last executing test programs: 2m25.268114169s ago: executing program 32 (id=1285): openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x4) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0xba, 0x75, 0x99, 0x8, 0xa257, 0x2013, 0xe87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0xb0, 0x80, [{{0x9, 0x4, 0xff, 0x3, 0x0, 0xb9, 0x5c, 0xcf, 0x4}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2m20.039326745s ago: executing program 3 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000300)="d7a08b", 0x3}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000140800024000000012040004800900010073797a30"], 0x104}}, 0x806) 2m19.264502366s ago: executing program 3 (id=1347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 2m18.641145103s ago: executing program 3 (id=1349): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20008030) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x4040001}, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/75, 0x4b}], 0x1, &(0x7f0000000440)=""/148, 0x94}, 0x2}, {{&(0x7f0000000500)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000b00)=""/9, 0x9}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000a00)=""/76, 0x4c}], 0x7, &(0x7f00000034c0)=""/4096, 0x1000}, 0xe74}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001b00)=""/107, 0x6b}, {&(0x7f0000001b80)=""/225, 0xe1}, {&(0x7f0000001c80)=""/194, 0xc2}, {&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001e40)=""/233, 0xe9}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/158, 0x9e}, {&(0x7f0000003000)=""/110, 0x6e}, {&(0x7f0000003080)=""/33, 0x21}], 0x9, &(0x7f0000003180)=""/26, 0x1a}, 0x9}, {{&(0x7f00000031c0)=@isdn, 0x80, &(0x7f00000032c0), 0x0, &(0x7f0000003300)=""/148, 0x94}, 0x9}], 0x4, 0x21, 0x0) epoll_create1(0x80000) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xfffffef1) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000d03551e70010000000028000001294eeb8f48aa08144a66b91e6451fb4f48d2cd32da1f629083d0c01d96e3400000000000000001034c01a3b6ece0153d6b210510dc553cf326c67b0b5b6b95b016ba542cf81a49d3a0bf9f98ce1cd3f94f4197cb43482a25213e1a39bb902256dc4ba4d5a7face2eb0980122702a6a86e94564881", 0xa1}], 0x1}, 0x0) 2m15.611713245s ago: executing program 2 (id=1355): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet_opts(r0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000040)) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000dc0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x4, &(0x7f0000000600)=ANY=[@ANYBLOB='y'], 0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x220, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000000), {[{{@arp={@multicast1, @private=0xa010100, 0x0, 0xff000000, 0x1, 0x2, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="8ab27119a4f4", {[0xff, 0xff, 0x0, 0xff]}}, 0x60, 0xfffc, 0x7, 0xfff, 0xfa1a, 0x6, 'team_slave_1\x00', 'vcan0\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast2, 0x1, 0x1}}}, {{@arp={@rand_addr=0x64010100, @private=0xa010100, 0xffffffff, 0x0, 0x2, 0x9, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1000, 0x0, 0x4, 0x5, 0x2, 0x0, 'erspan0\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0xa6}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @private=0xa010102, 0x1}}}, {{@arp={@local, @local, 0x0, 0xff000000, 0x7, 0x1, {@mac, {[0x0, 0x651f4953b6b684b3, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x14c3f7898c7ca44, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x80ee, 0x5, 0x4, 0x40, 0x4, 'sit0\x00', 'ip6erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x77, {0x8faf}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xf9, r0}) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 2m15.251470801s ago: executing program 3 (id=1357): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f001"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 2m15.229937504s ago: executing program 4 (id=1358): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0xffff235e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) (async) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0xffff235e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) (async) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) chdir(&(0x7f0000000300)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1]) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1]) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2m14.433845118s ago: executing program 4 (id=1360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1023, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0xe, {0x9, 0x21, 0x5, 0x9a, 0x1, {0x22, 0xf29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xb8, 0x7}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0xc5, 0x5, 0x7, 0x20, 0x4e}, 0xdf, &(0x7f0000000200)={0x5, 0xf, 0xdf, 0x3, [@generic={0xd4, 0x10, 0xb, "708ad4bde641b771633f969b5a57afb5390a4a56f8436e2a02b11c533af31cff161aa6778a6a02f4edbaa9dc7fbb53c0afbcc5a8065b7628115197980262898dc2c034e22bc635de01d329882b70b6038ddbbde2e3cd7a76453d3a819f67aabe248bbfe6f95d1fd5e1a6dec65dde7844c95d61829f6095afb3dff814f0faed928e2f22f61196edd2b8a9aaee54e30dc16d297a9af929df2820ce50ba97aeacbac41931874cec8de9dd1a5a79736ad6fc77bd8446c86ea7d643eacc7eb8801b62d730b5afe49a4fcfd305069d07ea0a8d7f"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0xbf, &(0x7f0000000380)=@string={0xbf, 0x3, "e8e8770ffd0ea3289b75da22dbf03305e3edb331ec74ba4051af8953f3db1c938ff8a1bcc1f327f798c8a8de0c46aa8a2a19549cf0e04ae2c55013e26b05b30a5f69372ccb1122a23413f51cd3b7cc136d70dcf340dea124418d09a6b18b5db3e0d2536f6100c2984d89e2ff92e061cc2e50f77c0a8bec8627f17ba56a4d1f2ce78d6088b59b8f2f813081e1123a82194e7a67a1d069263d323d180d60803db8d85aee13ba7ff999761c37208c8710ba1e4ab9a956a6f5d095182898a9"}}, {0x37, &(0x7f0000000440)=@string={0x37, 0x3, "76b628d9b6746dbd7a8b509e19cc25e7fec854d403ed5e2616d0fec4b6d4b5d92c2fe1e2324d408cfc69ad829a5b36f0548c347dab"}}, {0x30, &(0x7f0000000480)=@string={0x30, 0x3, "25a20127feb32f9532b03f63268afccde5322851301a023386184e91b2038d0c25c5da249356d75a6aec037d06fd"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x447}}, {0xbc, &(0x7f0000000580)=@string={0xbc, 0x3, "6843f7491b38586bbeefb3c47bd293e81d898eacde0106fcb1153edbdf5202603c68006efdf8be83b7ac9954457f8b52b4279fd56955cede14ebb180c8a989ec79c09183b12dec76371f18fb765be4d7bc5cdcb15fc283e8b8376ad59a7ad828c5503c3c3336a1b45abdd07f41e3aac8830f556ef861b4d9a9667b2fb55f1f239396b5986252b64c1b32e468b5057743efce87116bc7a41be76d2c6691324fa14706c6e45606a686657213f88fac441f74f0d4a55cb27b370ba7"}}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m11.860610398s ago: executing program 2 (id=1362): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0xd0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @private2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8080}, 0x4040004) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x5a, 0x9, 0x9, 0xd, 0x7ff, 0x81}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) read$hiddev(r3, &(0x7f0000000240)=""/240, 0xf0) 2m11.103369294s ago: executing program 2 (id=1364): open(0x0, 0xe5000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x32a967866c8c9665}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) landlock_create_ruleset(&(0x7f0000000140)={0x857a121816ae4ee1, 0x3, 0x1}, 0x18, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2m10.837485371s ago: executing program 1 (id=1367): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080), &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0xd4, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x126850ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69ccd56d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x729ff5a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf832}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2802}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e428027}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc1d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0xd4}}, 0x800) (fail_nth: 3) 2m9.710087704s ago: executing program 3 (id=1368): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "4d68808557fd143d", "5ad44d187d6e63965de5c222a3d4968487db7604bdcf455cca0442b32a909c72", "1cffccaa", "944633cff4666d16"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f0000000a80)={'#! ', './file0', [{0x20, '{]]^.\':-#$\xcc..+\'}.,$'}, {0x20, '::\\'}, {0x20, '.