x10 [ 695.081150][T14560] ? __pfx_vfs_write+0x10/0x10 [ 695.085954][T14560] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 695.092298][T14560] ? do_syscall_64+0x100/0x230 [ 695.097070][T14560] ? do_syscall_64+0xb6/0x230 [ 695.101750][T14560] do_syscall_64+0xf3/0x230 [ 695.106269][T14560] ? clear_bhb_loop+0x35/0x90 [ 695.110966][T14560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.116865][T14560] RIP: 0033:0x7fd73157e819 [ 695.121283][T14560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.140887][T14560] RSP: 002b:00007fd732457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.149307][T14560] RAX: ffffffffffffffda RBX: 00007fd731735fa0 RCX: 00007fd73157e819 [ 695.157286][T14560] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000004 [ 695.165286][T14560] RBP: 00007fd732457090 R08: 0000000000000000 R09: 0000000000000000 [ 695.173286][T14560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.181266][T14560] R13: 0000000000000000 R14: 00007fd731735fa0 R15: 00007ffdeb5b0168 [ 695.189269][T14560] [ 695.413750][T14568] FAULT_INJECTION: forcing a failure. [ 695.413750][T14568] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 695.478817][T14568] CPU: 1 UID: 0 PID: 14568 Comm: syz.0.2122 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 695.489309][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 695.499406][T14568] Call Trace: [ 695.502716][T14568] [ 695.505677][T14568] dump_stack_lvl+0x241/0x360 [ 695.510391][T14568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.515611][T14568] ? __pfx__printk+0x10/0x10 [ 695.520223][T14568] ? cgroup_rstat_updated+0x13b/0xc60 [ 695.525631][T14568] should_fail_ex+0x3b0/0x4e0 [ 695.530330][T14568] prepare_alloc_pages+0x1da/0x5b0 [ 695.535467][T14568] __alloc_pages_noprof+0x16f/0x710 [ 695.540719][T14568] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 695.546510][T14568] ? __pfx_lock_acquire+0x10/0x10 [ 695.551563][T14568] alloc_pages_mpol_noprof+0x3e8/0x680 [ 695.557062][T14568] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 695.563063][T14568] ? do_raw_spin_unlock+0x13c/0x8b0 [ 695.568292][T14568] ? alloc_pages_noprof+0xef/0x170 [ 695.573427][T14568] __pmd_alloc+0x91/0x670 [ 695.577785][T14568] ? __pfx___pmd_alloc+0x10/0x10 [ 695.582758][T14568] ? __pfx_lock_release+0x10/0x10 [ 695.587811][T14568] handle_mm_fault+0xea7/0x1ad0 [ 695.592704][T14568] ? __pfx_handle_mm_fault+0x10/0x10 [ 695.598023][T14568] ? __pfx_find_vma+0x10/0x10 [ 695.602717][T14568] ? vma_is_secretmem+0xd/0x50 [ 695.607492][T14568] ? check_vma_flags+0x3ee/0x5a0 [ 695.612456][T14568] __get_user_pages+0x1c82/0x49e0 [ 695.617524][T14568] ? __pfx___get_user_pages+0x10/0x10 [ 695.622913][T14568] ? alloc_bprm+0xbbe/0xe20 [ 695.627433][T14568] ? __pfx_lock_release+0x10/0x10 [ 695.632479][T14568] get_user_pages_remote+0x31e/0xb60 [ 695.637786][T14568] ? __pfx_up_write+0x10/0x10 [ 695.642482][T14568] ? __pfx_get_user_pages_remote+0x10/0x10 [ 695.648311][T14568] get_arg_page+0x266/0x580 [ 695.652836][T14568] ? __pfx_get_arg_page+0x10/0x10 [ 695.657879][T14568] ? __pfx_alloc_bprm+0x10/0x10 [ 695.662746][T14568] ? __virt_addr_valid+0x45f/0x530 [ 695.667877][T14568] copy_string_kernel+0x148/0x1f0 [ 695.672955][T14568] do_execveat_common+0x3fd/0x6f0 [ 695.678003][T14568] __x64_sys_execve+0x92/0xb0 [ 695.682713][T14568] do_syscall_64+0xf3/0x230 [ 695.687234][T14568] ? clear_bhb_loop+0x35/0x90 [ 695.691922][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.697830][T14568] RIP: 0033:0x7f6c8157e819 [ 695.702249][T14568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.721861][T14568] RSP: 002b:00007f6c823a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 695.730293][T14568] RAX: ffffffffffffffda RBX: 00007f6c81735fa0 RCX: 00007f6c8157e819 [ 695.738286][T14568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 695.746284][T14568] RBP: 00007f6c823a4090 R08: 0000000000000000 R09: 0000000000000000 [ 695.754352][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 695.762354][T14568] R13: 0000000000000000 R14: 00007f6c81735fa0 R15: 00007fff67e59228 [ 695.770359][T14568] [ 696.522209][T14599] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 696.610131][T14600] input: syz0 as /devices/virtual/input/input48 [ 697.769907][T14643] input: syz0 as /devices/virtual/input/input49 [ 698.321942][T14659] FAULT_INJECTION: forcing a failure. [ 698.321942][T14659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.365871][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.2.2154 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 698.376363][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 698.386453][T14659] Call Trace: [ 698.389756][T14659] [ 698.392714][T14659] dump_stack_lvl+0x241/0x360 [ 698.397442][T14659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.402652][T14659] ? __pfx__printk+0x10/0x10 [ 698.407265][T14659] ? __pfx_lock_release+0x10/0x10 [ 698.412310][T14659] should_fail_ex+0x3b0/0x4e0 [ 698.417013][T14659] _copy_from_iter+0x21f/0x1e70 [ 698.421933][T14659] ? __virt_addr_valid+0x183/0x530 [ 698.427095][T14659] ? __pfx_lock_release+0x10/0x10 [ 698.432135][T14659] ? __alloc_skb+0x28f/0x440 [ 