&@&'}], 0xa, "a60286bae5270acb4c503a6cd765400aa5684bfd77248b5519484297102580b6fc8fd2a733e36eac20f37787f8573c"}, 0x57) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0xc70, 0xf0b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0xf8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x2a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x5, 0x1}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x10, 0x1, 0xfd, 0x8, 0x20, 0xfe}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = syz_usb_connect$cdc_ecm(0x6, 0x16f, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15d, 0x1, 0x1, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "f0826d"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x80, 0x0, 0x4c}, [@acm={0x4, 0x24, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0x4}, @mdlm_detail={0xff, 0x24, 0x13, 0x4, "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"}, @ncm={0x6, 0x24, 0x1a, 0x696, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x74, 0x1, 0x6, 0x10, 0x7}, 0x2d, &(0x7f0000000240)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x31, "dcad0ae67d8a1fb735fbfb0c50238bf1"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "56e9bfb167ce151573377f4d5d94b0bc"}]}, 0x4, [{0x45, &(0x7f0000000500)=@string={0x45, 0x3, "3154e8abcb12dac0f1a656f49ff626fc356f390ed16679409a91653040972c353d46bb8a40a38afdc5200ed85935acdecd6223b91b253c63bb2ee86ace6eff10e449e8"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f00000005c0)=@string={0x4, 0x3, "1e75"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x43f}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000800)={0x14, &(0x7f00000006c0)={0x40, 0x24, 0xc3, {0xc3, 0x21, "b0f7f5d59c5eeb46227335e942570c4c3dcd587023415f6c96df117a19344469f3a1205788f85a5ad226b61ba403cd1b54ac12f8036516e59b31ef6a075ab1571d943c0bfdd5087af5f4e71104a371d78fc34ea86148333b90902e833a42c297e75a7ca70c60d3ba781529fb1821499b21b9c40064da932077da4baf45b71d41d70545a623c7c354935163c4031b7adb77ce1ae670deae18f3ed3410f1620a36ead466f0b8433452a83701eb5432be9129b477a0c976306d6f0fdd0f233f9c1d8d"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000840)={0x40, 0x9, 0x9c, "991ad6e904791e48728259dd22900f0ada22aacf3967f911b499156b8a51f111381f9cf0cbc7b8e1548d954cc7b02cf55adaef51f43fe2e0c387bd00359336558bd757d166e3fe2a1033b447e7e20221858c7375f50f3c5d7892a77ed625950badf8c063babda8e2b59850bda2cdff4725124b0d98444d728984a3887a3de4295d9f83e83f837ce3aa3f490a7ab750ce4684d576a5e86ec698aa6b94"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x53}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00f5dd9b8af4f9e33b61"}}, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8918, &(0x7f0000000000)) 2m9.635572517s ago: executing program 1 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x5}, {0x7}, {0x6, 0x1}, {0x6, 0x1a}, {0x4, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x4, 0x3}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x9}, {0x3, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x6, 0x1}, {0x1}, {0x5, 0xa}, {0x4, 0x2}, {0x5, 0x7}, {0x0, 0x4}, {}, {0x3, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e0000000000001090224000300000000090400ff0045f7270009040000000c15c1000904"], 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110025bd7000fbdbdf250f00000005fcaf8b9ae0002a000100000005002d0000000000080032000000190005002900010000", @ANYRES32=r7, @ANYBLOB="05002f0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf2501000014001800008000756470"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m9.590402935s ago: executing program 4 (id=1370): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 2m8.905496237s ago: executing program 4 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x2, 0x0, 0xffbff038}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x11) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x10000006, 0x0, {[0x7fffffff]}}, 0x0, 0x8, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x20}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r4, 0xb7139000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x20010, r4, 0x85eef000) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat(0xffffffffffffffff, 0x0, 0x143042, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x2d25550636354a2e) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x5) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0xfffffdac, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb6f46e86ab0a1d9}, 0x48096) 2m7.719035415s ago: executing program 2 (id=1372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) syz_emit_ethernet(0x104e, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) 2m7.702472278s ago: executing program 4 (id=1373): set_mempolicy(0x1, &(0x7f0000000000)=0x5, 0x4) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) (async, rerun: 64) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="205ca82128039cc258b534193c1d46668a150bd22e98e9d18a878ac77793100d17b1f64d27f53d50f9b706d26aedb677d274d06ef7f3"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async, rerun: 32) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) (rerun: 32) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) bind$llc(r6, 0x0, 0x0) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000001cc0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)="5d43f9415473f2e159f57ade608b259ef10d3e5173ed817660e4a0176265e68635290b150a0f8772da6971647fb6a512e7ebdecc931dc4ba1ccfb6c8e116073d1119fd8fe5ae0aafdb03c18084b21bff61e96832ed75c6528334c2d5c43756d2f757a775", 0x64}, {&(0x7f00000000c0)="e164dbf73602", 0x6}, {&(0x7f00000004c0)="7c2b13256b493f1e05c7d2f836fba80d51eb3052635743d0380dc9f684ef6b9ca9d17d2914be4d7bccf8b9c482ea95b79b1832f9e8b309eff02a85c6ac2519723ec835952e30c058186c5bf70d1a2013212ac9a34359a30f88cfffbf6a7cc277edf212076d2fe22cfd746539fad01cfa88c21e7d5b59de9328eb74148536e607774d7b092aca2a858de81c836e757ad7e3ad8fbf6d8dcda80c5a3a0d37dd526dc5bda7ddb3b99e1de7ffd5b50d92c2c782c6df59cc404f7b985d01ae7232f7605626f733ee58d1c3847b445606913431bc3ab0350f5853e7be5b", 0xda}, {&(0x7f00000005c0)="f99a4330718cd7100166b0facac072b161b9dbda86db909ae0973ff53dbd566210868672a6a129e771a199d8e8936b02e8f73f32a126427946710a2bd8b247780b606acfa0125fffa4ea52c03c92fba51b8fd41845a349c3f386c1ae534154f45642907854fdbb04ee6ed8db63fd56f389a71544c59d8c033adc35fca9354d2ef017af99a9b3de063c687afb59aea626539a8f0c6be334fa3f0f29fb", 0x9c}, {&(0x7f0000000680)="e116a869ac432a069c62694a25dd865b5e1eff86fe23313baea80e240248782c7274bde6f8e124cce5639b279e676838361181327b7f0aad24ee246b5f21bb1a4b02fd8651da00e94f8553df49b7903dc1c268c833a7e9518b67abc453081c5980126bea5efbbe840593484f7ba647cda30a5df78729b2e04a02e2c0a674a820fed6ffabe818d84f7d1c57f724955420bb4896bbaf7ebbab386fe47b02494d1321a7fade2a106dba603e018ddae1a0945e", 0xb1}], 0x5, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x1c, 0x1, 0x1, [r1, r3, r3]}}, @rights={{0x24, 0x1, 0x1, [r4, r6, r9, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r2, r3, r3, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x30, 0x1, 0x1, [r8, r4, r6, r9, 0xffffffffffffffff, r4, r6, r9]}}], 0x120, 0x4040011}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b00)="845766ac65d356255d29db5b7bafc889327d352cf1324e33ab7fac563ff52db5668f8db2ee44c4f1414e1c3a93759f8ba64a9cbe414c44bd4d9fe8812c34e5f41bfb4a97181ce0337e281c2c31e28a841d", 0x51}], 0x1, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="14f42301c5f64e2ab94ab61bdaeaf3ce7b8fd112d7e55b31ac4a48570960f82362cde1a0d03b1f3b4de1ab5e30cf90d980f4599be30db7d536e033e3e4facb27ee532b13c440106f290bfc9a84e7e104d046f10258df4447bb45ee73b9146cc6577d538dcf4314e38f4c43693b7753ead1c459", 0x73}, {&(0x7f0000000e40)="4d36f3ca6f4d6c625e05170b6a4051bfd0ede1fa887fa7764b99c1108e191b985930270ff4f033b032782910cac4844f5883d1bb3bff9850295647c72f94503d5cf0fcf78f7c42172bf75c844e82397a869295a70f0d4226", 0x58}, {&(0x7f0000000ec0)="68bc374f88de925c837c95be151e970d72bc0620015cc481d50742d05a6c8efc17d803cd047305065dbcb251d16bf570b7a08e21a086e29dffe6a6519de88077dc0d8d1b2c56b0034677f569ff1d54646cc3ae13f5320da6f2588a4d38c7373a01856e84210d5c055d94eff11287cead08830d9e35910f3ce24507390a57f5024acedbdb4e738ea555fc2ee9b79260b12686e72f0e45d4d5", 0x98}, {&(0x7f0000000c40)="38ab55bae29111c82c5aea5e7f4d8d8fadf9c4f2d353f08e975e7449808ae38c2e9fe08621433d4ccad6dceade2bbc3615a696", 0x33}, {&(0x7f0000000f80)="d7ebfbd0c2e6cc593b727dac767cd1432a1c9ccb555fe1f991978457ae9178afd1240d0f34", 0x25}], 0x5, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c}}], 0x90, 0x54}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001200)="fd36cc0392d3d4977e419054020000007e09dc4f9692", 0x16}, {&(0x7f000001b000)="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", 0x1000}, {&(0x7f0000001240)="bb", 0x1}, {&(0x7f0000001280)="31caa0ac04e15d1c8f01e796a3f928a1bcba1a6b0f873360e6850730bc1d57e36c379893dc443d4595eeb148264a72ea6c62a87584fbf2c67a251967cd552c08abc20428382e8e0e5db0bb08a9b99958490fe519b0e96e899c50317d4a3b69b2dd54d02cab2347fa184f4e1594c4", 0x6e}, {&(0x7f0000001300)="2505796e6677dba9462f36880b2df7552aa79bf413c6f2be14b28cde1540bcfbaa4f749675760b10522070c1fc45559572a2006d6b95006c1e5a56bdc123196dfe2012b7346102186f9aaee2176f7cbddeae6da128c054da2e", 0x59}, {&(0x7f0000001400)="df61db5b8c187b0c358321b5e66a4368cfe8372818b65efade136619327adcf4db6bae4d29abd52084d7a509e34aa1d36761f915004b68d10f99b31d92f1780920518876e4be7536e3457695ff9d421086fc17175ed7d5b9f354bc71975f3f53c3bb4388fccae3cb4c0bfec2b12fd25fa5cd03fdbbc6db5477fef199a31cbc68a7faeef559ef561e50fd5e4c86b88634c397bdafc032cc0ad9", 0x99}, {&(0x7f0000001380)="60e68daccdcdb51a427429743ed3589b2c29fb73e8711374cf7743795f5b04c5d670c4217f330a413e05d00d7aca", 0x2e}, {&(0x7f00000014c0)="4844148e5855c40ffb118b1487276cca0de646d793cad6f7a57567ff5575fef9504b5dad86edcddc89b501769d1fe1a71fd7cfa6da7aa097d2880fea7a728831f400d9ff9211067d59a20cb2ce85a7432fd8bb9a29550eaeb2ec5971a775d9326a7c4a740e218074a71c9f0de10318046a5d00728d479f66ac0ccd1dec7fba5130ad27855677b9d0fdb097be6afad5eed6d5437d6088a4dad4ea9f78d8697577b73b53bd30b0a368271d240675ddcac58ec65f01ebfe1bd4017262b8f717a87fa5d86f18152cb99606f4387c6c8d5f33", 0xd0}], 0x8, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x60, 0x24048400}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001740)="47a1fcac7fc11566622dc1fa00fe663cd281fc6b15aa99f7aff8c1a08c11780b3cd77ef2018cfc752de27b747bb24fa0e534a8fbab0ec376e46766473a36", 0x3e}, {&(0x7f0000001780)="9d7ab0471a7620d5f514e9cf993cf899733d5ebf79479ba6e5143c7e37bc9d858ffcfad4aed70a0db5946b9762977633858ad9cd845f2bf425ef64a4b392d0988f6c07959bee4982cc816cabaf8916d057767d181dd6d5ff271608df6faa1741426544a60acf80d3616e6f809cb7677d059faa29a9e5affac768cbc5b66d261620ad64700de47fe6d5c45b5a58a95687d6ed1ff2a1938b83f34fea8fe3f9d5e238", 0xa1}], 0x2, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000001880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001900)="91417028b724066c9e2025e0ecf1816bdd5583ffc5bb089966ab720af06d7c2566da471f344f385a5c0f29a3fa4178c8f063d1b9aa42041856863a3f5d0d117023c6", 0x42}, {&(0x7f0000001980)="9716eba35dd4bba813587a0ca83d7fd6e11204a49bae5b526a55063f1e1f0bbefa40f6143db0d601fb895a08cb33896a19e8e3628ed9ca71bf013e031602d6f8d729505689e33e4a13d54ee3103e90679f5fe2c8f485553d7d4ca8f75b14ef4daff4d426d6e916ddca8d632be3c07d814911d42ac5636178a3c422c7f03dd1aa51d9ea6cdabebfc51a1c29be1cc98f400ba46e2caea1710028338503803b6e819180", 0xa2}, {&(0x7f000001c000)="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", 0x1000}, {&(0x7f000001d000)="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", 0x1000}, {&(0x7f0000001a40)="8f76c7dbae42353cb508c0eb12f2baa09de6ba8f3981184dabb8dc36b76d389409b6bc88da566719b08e59f24b780091201999788ef582bcb647da08d4bc590987150d593af737167d385e227123caa52bac0b448d1d50e59cdb15d74c5ad534431f3b5139aacb4b6424fda026511b19992389a1455a88eea18148b1b8b91a515107421b48d8b623c13a59008f9c150d6488549db0d8f4f8f10406fa78e1044e6500f718e6c6e828aa779bc1bc2868d687bd035f4f19e89e50e3518145585faa01f754b26beb67e35aadffb06a283849e011913a3628bb4a238ea418aca3c4cca6cc75a54c6b08e2bb", 0xe9}, {&(0x7f0000001b40)="6a007c66c0a127c644918fa5effc9aa3db99479d65c5d87c945b0811540c618e11ba5ab3fb35195ff43941d5eeed7215ebf7690c3721f4c3010e90ce9a4d389cc3ff8fcf4e26afd78b377b7b01df6d", 0x4f}, {&(0x7f000001e000)="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", 0x1000}, {&(0x7f0000001bc0)="1f292237afd71205c75d1ec70c240efee1c8f92cc265538a36ba7ab62804915a21a85f22937ebdd1b6d8f2679e8874408768d39fc86991014b6a12af045f3c3640ae1646a5ea40e38167892112ee9c41bec12abf9c8816a0b180a18690e1b835de5126533e", 0x65}], 0x8, 0x0, 0x0, 0x40}}], 0x6, 0x0) (async, rerun: 32) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) 2m6.380146131s ago: executing program 4 (id=1374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0xda) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1", 0x1c}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5ffffffffffffff02000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) set_mempolicy(0x4000, 0x0, 0x400000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x15, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) io_setup(0x4, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0xb2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 2m6.338129691s ago: executing program 2 (id=1375): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m6.230485305s ago: executing program 3 (id=1376): syz_usb_connect(0x0, 0x44, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd8, 0x3d, 0x3c, 0x8, 0x1bc7, 0x23, 0x9aea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x2, 0xc, 0xa0, 0xe, [{{0x9, 0x4, 0x45, 0x40, 0x1, 0x14, 0x44, 0x52, 0x7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x90, 0x5, 0xb69, 0x81}}], [{{0x9, 0x5, 0xd, 0xc, 0x20, 0x2, 0xda, 0x3}}]}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000f80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0xc0, "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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000001100)='.request_key_auth\x00', &(0x7f0000001140)='\x00') r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r6, 0x16) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000240)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41) r8 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m6.097352572s ago: executing program 2 (id=1377): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f00000010c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0xbb, 0x90, 0xdd, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, '&N4'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x0, 0x4, 0x1}, [@obex={0x5, 0x24, 0x15, 0x9}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x800, 0x5, 0x8, 0x8, 0xf}, @acm={0x4, 0x24, 0x2, 0x8}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x7, [0x4, 0xd0, 0x101]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x6e, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x0, 0x6e}}}}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x300, 0x6, 0x10, 0x3, 0x10, 0x1}, 0x8, &(0x7f00000012c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000001500)=@lang_id={0x4}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0xc1a}}, {0x63, &(0x7f00000015c0)=@string={0x63, 0x3, "1334acc5236586071bb81ece2c1f3afafe790ec8a1dd5cabd512b7989aea6b32b2d7a16937c7106c3cc21932a6d97017703b8f7f9e7ecdb966c92b22efed6a977935294d37fd22bc8d9956ec1d132b6fc96481224acdb572124c0f98701c3cf9f7"}}, {0x18, &(0x7f0000001640)=@string={0x18, 0x3, "0f9df4e3ae5b03e91bc8783dd7a7d266aff5d325f765"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x820}}, {0x58, &(0x7f00000016c0)=@string={0x58, 0x3, "c4a7aff64baa17e68c43b5e49918729c491317e9f4e2e802047295ca96ee7473a388e554aa7ff9c3064b06b682357e911357eca9691b7c4a724b314466d7c43e44bf24000b5c1bb18e4ffd73ed2c1d0608b0416b5ebf"}}, {0xe8, &(0x7f0000001740)=@string={0xe8, 0x3, "06f05f4e1196b0b9715a0731cb35ca5d8c8acd62726133cac58e08ccacedee076bf2bbb83c4be1501ae8a5a2a49808ef3ca827f5ed643a52e1060103bb24732726213c125730ac989f51de492572a10f8656cde3a65695cc9c2ad492bdb5bf773caf831c08169dc895b1f3d52df90a15436fa8bce1fe4685dd3b64e1fa1982bbb623b655aa5a86c23f0872ac6678ef1979a958263640ecf4efad8b7a93bad8d38aeaca83a87808e0a91c22590b2baabe5d1fa5557de456b731ec94e5d791ae41b414fd8b0d38c57f313d55984baebf6b0c8c3210bacc716ac3e37435e2820cf69f536f42e8e2"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io(r4, &(0x7f0000002a80)={0x2c, &(0x7f0000001940)={0x20, 0x7, 0xf6, {0xf6, 0xb, "09009c9a3213efb09434aa57ba49b84ce9db6ab67f24c01065b143b3e8413951aac0fea72e53b647a37f3ec107eff758a8aabba4c2725334f3ffc5a7e83f1899472c908e46ce373b1f4dd357bd4fb5ea8c71957871258bdd514029ac0ef8b28c65cf7994d036b351fa3e91b02e5998a1b34a11c272d157a355810564cd8df8f383b02738bcb5b59cc51d4c38e36e151b294500625b4c2c80fa8f6e07fd612c6fa5ac3a9349ebfa265a0247f7d69a10e54d7bfa181555d754cfa2b4e27873be86ead1f5a5d9b17d797eae57067bf2438a6430bbcbfc650492e8f488db0f5ea692d039cc9ed46fdc2b17154f9220667417d549a1cc"}}, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c3f}}, &(0x7f0000001a80)={0x0, 0xf, 0x132, {0x5, 0xf, 0x132, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x9, 0x5, 0x7}, @generic={0x10, 0x10, 0x4, "f6c59a9f91aa54cef5324ad873"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2e854db6fe8dc91757e6b6c23cf305fc"}, @generic={0xf8, 0x10, 