698.436738][T14659] ? __pfx__copy_from_iter+0x10/0x10 [ 698.442043][T14659] ? __virt_addr_valid+0x183/0x530 [ 698.447170][T14659] ? __virt_addr_valid+0x183/0x530 [ 698.452291][T14659] ? __virt_addr_valid+0x45f/0x530 [ 698.457416][T14659] ? __check_object_size+0x48e/0x900 [ 698.462721][T14659] netlink_sendmsg+0x73d/0xcb0 [ 698.467514][T14659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.472824][T14659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.478125][T14659] __sock_sendmsg+0x221/0x270 [ 698.482828][T14659] ____sys_sendmsg+0x52a/0x7e0 [ 698.487615][T14659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.492927][T14659] ? __fget_files+0x2a/0x410 [ 698.497535][T14659] ? __fget_files+0x2a/0x410 [ 698.502139][T14659] __sys_sendmsg+0x269/0x350 [ 698.506745][T14659] ? __pfx_lock_release+0x10/0x10 [ 698.511800][T14659] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.516938][T14659] ? __pfx_vfs_write+0x10/0x10 [ 698.521747][T14659] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 698.528087][T14659] ? do_syscall_64+0x100/0x230 [ 698.532862][T14659] ? do_syscall_64+0xb6/0x230 [ 698.537554][T14659] do_syscall_64+0xf3/0x230 [ 698.542070][T14659] ? clear_bhb_loop+0x35/0x90 [ 698.546761][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.552679][T14659] RIP: 0033:0x7fc1aa17e819 [ 698.557114][T14659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.576734][T14659] RSP: 002b:00007fc1aafa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.585163][T14659] RAX: ffffffffffffffda RBX: 00007fc1aa335fa0 RCX: 00007fc1aa17e819 [ 698.593145][T14659] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 698.601158][T14659] RBP: 00007fc1aafa6090 R08: 0000000000000000 R09: 0000000000000000 [ 698.609153][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.617145][T14659] R13: 0000000000000000 R14: 00007fc1aa335fa0 R15: 00007ffdbc391a48 [ 698.625147][T14659] [ 698.685627][ T30] kauditd_printk_skb: 8977 callbacks suppressed [ 698.685646][ T30] audit: type=1400 audit(1732520479.881:720383): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9814 comm="syz-executor" name="282" dev="tmpfs" ino=1496 [ 698.807336][ T30] audit: type=1400 audit(1732520479.901:720384): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=9814 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=1498 [ 698.920713][ T30] audit: type=1400 audit(1732520479.901:720385): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=9814 comm="syz-executor" name="282" dev="tmpfs" ino=1496 [ 698.948923][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.955483][T12272] audit: audit_lost=286172 audit_rate_limit=0 audit_backlog_limit=64 [ 698.965179][T12272] audit: backlog limit exceeded [ 698.971120][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.977893][T12272] audit: audit_lost=286173 audit_rate_limit=0 audit_backlog_limit=64 [ 698.986568][T12272] audit: backlog limit exceeded [ 698.995998][T12272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.459633][T14676] input: syz0 as /devices/virtual/input/input50 [ 700.049868][T14699] FAULT_INJECTION: forcing a failure. [ 700.049868][T14699] name failslab, interval 1, probability 0, space 0, times 0 [ 700.100369][T14699] CPU: 1 UID: 0 PID: 14699 Comm: syz.8.2169 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 700.110875][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 700.120964][T14699] Call Trace: [ 700.124273][T14699] [ 700.127222][T14699] dump_stack_lvl+0x241/0x360 [ 700.131947][T14699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.137167][T14699] ? __pfx__printk+0x10/0x10 [ 700.141807][T14699] ? __kmalloc_noprof+0xb0/0x400 [ 700.146779][T14699] ? __pfx___might_resched+0x10/0x10 [ 700.152146][T14699] should_fail_ex+0x3b0/0x4e0 [ 700.156851][T14699] ? security_sk_alloc+0x53/0x360 [ 700.161900][T14699] should_failslab+0xac/0x100 [ 700.166587][T14699] ? security_sk_alloc+0x53/0x360 [ 700.171623][T14699] __kmalloc_noprof+0xd8/0x400 [ 700.176400][T14699] ? sk_prot_alloc+0x58/0x210 [ 700.181099][T14699] security_sk_alloc+0x53/0x360 [ 700.185997][T14699] sk_prot_alloc+0xfa/0x210 [ 700.190536][T14699] sk_alloc+0x38/0x370 [ 700.194629][T14699] unix_create1+0xb4/0x7a0 [ 700.199062][T14699] ? __pfx_smack_socket_connect+0x10/0x10 [ 700.204806][T14699] unix_stream_connect+0x321/0x10e0 [ 700.210022][T14699] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 700.216811][T14699] ? __pfx_current_check_access_socket+0x10/0x10 [ 700.223170][T14699] ? __might_fault+0xaa/0x120 [ 700.227877][T14699] ? __pfx_unix_stream_connect+0x10/0x10 [ 700.233529][T14699] __sys_connect+0x288/0x2d0 [ 700.238140][T14699] ? __fget_files+0x2a/0x410 [ 700.242744][T14699] ? __pfx___sys_connect+0x10/0x10 [ 700.247891][T14699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 700.254236][T14699] ? do_syscall_64+0x100/0x230 [ 700.259015][T14699] __x64_sys_connect+0x7a/0x90 [ 700.263793][T14699] do_syscall_64+0xf3/0x230 [ 700.268315][T14699] ? clear_bhb_loop+0x35/0x90 [ 700.273003][T14699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.278941][T14699] RIP: 0033:0x7f29a337e819 [ 700.283368][T14699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.302990][T14699] RSP: 