0xa, "017e3952bd80ffc3f16c8e451fe2ca17ff3a454b5300fe1bf94c90b9bc5745d38efcafa7234e5fdef2c8f3f6cae4d8344c5e409be610e9b11a0f2750253aa42835be2d5b6cb2d0f86f172e709f0f8d878de51347860f5b84fe9335cee93abfb3d89f810453b15bfd67d323d8351a468464f0f0dd20d544a6be2bc828e17ccbbcea21268a11a028bf3960d4901d303b3c88ce2200f4602a3954c94b03bd9ec90fbcbcddeea4e525e33c1d5062bf07bbb3dc881561cb711cbb2fba97f17843f62184291ac8b9d95410a5e9df702158e9c001614ed307656bd0b6edb1fc55f689414c096ba2729303ccedbdbec757a470d01ea7d934b8"}]}}, &(0x7f0000001bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x3, 0x8, "58a09466", "eeac3f38"}}, &(0x7f0000001c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x2, 0x0, 0x2e, 0x5, 0x8}}}, &(0x7f0000002f40)={0x84, &(0x7f0000002ac0)={0x0, 0x14, 0x94, "d9d0d5145736748e6c5051fd333356b59b8da7ef3de8834a6955c020ce692529402f2409f8e1b22753153b32b6c8b8a75b4fa83c106711992cf0701118885b9f8d35f13f7b227026b8bb3730dedef72c8fcd601e5b8b23e594621b87f4ca4b22d64a1c1809b5018d236c00e536128795a78ed2937e96a35cbacca8683af9ff3d40b8d02cc8d7204d17af1fcd87a19db45562e767"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x71}, &(0x7f0000002c00)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="f07f6fb1dc00ff78000000000000000000"], &(0x7f0000002c80)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000002cc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002d00)={0x40, 0xb, 0x2, "eedf"}, &(0x7f0000002d40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002d80)={0x40, 0x13, 0x6, @random="77afc9ed2fcd"}, &(0x7f0000002dc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002e00)={0x40, 0x19, 0x2, "d4d1"}, &(0x7f0000002e40)={0x40, 0x1a, 0x2, 0xaab}, &(0x7f0000002e80)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000002ec0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000002f00)={0x40, 0x21, 0x1, 0x6}}) socket$kcm(0xa, 0x3, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2284, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m5.775310724s ago: executing program 1 (id=1378): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0xa, @pix_mp={0x7, 0x7, 0x10720a73, 0x3, 0x4, [{0xe, 0x8}, {0x200, 0x26}, {0x5, 0x3}, {0x9000, 0x61}, {0x101, 0xa}, {0xff, 0x73}, {0x5, 0x3}, {0x78e, 0x9}], 0x9, 0x1, 0x4, 0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) getuid() pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x714f, 0x11) 2m5.631039208s ago: executing program 5 (id=1332): socket(0x2a, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2080000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000e00000002000000060000000500", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffffff, 0x0, 0x89000) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) dup(r2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m4.563816567s ago: executing program 1 (id=1379): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000093f000/0x2000)=nil, 0x2000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f0000000100)=0x81, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 2m4.399259366s ago: executing program 5 (id=1380): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 2m3.450433632s ago: executing program 5 (id=1381): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x50004) 2m3.359340228s ago: executing program 1 (id=1382): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x7, [{0x10, 0x7, 0x4}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x61, 0x30, 0x0]}}, &(0x7f00000000c0)=""/55, 0x4d, 0x37, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2m3.283335772s ago: executing program 1 (id=1383): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280), 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000010c0)={'bridge0\x00', &(0x7f0000001080)=@ethtool_ringparam={0xd, 0x8001, 0x20040001, 0x0, 0x2, 0x8, 0x0, 0xfffffffe, 0x400}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020901020000000000000000020000090800464000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x40000003ff, 0x0, 0x0, 0xc, 0x0, 0xe, 0x1d6c, 0xffffffffffffffff, 0x0, 0x40100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x7, 0x7f, 0x3, 0x3, 0x3, 0x0, 0x4}) r3 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_ipv6host(r3, &(0x7f0000000180)=@l2={{0x1000000000000000, 0x3a, 0x4, 0x3a, 0x2, 0x3a, 0x800, 0x3a, 0xd, 0x3a, 0x5, 0x3a, 0xff, 0x3a, 0x3}, 0x2f, 0x5f, 0x20, ','}, 0xaf) 2m3.086291259s ago: executing program 5 (id=1384): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x2000, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x3) 1m38.140123406s ago: executing program 33 (id=1384): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x2000, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x3) 1m37.899255709s ago: executing program 34 (id=1383): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280), 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000010c0)={'bridge0\x00', &(0x7f0000001080)=@ethtool_ringparam={0xd, 0x8001, 0x20040001, 0x0, 0x2, 0x8, 0x0, 0xfffffffe, 0x400}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020901020000000000000000020000090800464000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x40000003ff, 0x0, 0x0, 0xc, 0x0, 0xe, 0x1d6c, 0xffffffffffffffff, 0x0, 0x40100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x7, 0x7f, 0x3, 0x3, 0x3, 0x0, 0x4}) r3 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_ipv6host(r3, &(0x7f0000000180)=@l2={{0x1000000000000000, 0x3a, 0x4, 0x3a, 0x2, 0x3a, 0x800, 0x3a, 0xd, 0x3a, 0x5, 0x3a, 0xff, 0x3a, 0x3}, 0x2f, 0x5f, 0x20, ','}, 0xaf) 1m37.767055791s ago: executing program 35 (id=1377): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f00000010c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0xbb, 0x90, 0xdd, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, '&N4'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x0, 0x4, 0x1}, [@obex={0x5, 0x24, 0x15, 0x9}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x800, 0x5, 0x8, 0x8, 0xf}, @acm={0x4, 0x24, 0x2, 0x8}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x7, [0x4, 0xd0, 0x101]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x6e, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x0, 0x6e}}}}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x300, 0x6, 0x10, 0x3, 0x10, 0x1}, 0x8, &(0x7f00000012c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000001500)=@lang_id={0x4}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0xc1a}}, {0x63, &(0x7f00000015c0)=@string={0x63, 0x3, "1334acc5236586071bb81ece2c1f3afafe790ec8a1dd5cabd512b7989aea6b32b2d7a16937c7106c3cc21932a6d97017703b8f7f9e7ecdb966c92b22efed6a977935294d37fd22bc8d9956ec1d132b6fc96481224acdb572124c0f98701c3cf9f7"}}, {0x18, &(0x7f0000001640)=@string={0x18, 0x3, "0f9df4e3ae5b03e91bc8783dd7a7d266aff5d325f765"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x820}}, {0x58, &(0x7f00000016c0)=@string={0x58, 0x3, "c4a7aff64baa17e68c43b5e49918729c491317e9f4e2e802047295ca96ee7473a388e554aa7ff9c3064b06b682357e911357eca9691b7c4a724b314466d7c43e44bf24000b5c1bb18e4ffd73ed2c1d0608b0416b5ebf"}}, {0xe8, &(0x7f0000001740)=@string={0xe8, 0x3, "06f05f4e1196b0b9715a0731cb35ca5d8c8acd62726133cac58e08ccacedee076bf2bbb83c4be1501ae8a5a2a49808ef3ca827f5ed643a52e1060103bb24732726213c125730ac989f51de492572a10f8656cde3a65695cc9c2ad492bdb5bf773caf831c08169dc895b1f3d52df90a15436fa8bce1fe4685dd3b64e1fa1982bbb623b655aa5a86c23f0872ac6678ef1979a958263640ecf4efad8b7a93bad8d38aeaca83a87808e0a91c22590b2baabe5d1fa5557de456b731ec94e5d791ae41b414fd8b0d38c57f313d55984baebf6b0c8c3210bacc716ac3e37435e2820cf69f536f42e8e2"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io(r4, &(0x7f0000002a80)={0x2c, &(0x7f0000001940)={0x20, 0x7, 0xf6, {0xf6, 0xb, "09009c9a3213efb09434aa57ba49b84ce9db6ab67f24c01065b143b3e8413951aac0fea72e53b647a37f3ec107eff758a8aabba4c2725334f3ffc5a7e83f1899472c908e46ce373b1f4dd357bd4fb5ea8c71957871258bdd514029ac0ef8b28c65cf7994d036b351fa3e91b02e5998a1b34a11c272d157a355810564cd8df8f383b02738bcb5b59cc51d4c38e36e151b294500625b4c2c80fa8f6e07fd612c6fa5ac3a9349ebfa265a0247f7d69a10e54d7bfa181555d754cfa2b4e27873be86ead1f5a5d9b17d797eae57067bf2438a6430bbcbfc650492e8f488db0f5ea692d039cc9ed46fdc2b17154f9220667417d549a1cc"}}, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c3f}}, &(0x7f0000001a80)={0x0, 0xf, 0x132, {0x5, 0xf, 0x132, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x9, 0x5, 0x7}, @generic={0x10, 0x10, 0x4, "f6c59a9f91aa54cef5324ad873"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2e854db6fe8dc91757e6b6c23cf305fc"}, @generic={0xf8, 0x10, 0xa, "017e3952bd80ffc3f16c8e451fe2ca17ff3a454b5300fe1bf94c90b9bc5745d38efcafa7234e5fdef2c8f3f6cae4d8344c5e409be610e9b11a0f2750253aa42835be2d5b6cb2d0f86f172e709f0f8d878de51347860f5b84fe9335cee93abfb3d89f810453b15bfd67d323d8351a468464f0f0dd20d544a6be2bc828e17ccbbcea21268a11a028bf3960d4901d303b3c88ce2200f4602a3954c94b03bd9ec90fbcbcddeea4e525e33c1d5062bf07bbb3dc881561cb711cbb2fba97f17843f62184291ac8b9d95410a5e9df702158e9c001614ed307656bd0b6edb1fc55f689414c096ba2729303ccedbdbec757a470d01ea7d934b8"}]}}, &(0x7f0000001bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x3, 0x8, "58a09466", "eeac3f38"}}, &(0x7f0000001c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x2, 0x0, 0x2e, 0x5, 0x8}}}, &(0x7f0000002f40)={0x84, &(0x7f0000002ac0)={0x0, 0x14, 0x94, "d9d0d5145736748e6c5051fd333356b59b8da7ef3de8834a6955c020ce692529402f2409f8e1b22753153b32b6c8b8a75b4fa83c106711992cf0701118885b9f8d35f13f7b227026b8bb3730dedef72c8fcd601e5b8b23e594621b87f4ca4b22d64a1c1809b5018d236c00e536128795a78ed2937e96a35cbacca8683af9ff3d40b8d02cc8d7204d17af1fcd87a19db45562e767"}, &(0x7f0000002b80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002bc0)={0x0, 0x8, 0x1, 0x71}, &(0x7f0000002c00)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="f07f6fb1dc00ff78000000000000000000"], &(0x7f0000002c80)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000002cc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002d00)={0x40, 0xb, 0x2, "eedf"}, &(0x7f0000002d40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002d80)={0x40, 0x13, 0x6, @random="77afc9ed2fcd"}, &(0x7f0000002dc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002e00)={0x40, 0x19, 0x2, "d4d1"}, &(0x7f0000002e40)={0x40, 0x1a, 0x2, 0xaab}, &(0x7f0000002e80)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000002ec0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000002f00)={0x40, 0x21, 0x1, 0x6}}) socket$kcm(0xa, 0x3, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2284, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m37.074411133s ago: executing program 36 (id=1376): syz_usb_connect(0x0, 0x44, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd8, 0x3d, 0x3c, 0x8, 0x1bc7, 0x23, 0x9aea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x2, 0xc, 0xa0, 0xe, [{{0x9, 0x4, 0x45, 0x40, 0x1, 0x14, 0x44, 0x52, 0x7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x90, 0x5, 0xb69, 0x81}}], [{{0x9, 0x5, 0xd, 0xc, 0x20, 0x2, 0xda, 0x3}}]}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000f80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0xc0, "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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000001100)='.request_key_auth\x00', &(0x7f0000001140)='\x00') r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r6, 0x16) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000240)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x41) r8 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m37.015704659s ago: executing program 37 (id=1374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0xda) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1", 0x1c}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5ffffffffffffff02000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) set_mempolicy(0x4000, 0x0, 0x400000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x15, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) io_setup(0x4, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0xb2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 15.783981407s ago: executing program 6 (id=1587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x4, 0x6}, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x503, 0x2, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) 12.877588749s ago: executing program 8 (id=1595): r0 = socket(0x2a, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2080000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000e00000002000000060000000500", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_pts(0xffffffffffffffff, 0xc8c41) r4 = dup(r3) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001012, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000240)=@raw=[@alu={0x7, 0x0, 0x7, 0xb, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x1, 0x9, 0x7, 0x50, 0xfffffffffffffff0}], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x66, &(0x7f0000000380)=""/102, 0x41100, 0x8, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r5, 0x1], &(0x7f0000000580)=[{0x4, 0x3, 0xf, 0xa}, {0x1, 0x5, 0x10}], 0x10, 0x100, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x1, @ANYRES8=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffffff, 0x0, 0x89000) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0xfffffffa, 0x3, 0x1, "eeb9917a24c20154574278e4a4a0a7e9188d7febae82dd7f229b100f53c119a6", 0x20363159}) dup(r7) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 12.275348309s ago: executing program 0 (id=1596): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0x1000000d}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 12.193460036s ago: executing program 6 (id=1597): socket(0x2a, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2080000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffffff, 0x0, 0x89000) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) dup(r1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.391668278s ago: executing program 0 (id=1600): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}}, 0x0) 9.032044446s ago: executing program 9 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x2f, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c0001"], 0x98}}, 0x0) 9.031713523s ago: executing program 0 (id=1602): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x1f000000, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) 8.543449086s ago: executing program 9 (id=1603): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet(0x2, 0x200000003, 0x86) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) timerfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6f88, 0x0, 0x9, 0x0, 0x1}, &(0x7f0000000180), 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x16, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x20008000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 7.779564448s ago: executing program 7 (id=1604): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(r6, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5d9c}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x14, 0x29, 0x37, {0x3a}}}], 0x14}, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700"}) getgroups(0x6, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) setregid(r8, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) 7.717581158s ago: executing program 0 (id=1605): syz_open_dev$vcsn(&(0x7f0000000080), 0x80a8, 0x2000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000005c0)={r2, 0x1, 0x6, @broadcast}, 0x10) socket$inet6(0xa, 0x80001, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x57, 0x3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003020000000203694afb8545cd839b722fbd1cbee77877aa8a4d9ddf7cc8e175170895942e70c8595570c41c6ba4482f6aa92885cbc305b850274f8f2b7b70e03c14b76b9cd1fbea204ad56d40946119a0b38782a16609632a9a931e34dc68910d71d7438e7daa309c4904353c7ed79348653222d8ade19fee288579f2f36549"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x250}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x9}) io_uring_enter(r8, 0x100847c0, 0x0, 0x1, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004000}, 0x4084041) unshare(0x2040400) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000ff7f00000400000021"], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r11, &(0x7f00000000c0), 0x20000000}, 0xc) r12 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}]}}) 6.071711795s ago: executing program 7 (id=1606): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x129641) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRESDEC=r0, @ANYBLOB="8fbf175103537c0b745728c8bfc17c10f93abc91c5e319450357ab21b3d17df9e6af30afaff4be2b0294217cf171742b798b95702c7df44da90594b6712e234dfe33b3b78a0b7083225d6edb9694bc7b1f66668d02e92f8e851c428d3250fa8294ad8bf2e1e9d12a10e2c620727cf8c26f813a99806fb24801e419d4e23ae33d8696b37d7c5fbe901a217f0e79b8477aae6fe1ba96824a8fd597fdd4dcb906458431f9ca815f0ab0a0b146fc06f010e62acd4a981d991794a34038d54e08eda3db3d224f307ad906b96f7b72fda7a9a7b2395b69562874450202d8252b0f8353a83ef7035922576739460e1030b607e53dbf1af3f9bf2bf25aafcd0b8b37295ee3d78bbbbd7c7d41a29b28339d632d5a750a7cd4f7368b80fda3a9f6cb6ab2383cd3ced4bc83669d93abaeef15fe425e4d0c0db589a7e1bc2c91831cfea38d89708809970bde8a254f6a62a63284fd6d6defd72e7c2be5b24e9431e40c456e3b8c0e61766f8327dd3b08e319e776083fe5f24729c06ddce22d86527d0fc38a508d456dd3a9651aaa0f0cb1ebae221e0913f97f54657930d2472ba325f605beac5d6e8ea82500a9c3eb915e1db2011743b7aff19de99c2a8f6a83da9fffe519301892686728f3f63ae146aeda8782a1b0c5675e5c15e79708a8f11405e49ca026f66e4d46aae4387b71081625311ebdc11ddedf43aff313ec02b06ad033b78cec37fe3430c2b1c9f5fb98bd093d297104b9566f4ee793981c2eff15e62063ea6d0b2cd89b687c3ebe1a1f84b5720d8066001b409c48640961be9e695d8b1473e4cce007fa1df26d1d5e39d20e31d7166e6771b616e8622b375babf88cf55e818d2c8440da82f836590a765df1a68956677649a0275a89c82a35e62a96ea6470eeee16a2f71e7e98de774e0344ee83ef04db22b69a509eb3c3b0a4c3221ad26f1c3dc6b10a60d6fc5330b50739b9b280dd13c3fc9191548e2edf2e1e906eac84abf042a1d386bbc63a7130a34d1cf8a788b1532be8d7da3bf81efa1a90156abf284678e4dbbbd378b22a27ff8dbe2b174e96d728e4c8f4730d126fdcf2df386342f217a961a3b9a4b49d49ad70c0439eb6ba819751cad9466c35336e0c112acd4d41dca5a0c9c099528ca971138dc90b9ca667962ec3dcc140c1f344afc5f66029a4f81f99bfa0cc43a7cdaf991493fab0a3e6d300ba49e4c8cc2c445d465a35f945f22c739265a3cdd384de95ef22b9f698a95938110d7933fdb36c285b59c2933a441e5cabc0265bd5e3d640942cc3bdfbfbcc2b9f003ac470fb6b01e77c0d5f8ce5bac178dbc4022e124af5a6173fdc0c15f52d3545884be7629a137f28ee0dec743a6c14b832ca37c248060776eb6a9e386c6140639ef3c1c4adb311a64835cd1f26d54ef1854a04cfe6c9b23374d321c6cd4a54eba6c0ddcd4df5937cd874bd25804ee572b75f9e708c8ff4f77b1af1e4b593fecd490e3778e8ac56d973b74822e9bf44c01327b3e40ef58eb3da92b4a038bb8860c94244a1af56af2ef0010af4ad4012fc573349d71876cd82b77e07843ccf8dd28ccff4119de251a07f31afd81796b2833edf6189368187b75fef50b44113062b82d1cde86afff8da90c4237044c1b44fcc93538169de35dcbfc2af7be166c1b421e5fa3e41625408108f9d02f6e91e0d1d99fe42099dd9feea74d042fba323a3121fad269f405427a56c614def77266c9f93c14553409dd68f65578c9c94f5dce367b06259326b7765da81402f8ae0d9411642c5089c3700aa245883b9777401b535eec8f2009c2250b29ad2d12d20513ed675e40707a8135aeb38bab611a273a1978ebd01fa3b78a26b5d93b73c4ec408ba3fdbc604a4fe62250a740bc09a80b83222ce7424604edb210b987bf38e0113f36a432e6d82c67d87d933d9763486096aa225c9f8ae31c4aa95b0e6df8831872a18a1825e26ef5739b3462ae26ff8f07413cf9548ac5405a0ccf5550ad4a07e0f7b3efbf8c90376372bb99f089e76908d8697312ed4960564bace15a1068df8c9b2a9d855f54fb9b4767102b03202d6e9c542a04ff80ef82f66fdb58e09c671e6a48cbb8e630d1e3d16ba8501859fa09d462e6daf995f69caaa75e847551c38b94b87a2ed5f2e3560d64d6cce8a1a9eb211adc6f018445f3709134532523804e44839bd9818dcfe5cc78fff0773a99c26380ff8862f962146607227cbcad53ed85ad6c3087027e341a3c9f5f89fedb7c97fed8ed7abed332f4530495ab220cbbd0108972758d521fce8d9e3d0df35c1f0c1b739c1ea5b3b3aac5982bee8ece6a8da2fb4beef2a4cb68e4a44e4add140bea3004ed8389aa6a05c9c066ea2091fa35822c524fb86e7ba4104b1de6b9ee3c2b02b95aa26ba05812bd9fab204f6a9d9659f0effb08c140ce8f79da274935deddb508b29f67581688c8d07b53471e23773fcc4280757fe48e4a811bcb98c983ece0f8bb468f3d242ae5a7c3a515233f31faf0ca38b582218458bdcaafc770132f88ce9f7f670bed262cd378adca7b49cf41b4b9fee02b82f7904b668d66557b10be87a12c0be4860aab7072573123c5d6c8c50955dbefc79d3fc061ca8ae3def3ab3092f80d6026482d353d5d1e003f98e8789c6d756128cb3ffa7bd5c6756ba86f3093449a887bbcfb90603211e0b37d5c8bee1d5444773f5636b253189837566db29f0379296a94a458693a8b58c7f9a6905f2d69ac0b014685ca1ef5bb64271cd472572d7a8f353bcf840df7e924d05df991771a341dfb5044f2f390e604cff2f98bd307536aabdcfd626d4fbbd758e5daeb2194dae34afb67077ad25e6f6060844707c0df8ca3e3ab2e65d379b147dc90755b8df2afefb4e631bb0e1e0ba8b50dee13a90bddde75a2ce338f440b3dcd0e2de46af243444657e6a8db2907adf956a43aee6321f2d2f92c02f474bfb3dc676dd20dffb5e1b30b88dc513b0838bda3be9f5c689a6efbc445c39e0678876dda1685db536d8b1eea2def0709215a75578a20a378d1b9ff932f9f5604c9ff3448c211048054e4bcec17aacbe454447cd4fed78f78ba7e51c2e36fa7062dd4b29e49a181ad33a733f3d2680607f0b6c2941b0e00aca05e15ec20ec1ba19b84b09f59ffb94d390cc368cd875a16e54043fa18372acdeee3937c3371b1fb73b7bb4ed87e77d2cc5f501b384f814ba6176dd35e64cbfed0bd1b62512fbcdc83f18cb2c3ff764c739ceef181d8440f94c3f12742e0fbe6156d7f60068125abb455a99508f6e4e9da5d484fda17795e11b0368fad854c718b1c24c1ab2dc6fe90376a3bd729bac2f16c73eeb4c4cc786190ac97bdfd1f222aab9976a09dff807cf33987dc74217dfce32cb6640d33a135f1560d497d81c8898a5e9797e85a40c8730f2f566a5c36706205661085f4d1257876e564ddf58a9af0552f4348de81cb1d09763acac74705ea4ec38d6e4385f9d91555965701a7f550dc7150f06845a0d93f6ef1907f2967e05881b1e7618749fac543d3f488250a34ad339aef781d8431cc22176c8ba1fd351a45df5c19f941d17a5a524197e26760a7b945b39849454cb7cd00c800d6f02732e57146eb10f3a0d60f19f169f571af6c72ff89b178dff2bd92ae6d2519d175b2625397673a6bb74f2578104a4f95b74aaabd19c340a7079b21a132603fbc76832c4c8d7c265f00cba143a7f93766d517a244884e7dc03e3121e33bffcf01df81db31bebbfb39220117ab858fff4c6295faf9e3514eeef30f73e1a46fd50cdfe23530630161feb1d9b36a34dd7e39435b3169150aa49501efd4c772ddbb7c4dfbedfba483d6ba88b0c805973351b5f1be84872b74bc0d57a32beb71ba6f33144afa5057f999901630b98f951940d36773782117fc3b768e338754d884dd19b710b4de56d3cc520116cb09a6d546104ef7fdb5765237de047fc3fbe3fedb89ab548a215bcb890017d0c2db0164b125060363c19cf886a5a4302ffec34ea30235083a0a49a0a6b913fcc5c9d92b13fd64f1e5d40582dae216f62793ffe3069ee5d282ea3e65696814eaf9867d2140ecd7e8e45bf95a0027ebb39f90c9e47cd455c6997a8887e331b1658412ef12152c714f885c575a7040d2c71a0e807f5a5c84b260026331730f2572bd093e25eaf131918d62f751a010000800ed1507ceeabd221ff6259d6c3541999dd1d694f86705b4ac7bfb34f0c9e4109d3c37052034d2b81291baccaabd6354eca97d3a33f991abd2e2aaa8c21caf458723ebdb89a2e8cd940e15f911a3ed63a8655a631fdd6ee6640dace89ee96b775195c0edeb306f12856bf8fc4c00e35a061b0d8bf43c561cb58a99916c623f76c2634a2adc918d97b54b331432816af8142476f848d7af68a329725724e885460432557b284907bac131fe0ed4bc6c6158793bd25a6746af28468287aaa61fd1ebc1974421682fbd5a3b471a5da0fdeadd910abf562c30d8b6233c0167d5ff4413e147f8f38aeee3932fc381b6279ff83f2a58d00511a73f6f89c5b3e88a9a4723ef796dd261746dde0aef2db0a264fa4158e65c6e93f25f76a834935daa76738cc9d1a5a6d7e8d0f65b37e66e22dafbbc12bc265182dacda1f5e2f9abadcce7469109423703dbc6ec35f41c9783f662bfbbf16a04dd0e1a26a908ba8e1383c22b1b4315df5dd95ce2088173a317aa338ce8c912a3dceef399a0d0b50993b41f4577d57ccf0877506d1d8423318292f906677c8b0e3404f5c8dd476e8ab0c4f25ceca94401fff8644709fd4eb9260f504fab179b9b77410560478425dcd92c206d3c68175bf5cbd0c074020b87c286e2aced265879376b837ef723ddbff1e12de9a0dfadc19b246ad30fc3e2ca7bd2b51dfd1c5be6588cd4c7a8b2ae73cd2db79c3f1d5f7eeae42a299dff3f1bfd6593dd9110ba4aaa4a58b9d764ef459c66049b0b4d5320c46a9bda0f2027d50f100a866bebe6d22817713d5da5a82730e9e50a4c921682e6354ac0053765f8c12079f074b6f43378a56939e39795b5f071a74fd4b3c044b1ff2e105c3674ffcfbd119401b03b7ce51275d8dd3d824d8728377fb3fde9577684f185447d8b626cf890b8b2a2196ff0b44a3317b6464fe0d81a1cf232f63de6f19903dec6591268247d57a74fb92170e65c61e3e28c2824ad50e61098f2cbfa89d6616943d036b033224b6ac86c43b212815b5a156e7dc7394945f717f2e9f6df20deb20b565f1ae9f542509918856103d7845566f8db4fc1d6f773684494fe134e06b5a7875ad03e7620c80177c6c59a1c60bc25a9e52bdf415574d542226a67a48400f1b29043873395a5caa37f519d20cf060097fdc45323ebce64df71b10baa90f0df5bdfc739291f532c97382a2594c495c91fe09308445969d29965a7d68364190148482afab30026212264470175c654ff842f763349eb65a7571365c608d100b3aba51882e45a2bea4f7c323436f7784e19292f443f31c1f4e92d4227908027245dca464387d61e5c37c34c0128420c99447c963a5f889acd2f16facdc864f36785a3c2582a49bf333cdfaafe1387321e4d63eacf789a10d78764bb027f9edf8d56e100c04fa0b2721636eefc97fe16209617240d46e1eba4ab187dd54ad17194102eda9001820f0f03bbe5f383959adb746077009bb298ef6d6d92965a9062c7bd6c6c0e8c3e8bcd4e898dfdd6aba7dea1b4816160e465538c3ea3cc702082f8cb03d0897111081a4b37fe85c35353af53290d7ec5583cb2ab821c445f32b3c4d51d4626e5d57a242d43a000c9b5d75c798f2ad6f35676b8eaec8f0d9d20fc427d35a17d044c2ede36ea599934b3e8b63851c2ab517417ccea5e4bed835c99dea0f9c26a11747881891439b7de5148d63a0429709695a275b51ccc09c", @ANYRESHEX=r1], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x41, 0x2, 0x0, "444900d730faa901000000000000000000f789981008d7b15b5700e46b8be100", 0x36314d59}) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbde25040000000c0016800800bf00ffffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6.01658767s ago: executing program 9 (id=1607): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x27) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.004156909s ago: executing program 6 (id=1608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x0) syz_io_uring_setup(0x10d2, 0x0, 0x0, &(0x7f00000005c0)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r8, 0x0, 0xa, &(0x7f0000000180)=0x6, 