002b:00007f29a41d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 700.311422][T14699] RAX: ffffffffffffffda RBX: 00007f29a3535fa0 RCX: 00007f29a337e819 [ 700.319419][T14699] RDX: 0000000000000025 RSI: 0000000020000000 RDI: 0000000000000004 [ 700.327394][T14699] RBP: 00007f29a41d1090 R08: 0000000000000000 R09: 0000000000000000 [ 700.335399][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.343377][T14699] R13: 0000000000000000 R14: 00007f29a3535fa0 R15: 00007ffea6e28698 [ 700.351368][T14699] [ 700.949556][T14730] FAULT_INJECTION: forcing a failure. [ 700.949556][T14730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.986822][T14730] CPU: 0 UID: 0 PID: 14730 Comm: syz.8.2181 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 700.997307][T14730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 701.007402][T14730] Call Trace: [ 701.010713][T14730] [ 701.013680][T14730] dump_stack_lvl+0x241/0x360 [ 701.018401][T14730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.023634][T14730] ? __pfx__printk+0x10/0x10 [ 701.028274][T14730] ? __pfx_lock_release+0x10/0x10 [ 701.033349][T14730] should_fail_ex+0x3b0/0x4e0 [ 701.038068][T14730] _copy_from_iter+0x21f/0x1e70 [ 701.042969][T14730] ? __virt_addr_valid+0x183/0x530 [ 701.048154][T14730] ? __pfx_lock_release+0x10/0x10 [ 701.053224][T14730] ? __alloc_skb+0x28f/0x440 [ 701.057858][T14730] ? __pfx__copy_from_iter+0x10/0x10 [ 701.063212][T14730] ? __virt_addr_valid+0x183/0x530 [ 701.068457][T14730] ? __virt_addr_valid+0x183/0x530 [ 701.073608][T14730] ? __virt_addr_valid+0x45f/0x530 [ 701.078781][T14730] ? __check_object_size+0x48e/0x900 [ 701.084121][T14730] netlink_sendmsg+0x73d/0xcb0 [ 701.088922][T14730] ? mark_lock+0x9a/0x360 [ 701.093301][T14730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.098642][T14730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.103960][T14730] __sock_sendmsg+0x221/0x270 [ 701.108674][T14730] sock_write_iter+0x2d7/0x3f0 [ 701.113471][T14730] ? __pfx_sock_write_iter+0x10/0x10 [ 701.118819][T14730] do_iter_readv_writev+0x600/0x880 [ 701.124049][T14730] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 701.129796][T14730] ? bpf_lsm_file_permission+0x9/0x10 [ 701.135185][T14730] ? security_file_permission+0x74/0x280 [ 701.140834][T14730] ? rw_verify_area+0x1c3/0x6f0 [ 701.145702][T14730] vfs_writev+0x376/0xba0 [ 701.150056][T14730] ? __pfx_lock_acquire+0x10/0x10 [ 701.155089][T14730] ? __pfx_vfs_writev+0x10/0x10 [ 701.159966][T14730] ? __pfx_vfs_write+0x10/0x10 [ 701.164751][T14730] ? __fget_files+0x2a/0x410 [ 701.169355][T14730] ? __fget_files+0x395/0x410 [ 701.174049][T14730] ? __fget_files+0x2a/0x410 [ 701.178663][T14730] do_writev+0x1b6/0x360 [ 701.182943][T14730] ? __pfx_do_writev+0x10/0x10 [ 701.187736][T14730] ? do_syscall_64+0x100/0x230 [ 701.192508][T14730] ? do_syscall_64+0xb6/0x230 [ 701.197211][T14730] do_syscall_64+0xf3/0x230 [ 701.201730][T14730] ? clear_bhb_loop+0x35/0x90 [ 701.206417][T14730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.212331][T14730] RIP: 0033:0x7f29a337e819 [ 701.216765][T14730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.236387][T14730] RSP: 002b:00007f29a41d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 701.244818][T14730] RAX: ffffffffffffffda RBX: 00007f29a3535fa0 RCX: 00007f29a337e819 [ 701.252794][T14730] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 701.261200][T14730] RBP: 00007f29a41d1090 R08: 0000000000000000 R09: 0000000000000000 [ 701.269185][T14730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.277162][T14730] R13: 0000000000000000 R14: 00007f29a3535fa0 R15: 00007ffea6e28698 [ 701.285156][T14730] [ 702.236328][T14746] fuse: Bad value for 'fd' [ 702.515706][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 702.806320][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 703.085200][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.111007][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 703.142159][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 703.171385][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 703.181834][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 703.191930][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 703.227569][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 703.290555][ T9] usb 4-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 703.320262][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.350410][ T9] usb 4-1: Product: syz [ 703.354650][ T9] usb 4-1: Manufacturer: syz [ 703.373724][ T9] usb 4-1: SerialNumber: syz [ 703.388431][ T9] usb 4-1: config 0 descriptor?? [ 703.402636][T14746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 703.451238][ T9] vmk80xx 4-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 703.469018][T10881] Bluetooth: hci5: command 0x0406 tx timeout [ 703.494020][ T9] vmk80xx 4-1:0.0: probe with driver vmk80xx failed with error -22 [ 703.714002][ T30] kauditd_printk_skb: 8334 callbacks suppressed [ 703.714067][ T30] audit: type=1400 audit(1732520484.901:725473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9554 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 703.943016][ T30] audit: type=1400 audit(1732520484.931:725474): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9554 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 704.268925][ T30] audit: type=1400 audit(1732520484.931:725475): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9554 comm="syz-executor" name="fs" dev="sysfs" ino=2 [ 704.309539][ T9] usb 4-1: USB disconnect, device number 71 [ 704.354527][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.358228][ T30] audit: type=1400 audit(1732520484.931:725476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9554 comm="syz-executor" name="fuse" dev="sysfs" ino=5361 [ 704.385634][ T9814] audit: audit_lost=287258 audit_rate_limit=0 audit_backlog_limit=64 [ 704.419314][ T9814] audit: backlog limit exceeded [ 704.432676][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.462341][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.469399][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.040308][T14793] xt_TCPMSS: Only works on TCP SYN packets [ 706.587024][T14818] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 706.985383][T14833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.045857][T14833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.630886][T14856] FAULT_INJECTION: forcing a failure. [ 707.630886][T14856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.695909][T14856] CPU: 1 UID: 0 PID: 14856 Comm: syz.2.2225 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 707.706408][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 707.716586][T14856] Call Trace: [ 707.719929][T14856] [ 707.722902][T14856] dump_stack_lvl+0x241/0x360 [ 707.727623][T14856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.732864][T14856] ? __pfx__printk+0x10/0x10 [ 707.737505][T14856] ? vfs_write+0x730/0xd30 [ 707.741965][T14856] should_fail_ex+0x3b0/0x4e0 [ 707.746678][T14856] _copy_from_user+0x2f/0xc0 [ 707.751303][T14856] move_addr_to_kernel+0x82/0x150 [ 707.756372][T14856] __sys_bind+0x124/0x290 [ 707.760734][T14856] ? __pfx___sys_bind+0x10/0x10 [ 707.765627][T14856] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.772069][T14856] ? do_syscall_64+0x100/0x230 [ 707.776870][T14856] __x64_sys_bind+0x7a/0x90 [ 707.781414][T14856] do_syscall_64+0xf3/0x230 [ 707.785953][T14856] ? clear_bhb_loop+0x35/0x90 [ 707.790667][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.796603][T14856] RIP: 0033:0x7fc1aa17e819 [ 707.801043][T14856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.820675][T14856] RSP: 002b:00007fc1aafa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 707.829128][T14856] RAX: ffffffffffffffda RBX: 00007fc1aa335fa0 RCX: 00007fc1aa17e819 [ 707.837149][T14856] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000005 [ 707.845157][T14856] RBP: 00007fc1aafa6090 R08: 0000000000000000 R09: 0000000000000000 [ 707.853170][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.861179][T14856] R13: 0000000000000000 R14: 00007fc1aa335fa0 R15: 00007ffdbc391a48 [ 707.869203][T14856] [ 707.872375][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.716084][ T30] kauditd_printk_skb: 7042 callbacks suppressed [ 708.716107][ T30] audit: type=1400 audit(1732520489.901:729462): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14883 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 708.752598][T14884] FAULT_INJECTION: forcing a failure. [ 708.752598][T14884] name failslab, interval 1, probability 0, space 0, times 0 [ 708.776321][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 708.782911][ T9814] audit: audit_lost=288279 audit_rate_limit=0 audit_backlog_limit=64 [ 708.806819][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 708.806837][ T9554] audit: audit_backlog=65 > audit_backlog_limit=64 [ 708.806857][ T9554] audit: audit_lost=288280 audit_rate_limit=0 audit_backlog_limit=64 [ 708.813404][ C0] audit: audit_lost=288281 audit_rate_limit=0 audit_backlog_limit=64 [ 708.836179][ C0] audit: backlog limit exceeded [ 708.840149][ T9554] audit: backlog limit exceeded [ 708.842072][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 708.876526][T14884] CPU: 1 UID: 0 PID: 14884 Comm: syz.9.2235 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 708.886994][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 708.897081][T14884] Call Trace: [ 708.900388][T14884] [ 708.903346][T14884] dump_stack_lvl+0x241/0x360 [ 708.908089][T14884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.913325][T14884] ? __pfx__printk+0x10/0x10 [ 708.917968][T14884] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 708.923993][T14884] ? __pfx___might_resched+0x10/0x10 [ 708.929339][T14884] should_fail_ex+0x3b0/0x4e0 [ 708.934073][T14884] should_failslab+0xac/0x100 [ 708.938803][T14884] ? __alloc_skb+0x1c3/0x440 [ 708.943430][T14884] kmem_cache_alloc_node_noprof+0x71/0x320 [ 708.949277][T14884] __alloc_skb+0x1c3/0x440 [ 708.953736][T14884] ? __pfx___alloc_skb+0x10/0x10 [ 708.958721][T14884] ? netlink_ack_tlv_len+0x6e/0x200 [ 708.963961][T14884] netlink_ack+0x13f/0xa30 [ 708.968415][T14884] ? ____sys_sendmsg+0x52a/0x7e0 [ 708.973395][T14884] ? __sys_sendmsg+0x269/0x350 [ 708.978200][T14884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.984327][T14884] netlink_rcv_skb+0x262/0x430 [ 708.989149][T14884] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 708.994660][T14884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.000003][T14884] ? cap_capable+0x1b4/0x250 [ 709.004646][T14884] ? safesetid_security_capable+0xb2/0x1d0 [ 709.010505][T14884] ? bpf_lsm_capable+0x9/0x10 [ 709.015219][T14884] ? security_capable+0x7e/0x2d0 [ 709.020213][T14884] nfnetlink_rcv+0x297/0x2ab0 [ 709.024937][T14884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 709.030715][T14884] ? __dev_queue_xmit+0x2f4/0x3f50 [ 709.035879][T14884] ? __dev_queue_xmit+0x1775/0x3f50 [ 709.041150][T14884] ? kasan_save_track+0x51/0x80 [ 709.046058][T14884] ? ____sys_sendmsg+0x52a/0x7e0 [ 709.051153][T14884] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 709.056327][T14884] ? __dev_queue_xmit+0x2f4/0x3f50 [ 709.061488][T14884] ? __pfx___dev_queue_xmit+0x10/0x10 [ 709.066923][T14884] ? ref_tracker_free+0x643/0x7e0 [ 709.071991][T14884] ? __asan_memcpy+0x40/0x70 [ 709.076629][T14884] ? __pfx_ref_tracker_free+0x10/0x10 [ 709.082059][T14884] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.087309][T14884] ? skb_clone+0x240/0x390 [ 709.091774][T14884] ? __pfx_lock_release+0x10/0x10 [ 709.096838][T14884] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 709.102358][T14884] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.107683][T14884] netlink_unicast+0x7f6/0x990 [ 709.112487][T14884] ? __pfx_netlink_unicast+0x10/0x10 [ 709.117818][T14884] ? __virt_addr_valid+0x183/0x530 [ 709.122970][T14884] ? __check_object_size+0x48e/0x900 [ 709.128340][T14884] netlink_sendmsg+0x8e4/0xcb0 [ 709.133188][T14884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.138544][T14884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.143871][T14884] __sock_sendmsg+0x221/0x270 [ 709.148600][T14884] ____sys_sendmsg+0x52a/0x7e0 [ 709.153411][T14884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.158746][T14884] ? __fget_files+0x2a/0x410 [ 709.163374][T14884] ? __fget_files+0x2a/0x410 [ 709.168016][T14884] __sys_sendmsg+0x269/0x350 [ 709.172643][T14884] ? __pfx_lock_release+0x10/0x10 [ 709.177704][T14884] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.182886][T14884] ? __pfx_vfs_write+0x10/0x10 [ 709.187716][T14884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 709.189789][T14877] lo speed is unknown, defaulting to 1000 [ 709.194066][T14884] ? do_syscall_64+0x100/0x230 [ 709.194101][T14884] ? do_syscall_64+0xb6/0x230 [ 709.209341][T14884] do_syscall_64+0xf3/0x230 [ 709.213883][T14884] ? clear_bhb_loop+0x35/0x90 [ 709.218612][T14884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.224536][T14884] RIP: 0033:0x7fd73157e819 [ 709.228969][T14884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.248616][T14884] RSP: 002b:00007fd732457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.257058][T14884] RAX: ffffffffffffffda RBX: 00007fd731735fa0 RCX: 00007fd73157e819 [ 709.263546][T14891] FAULT_INJECTION: forcing a failure. [ 709.263546][T14891] name failslab, interval 1, probability 0, space 0, times 0 [ 709.265034][T14884] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 709.265054][T14884] RBP: 00007fd732457090 R08: 0000000000000000 R09: 0000000000000000 [ 709.265071][T14884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.265087][T14884] R13: 0000000000000000 R14: 00007fd731735fa0 R15: 00007ffdeb5b0168 [ 709.309592][T14884] [ 709.312722][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.331181][T14891] CPU: 0 UID: 0 PID: 14891 Comm: syz.2.2237 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 709.341659][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 709.351736][T14891] Call Trace: [ 709.355044][T14891] [ 709.358012][T14891] dump_stack_lvl+0x241/0x360 [ 709.362766][T14891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.368013][T14891] ? __pfx__printk+0x10/0x10 [ 709.372646][T14891] ? ref_tracker_alloc+0x332/0x490 [ 709.377788][T14891] should_fail_ex+0x3b0/0x4e0 [ 709.382499][T14891] ? skb_clone+0x20c/0x390 [ 709.386956][T14891] should_failslab+0xac/0x100 [ 709.391670][T14891] ? skb_clone+0x20c/0x390 [ 709.396148][T14891] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 709.401554][T14891] skb_clone+0x20c/0x390 [ 709.405836][T14891] __netlink_deliver_tap+0x3cc/0x7f0 [ 709.411164][T14891] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.416387][T14891] netlink_deliver_tap+0x19d/0x1b0 [ 709.421535][T14891] netlink_unicast+0x7c4/0x990 [ 709.426345][T14891] ? __pfx_netlink_unicast+0x10/0x10 [ 709.431662][T14891] ? __virt_addr_valid+0x183/0x530 [ 709.436810][T14891] ? __check_object_size+0x48e/0x900 [ 709.442128][T14891] netlink_sendmsg+0x8e4/0xcb0 [ 709.446925][T14891] ? mark_lock+0x9a/0x360 [ 709.451328][T14891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.456664][T14891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.461978][T14891] __sock_sendmsg+0x221/0x270 [ 709.466706][T14891] sock_write_iter+0x2d7/0x3f0 [ 709.471518][T14891] ? __pfx_sock_write_iter+0x10/0x10 [ 709.476879][T14891] do_iter_readv_writev+0x600/0x880 [ 