0x4) write(0xffffffffffffffff, &(0x7f0000000140)="0259473bb7c011fd", 0x8) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.907107977s ago: executing program 8 (id=1609): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 5.129977577s ago: executing program 7 (id=1610): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e000100697036677265746170000000400002800400120005000b000700000008000100", @ANYRES32, @ANYBLOB="05000800000000000800040000040000060011004e24000008000100", @ANYRES32, @ANYBLOB="060011004e24000008000300", @ANYRES32], 0x7c}, 0x1, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2000000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa00000000000071108c000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.857473326s ago: executing program 6 (id=1611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000120001000000", @ANYRES32=0x0, @ANYBLOB="0000000000f7ab"], 0x3c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) ptrace$cont(0x7, 0xffffffffffffffff, 0x100000001, 0x8001) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r7, r6, 0x0, 0x9c) read$hiddev(r6, &(0x7f00000000c0)=""/33, 0x21) r8 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$smack_xattr_label(r8, &(0x7f00000036c0)='security.SMACK64MMAP\x00', &(0x7f0000003700)=ANY=[@ANYBLOB='*'], 0x9, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="21012cbd700000000000140000f408000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 4.83539691s ago: executing program 7 (id=1612): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) r3 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xad, 0x7, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0xeff12eee1cacfd1c, 0x2, 0x7, 0xef}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x7, 0x5, 0xff, 0x5}, 0x34, &(0x7f00000001c0)={0x5, 0xf, 0x34, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d6212b898b9819992b28243962f68582"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5427d4a69fa267a6e17bc8fbfc929240"}]}, 0x3, [{0x7, &(0x7f0000000200)=@string={0x7, 0x3, "8a8a5eda19"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x22, &(0x7f0000000300)=@string={0x22, 0x3, "e385088aafedd6e9fec4598fd407ae9ce93f86c27701c19d6524c85efca339fb"}}]}) syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0xf, 0xaa, {0xaa, 0x7, "47ec44152d1208272b3005ba7e71b61b3d90effa253d118f2c908294ec20654cf707027c4a6ceb70489a0ef8ce3d2afb44346678fdfdbd5009672921e3c96df7cf20ee91d08f3ae3d12c432436f1548964f68f7fee4a4ff7275c950a136580a73d951993988bc2a5b4f6487f2ca34f3b1afd9054235bfc2bc767a0bf9b97af75f7b281e36255fd063b9fdba205479afb1b3cc35c9b0435e79b066b856c992df9208d1028fa433f27"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000480)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x5, 0x1, "fe9987db", "946d974c"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0xfe, 0x6, 0x7, 0xf, 0x9}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000580)={0x40, 0x17, 0xdd, "33835755d587c044fba49853f7b254c898ddbc3c49785e6e930d5e742a22b89bf25db7327b14d1baddcac24a2a9e567975ea4e8f22518ef82c61f9292c9b05782cdcf1f5c0c635f0ea6a89522401826f361a071950519ce8caa88fb39f4bd4d956ff61c1da4f92e3136e47ab931ad1762f7bf89d3e4fbceb4f5b405c01c24636f2d830dba0dc440aa2d56f77ea095b926542a8bcdd415c800eeb47a1ba9e8c23b9965fa2aeb80d0f3be5bbbadf5ba4ff33725c85ee6056cfa5df8c02928295118ca02e39b840f77fb4ba2ce0a0a7aa187064c1e2bbdd0fe896015ac7d1"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x10, 0x10}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x9ba1}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0xb, 0x2, "66ce"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="718d878bcfe9"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "9662"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x82}}) syz_emit_ethernet(0x22, &(0x7f0000002d40)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) 4.739652299s ago: executing program 6 (id=1613): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvram(0xffffffffffffff9c, 0x0, 0x40280, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1, &(0x7f0000001480)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB]) r5 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x207a98, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_POST(r8, 0x5008, 0x0) 3.804964734s ago: executing program 8 (id=1614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f00000022c0)=""/4104, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x648e, 0x2, 0xf, &(0x7f0000000000)={[0x10000000000]}, 0x8) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) close(0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.37660424s ago: executing program 0 (id=1615): sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000540)={0x0, 0x418a, 0x80, 0x80000000, 0x8}, &(0x7f00000004c0)=0x0, &(0x7f0000000140)) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2e, 0xffffffffffffffff, 0x1400, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) writev(r2, &(0x7f0000009640)=[{&(0x7f0000007640)="d5", 0x1}, {0x0, 0x300}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="54000000100003040000000002dcdf2500007400", @ANYRES32=0x0, @ANYBLOB="000800000750050008001300", @ANYRES64=r0], 0x54}}, 0x80) 2.431432358s ago: executing program 9 (id=1616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xc) r2 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB="048406df92fa"], 0xffd7, 0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0xe2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r7], 0x68}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002ec0)={r3, 0xe0, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002d00), &(0x7f0000002d40), 0x8, 0x73, 0x8, 0x8, &(0x7f0000002d80)}}, 0x10) r10 = openat$mice(0xffffffffffffff9c, &(0x7f00000027c0), 0x48002) bpf$PROG_LOAD(0x5, &(0x7f0000002fc0)={0x7, 0x2b, &(0x7f00000029c0)=ANY=[@ANYBLOB="1800000044070000000000006ea2000018610000020000000000000003000000186400000c00000000000000ffffffff186000000000000000190000040000007d0a400001000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000006f37fcffffffffff18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018160000", @ANYRES32, @ANYBLOB="0000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000002800)='syzkaller\x00', 0x8, 0x52, &(0x7f0000002b40)=""/82, 0x41100, 0xb, '\x00', r8, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r3, 0x1, &(0x7f0000002f40)=[r2, r2, r3, r3, r2, r10, r2, r2, r3, r2], &(0x7f0000002f80)=[{0x3, 0x3, 0xb}], 0x10, 0x1, @void, @value}, 0x94) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000002880)={0x6, {{0xa, 0x4e22, 0x4, @mcast2, 0x1}}, {{0xa, 0x4e21, 0x4, @mcast2, 0x200}}}, 0x108) write$nbd(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) ioctl$HIDIOCGCOLLECTIONINDEX(r11, 0x40184810, &(0x7f0000000700)={0x1006, 0x100, 0x7fff, 0x6, 0x15, 0x7422}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r13 = socket$rxrpc(0x21, 0x2, 0x0) recvmmsg(r13, &(0x7f0000000680)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000140)}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000580)=""/94, 0x5e}], 0x8, &(0x7f0000001780)=""/4096, 0x1000}, 0xf}], 0x1, 0x40, &(0x7f00000006c0)={0x77359400}) accept4(r1, 0x0, 0x0, 0x80000) 2.265140495s ago: executing program 8 (id=1617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) (fail_nth: 2) 2.263956886s ago: executing program 6 (id=1618): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfa000, 0x1a5e02}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000fee000), 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)={0x20, 0xe, 0x6, "a3adadb64cf4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.201705577s ago: executing program 8 (id=1619): syz_io_uring_setup(0x4ee6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) shutdown(r4, 0x1) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r5) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)) 1.200396605s ago: executing program 0 (id=1620): syz_usb_connect(0x0, 0x33, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80, 0xa40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0xfffffffffffffee8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x5f, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0xb85f, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.109828781s ago: executing program 9 (id=1621): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmmsg$inet(r2, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4084) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x152) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x1358, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x1408, 