709.482123][T14891] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 709.487891][T14891] ? bpf_lsm_file_permission+0x9/0x10 [ 709.493329][T14891] ? security_file_permission+0x74/0x280 [ 709.499025][T14891] ? rw_verify_area+0x1c3/0x6f0 [ 709.503920][T14891] vfs_writev+0x376/0xba0 [ 709.508308][T14891] ? __pfx_lock_acquire+0x10/0x10 [ 709.513373][T14891] ? __pfx_vfs_writev+0x10/0x10 [ 709.518283][T14891] ? __pfx_vfs_write+0x10/0x10 [ 709.523095][T14891] ? __fget_files+0x2a/0x410 [ 709.527746][T14891] ? __fget_files+0x395/0x410 [ 709.532461][T14891] ? __fget_files+0x2a/0x410 [ 709.537096][T14891] do_writev+0x1b6/0x360 [ 709.541386][T14891] ? __pfx_do_writev+0x10/0x10 [ 709.546189][T14891] ? do_syscall_64+0x100/0x230 [ 709.551006][T14891] ? do_syscall_64+0xb6/0x230 [ 709.555730][T14891] do_syscall_64+0xf3/0x230 [ 709.560273][T14891] ? clear_bhb_loop+0x35/0x90 [ 709.565016][T14891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.570960][T14891] RIP: 0033:0x7fc1aa17e819 [ 709.575419][T14891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.595075][T14891] RSP: 002b:00007fc1aaf85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 709.603541][T14891] RAX: ffffffffffffffda RBX: 00007fc1aa336080 RCX: 00007fc1aa17e819 [ 709.611548][T14891] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 709.619555][T14891] RBP: 00007fc1aaf85090 R08: 0000000000000000 R09: 0000000000000000 [ 709.627557][T14891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.635569][T14891] R13: 0000000000000000 R14: 00007fc1aa336080 R15: 00007ffdbc391a48 [ 709.643593][T14891] [ 709.913073][T14877] siw: device registration error -23 [ 710.325839][ T9768] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 710.916348][ T31] INFO: task syz.4.1300:11966 blocked for more than 145 seconds. [ 710.924972][ T31] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 710.932368][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 710.985153][ T31] task:syz.4.1300 state:D stack:24792 pid:11966 tgid:11963 ppid:10958 flags:0x00004006 [ 710.995945][ T9768] usb 10-1: Using ep0 maxpacket: 8 [ 711.025960][ T9768] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 711.096113][ T9768] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.142270][ T31] Call Trace: [ 711.155648][ T31] [ 711.158674][ T31] __schedule+0x17fb/0x4be0 [ 711.163254][ T31] ? __pfx___schedule+0x10/0x10 [ 711.168525][ T9768] usb 10-1: config 0 has no interface number 0 [ 711.174761][ T9768] usb 10-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 711.205496][ T31] ? __pfx_lock_release+0x10/0x10 [ 711.225664][ T31] ? schedule+0x90/0x320 [ 711.229969][ T31] schedule+0x14b/0x320 [ 711.234170][ T31] schedule_timeout+0xb0/0x290 [ 711.239132][ T9768] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 711.255180][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 711.260798][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 711.261335][ T9768] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 711.267151][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.282213][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 711.287597][ T31] __wait_for_common+0x3ed/0x6e0 [ 711.287611][ T9768] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.292555][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 711.311407][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 711.315574][ T9768] usb 10-1: config 0 interface 52 has no altsetting 0 [ 711.316899][ T31] ? _raw_spin_lock_irq+0xdf/0x120 [ 711.323633][ T9768] usb 10-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 711.328928][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 711.328965][ T31] wait_for_completion_state+0x1c/0x40 [ 711.328998][ T31] do_coredump+0xa5d/0x2ec0 [ 711.329043][ T31] ? stack_trace_save+0x118/0x1d0 [ 711.329095][ T31] ? __pfx_do_coredump+0x10/0x10 [ 711.329168][ T31] ? proc_coredump_connector+0x1e8/0x750 [ 711.371856][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 711.372201][ T9768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.377886][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 711.377936][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.377968][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 711.378006][ T31] get_signal+0x140b/0x1750 [ 711.378051][ T31] ? __pfx_get_signal+0x10/0x10 [ 711.378104][ T31] arch_do_signal_or_restart+0x96/0x860 [ 711.378140][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 711.394082][ T9768] usb 10-1: config 0 descriptor?? [ 711.398008][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 711.398059][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 711.441685][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 711.447338][ T31] do_syscall_64+0x100/0x230 [ 711.453764][ T31] ? clear_bhb_loop+0x35/0x90 [ 711.458907][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.464855][ T31] RIP: 0033:0x7fdf476403c0 [ 711.469900][ T31] RSP: 002b:00007fdf48602a78 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 711.478540][ T31] RAX: 0000000000000000 RBX: 00007fdf47936080 RCX: 00007fdf4777e819 [ 711.486913][ T31] RDX: 00007fdf48602a80 RSI: 00007fdf48602bb0 RDI: 000000000000000b [ 711.494915][ T31] RBP: 00007fdf477f175e R08: 0000000000000000 R09: 0000000000000000 [ 711.503031][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.511089][ T31] R13: 0000000000000000 R14: 00007fdf47936080 R15: 00007fffc61792e8 [ 711.519551][ T31] [ 711.522777][ T31] [ 711.522777][ T31] Showing all locks held in the system: [ 711.535866][ T31] 2 locks held by kworker/u8:0/11: [ 711.541084][ T31] 1 lock held by khungtaskd/31: [ 711.566042][ T31] #0: ffffffff8e93c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 711.577190][ T31] 2 locks held by kworker/u8:7/3542: [ 711.582577][ T31] 2 locks held by getty/5600: [ 711.587437][ T31] #0: ffff8880356220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 711.705792][ T31] #1: ffffc900032f32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 711.755853][ T31] 3 locks held by kworker/0:6/5950: [ 711.762329][ T31] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 711.835568][ T31] #1: ffffc90004987d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 711.895554][ T31] #2: ffffffff8e941ab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 711.955556][ T31] 3 locks held by kworker/u8:11/7630: [ 711.961043][ T31] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 712.035559][ T31] #1: ffffc9000eaf7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 712.056658][ T31] #2: ffffffff8fcbb2d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xcc0 [ 712.067905][ T31] 1 lock held by syz-executor/9554: [ 712.073208][ T31] #0: ffffffff8fcc7e08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 712.082382][ T31] 5 locks held by kworker/1:1/9768: [ 712.087814][ T31] #0: ffff888144af9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 712.099288][ T31] #1: ffffc900037ffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 712.111430][ T31] #2: ffff888029357190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 712.137994][ T31] #3: ffff88805fdfa190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 712.149679][ T31] #4: ffff888145725368 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x4fb/0x1fb0 [ 712.160656][ T31] 1 lock held by syz-executor/9814: [ 712.165933][ T31] #0: ffffffff8fcc7e08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 712.176831][ T31] 3 locks held by syz-executor/12272: [ 712.182252][ T31] #0: ffff888050d5cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 712.193754][ T31] #1: ffff888050d5c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 712.204752][ T31] #2: ffffffff8fe35f68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 712.215763][ T31] 3 locks held by syz.9.2242/14902: [ 712.221095][ T31] #0: ffff888066448d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 712.231142][ T31] #1: ffff888066448078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 712.241237][ T31] #2: ffffffff8fe35f68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 712.251439][ T31] 1 lock held by syz.3.2248/14913: [ 712.259224][ T31] #0: ffffffff8e941ab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 712.305749][ T31] [ 712.320706][ T31] ============================================= [ 712.320706][ T31] [ 712.338638][ T31] NMI backtrace for cpu 0 [ 712.343042][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 712.353236][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 712.363315][ T31] Call Trace: [ 712.366602][ T31] [ 712.369540][ T31] dump_stack_lvl+0x241/0x360 [ 712.374267][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.379492][ T31] ? __pfx__printk+0x10/0x10 [ 712.384142][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 712.389101][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 712.394584][ T31] ? _printk+0xd5/0x120 [ 712.398831][ T31] ? __pfx__printk+0x10/0x10 [ 712.403451][ T31] ? __wake_up_klogd+0xcc/0x110 [ 712.408335][ T31] ? __pfx__printk+0x10/0x10 [ 712.412932][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 712.417960][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 712.423958][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 712.429955][ T31] watchdog+0xff4/0x1040 [ 712.434208][ T31] ? watchdog+0x1ea/0x1040 [ 712.438632][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.443314][ T31] kthread+0x2f0/0x390 [ 712.447398][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.452084][ T31] ? __pfx_kthread+0x10/0x10 [ 712.456697][ T31] ret_from_fork+0x4b/0x80 [ 712.461114][ T31] ? __pfx_kthread+0x10/0x10 [ 712.465710][ T31] ret_from_fork_asm+0x1a/0x30 [ 712.470500][ T31] [ 712.475392][ T31] Sending NMI from CPU 0 to CPUs 1: [ 712.481543][ C1] NMI backtrace for cpu 1 [ 712.481557][ C1] CPU: 1 UID: 0 PID: 6959 Comm: kworker/u8:10 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 712.481576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 712.481588][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 712.481615][ C1] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 712.481636][ C1] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 8b 39 ab 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 48 7a 8c 00 48 be 00 00 00 00 00 fc [ 712.481651][ C1] RSP: 0018:ffffc900047e74b0 EFLAGS: 00000802 [ 712.481665][ C1] RAX: 1ffffffff1d278a4 RBX: 0000000000000002 RCX: 0000000000000002 [ 712.481677][ C1] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffffffff8e93c520 [ 712.481689][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.481699][ C1] R10: dffffc0000000000 R11: fffffbfff203846f R12: ffff88802f5c5a00 [ 712.481712][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff8e93c520 [ 712.481724][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 712.481738][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.481750][ C1] CR2: 00007f34b6867d60 CR3: 000000000e738000 CR4: 00000000003526f0 [ 712.481765][ C1] DR0: fffffffffffffffd DR1: 0000000000000000 DR2: fffffffffffffffe [ 712.481778][ C1] DR3: 000000007fffffff DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 712.481789][ C1] Call Trace: [ 712.481796][ C1] [ 712.481802][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 712.481824][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 712.481842][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 712.481869][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 712.481893][ C1] ? nmi_handle+0x14f/0x5a0 [ 712.481911][ C1] ? nmi_handle+0x2a/0x5a0 [ 712.481929][ C1] ? __lock_acquire+0x6a/0x2100 [ 712.481946][ C1] ? default_do_nmi+0x63/0x160 [ 712.481967][ C1] ? exc_nmi+0x123/0x1f0 [ 712.481987][ C1] ? end_repeat_nmi+0xf/0x53 [ 712.482008][ C1] ? __lock_acquire+0x6a/0x2100 [ 712.482032][ C1] ? __lock_acquire+0x6a/0x2100 [ 712.482050][ C1] ? __lock_acquire+0x6a/0x2100 [ 712.482067][ C1] [ 712.482073][ C1] [ 712.482078][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 712.482103][ C1] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 712.482124][ C1] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 712.482146][ C1] lock_acquire+0x1ed/0x550 [ 712.482163][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 712.482183][ C1] ? __lock_acquire+0x1397/0x2100 [ 712.482201][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 712.482220][ C1] ? rhltable_lookup+0x737/0x810 [ 712.482245][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 712.482264][ C1] ieee80211_bss_info_update+0x3f6/0xbc0 [ 712.482283][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 712.482304][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 712.482323][ C1] ? __pfx_lock_release+0x10/0x10 [ 712.482346][ C1] ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 [ 712.482371][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 712.482390][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 712.482413][ C1] ? mark_lock+0x9a/0x360 [ 712.482433][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 712.482451][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 712.482469][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 712.482499][ C1] ieee80211_iface_work+0x8a5/0xf20 [ 712.482522][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 712.482539][ C1] ? process_scheduled_works+0x976/0x1850 [ 712.482564][ C1] process_scheduled_works+0xa63/0x1850 [ 712.482599][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 712.482626][ C1] ? assign_work+0x364/0x3d0 [ 712.482652][ C1] worker_thread+0x870/0xd30 [ 712.482670][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 712.482695][ C1] ? __kthread_parkme+0x169/0x1d0 [ 712.482712][ C1] ? __pfx_worker_thread+0x10/0x10 [ 712.482727][ C1] kthread+0x2f0/0x390 [ 712.482745][ C1] ? __pfx_worker_thread+0x10/0x10 [ 712.482760][ C1] ? __pfx_kthread+0x10/0x10 [ 712.482779][ C1] ret_from_fork+0x4b/0x80 [ 712.482793][ C1] ? __pfx_kthread+0x10/0x10 [ 712.482811][ C1] ret_from_fork_asm+0x1a/0x30 [ 712.482839][ C1] [ 712.935838][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 712.942744][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 712.952927][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 712.963017][ T31] Call Trace: [ 712.966328][ T31] [ 712.969299][ T31] dump_stack_lvl+0x241/0x360 [ 712.974012][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.979253][ T31] ? __pfx__printk+0x10/0x10 [ 712.983879][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 712.989903][ T31] ? vscnprintf+0x5d/0x90 [ 712.994266][ T31] panic+0x349/0x880 [ 712.998207][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 713.004400][ T31] ? __pfx_panic+0x10/0x10 [ 713.008861][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 713.014275][ T31] ? __irq_work_queue_local+0x137/0x410 [ 713.019855][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 713.025259][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 713.031447][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 713.037638][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 713.043837][ T31] watchdog+0x1033/0x1040 [ 713.048208][ T31] ? watchdog+0x1ea/0x1040 [ 713.052659][ T31] ? __pfx_watchdog+0x10/0x10 [ 713.057364][ T31] kthread+0x2f0/0x390 [ 713.061466][ T31] ? __pfx_watchdog+0x10/0x10 [ 713.066178][ T31] ? __pfx_kthread+0x10/0x10 [ 713.070803][ T31] ret_from_fork+0x4b/0x80 [ 713.075251][ T31] ? __pfx_kthread+0x10/0x10 [ 713.079877][ T31] ret_from_fork_asm+0x1a/0x30 [ 713.084684][ T31] [ 713.088074][ T31] Kernel Offset: disabled [ 713.092441][ T31] Rebooting in 86400 seconds..