0x325, 0x378, 0x1408, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [0x0, 0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x10d8, 0x1140, 0x52020000, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0xfc, 0xfd, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xcfd, 0x8000, 0x8, 0x1, 0x0, "40384e1aa968ae1a869c8ce9a46b9ff41931137193fc6c2a5d28667be0e6c0e8dd7ab2a2560d636022502c16f2d80f7e97c47fa0a3d21b373dc257058a128931"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13b8) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x10000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000004f00000054000000000000009500000000000000ef0285b73eae795b05ad261777db75186baf0b2792ad03f20472662181fe046096c5df696334e2d836395560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafaf33acf7e01a23999fdfb4b490f6cfe5edf2740576acb262e0de2b8e288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2058455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc80f7d53ae51691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55149f0c3a7b87f86120153725784e98975e8617ffc7e8cc497f43789f5208fd84f2b34f7853d9c52848dd17c5796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f766c3cb8cd6a4a446936895dc5b44d224a0b3c2ca8087486aead1d034d98832ad677b28b10ed58f8de2d5ae49ba35be16888ea8da9bf33f91a6c5056af135b53e191b0dee15f0d8ab12abc04eedfeb65355400900000000000000b4717107bf564a2350564f5ef2bb8e9274d5d40af19b0afe0c774b562378fc3dbf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742b00802b498fef8490b52ad11085ce4a028c7af46774b391e2124fcd93ff05ff1ad0da384ff0801734c58aad0eba11e3e817c3b651bb99090189ee00012f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc496037c1de1b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000096f5766dc1ca5e8cfee332a288090000008000000000cb88186bcd36a2ecce33a3048f6f97e14dac56e84aba0bdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a826d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b000135d28f977ab43670412afe8361b60bf37058fdf9cdf22d8da0f2d1cc813cad61011e3060badbe396b3fb928c0500000000000000770e11c5043535696289b227c6b313e2852c52f9975cd124771bef02f431"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.090859033s ago: executing program 7 (id=1622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setsig(r0, 0xa, 0x29) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x541800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)=0x1) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x4027c000) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)=0x0) setresuid(r3, r4, r5) (async) r6 = syz_open_dev$rtc(&(0x7f00000001c0), 0x5, 0x10400) ftruncate(r6, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000002380)={&(0x7f0000000200), 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x50, r8, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}}, 0x20000000) (async) r10 = gettid() (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002580)={0x0, 0x0}) syz_clone3(&(0x7f0000002640)={0x20000000, &(0x7f00000023c0), &(0x7f0000002400), &(0x7f0000002440), {0x30}, &(0x7f0000002480)=""/182, 0xb6, &(0x7f0000002540)=""/63, &(0x7f0000002600)=[r2, r10, r9, r2, r2, r11], 0x6, {r1}}, 0x58) (async) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000026c0), &(0x7f0000002700)={0x0, 0xfb, 0x7b, 0x3, 0x7f, "b7b9961bd647684fe72cf265211dbcd0", "42977daa5533e646c6e96e9d3558a54d6e1c83c23abda3ae8664d3d1786087a1e3f5c0da0902db4890815e820d22c7127b1ba9bf478ed1df654d29bb334f36736a642d77f1dfc35777f7540314ea5d577dda29b2c5d248794dd5ec282c368aa6067a2cd1f5f8"}, 0x7b, 0x3) (async) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000002780)={0x1, 0x0, [{0x6, 0x1, 0x6, 0x7, 0x1, 0x800}]}) r12 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r12, 0x0, 0xcf, &(0x7f00000027c0), &(0x7f0000002800)=0x4) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000002840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x2}) (async, rerun: 64) set_mempolicy_home_node(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x0) (async, rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r13, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x34, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfe2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000002980)={0x3, 0x0, [{0x7, 0x4, 0x8, 0x3, 0x9}, {0x80000007, 0x7, 0xd854f26, 0x5}, {0xb, 0xb, 0x5, 0x4, 0xff}]}) (async) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x100202f0}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x4801) 910.376818ms ago: executing program 7 (id=1623): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmmsg$inet(r2, 0x0, 0x0, 0xc0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1401c080) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x152) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x1358, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x1408, 0x325, 0x378, 0x1408, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [0x0, 0x0, 0x0, 0xff000000], [], 'pimreg0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x10d8, 0x1140, 0x52020000, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0xfc, 0xfd, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xcfd, 0x8000, 0x8, 0x1, 0x0, "40384e1aa968ae1a869c8ce9a46b9ff41931137193fc6c2a5d28667be0e6c0e8dd7ab2a2560d636022502c16f2d80f7e97c47fa0a3d21b373dc257058a128931"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13b8) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e23, 0x8001, @mcast2, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r10 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000002980)=[@release, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)={@fda={0x66646185, 0x3, 0x2, 0x34}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/183, 0x0, 0x0, 0x1}}, &(0x7f0000000140)}, 0x40}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 752.029928ms ago: executing program 9 (id=1624): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5434, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0006}]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 0s ago: executing program 8 (id=1625): socket(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000e00000002000000060000000500", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffffff, 0x0, 0x89000) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) dup(r2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): ss 0xF, skipping [ 664.125983][ T43] usb 2-1: config 0 interface 59 altsetting 230 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 664.126014][ T43] usb 2-1: config 0 interface 59 altsetting 230 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 664.126061][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 664.126085][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 664.126110][ T43] usb 2-1: config 0 interface 40 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 664.126137][ T43] usb 2-1: config 0 interface 40 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 664.126160][ T43] usb 2-1: config 0 interface 40 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 664.126182][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 664.126206][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 664.126230][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 664.126253][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 664.126275][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 664.126298][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 664.126321][ T43] usb 2-1: config 0 interface 40 altsetting 9 has an endpoint descriptor with address 0x5A, changing to 0xA [ 664.126346][ T43] usb 2-1: config 0 interface 40 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 664.126379][ T43] usb 2-1: config 0 interface 40 altsetting 9 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 664.126406][ T43] usb 2-1: config 0 interface 59 has no altsetting 0 [ 664.126426][ T43] usb 2-1: config 0 interface 40 has no altsetting 0 [ 664.130390][ T43] usb 2-1: string descriptor 0 read error: -71 [ 664.130537][ T43] usb 2-1: New USB device found, idVendor=1199, idProduct=9062, bcdDevice=4e.21 [ 664.130563][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.156806][ T5891] as10x_usb: error during firmware upload part1 [ 664.157226][ T5891] Registered device nBox DVB-T Dongle [ 664.165530][ T43] usb 2-1: config 0 descriptor?? [ 664.166278][ T43] usb 2-1: can't set config #0, error -71 [ 664.168109][ T43] usb 2-1: USB disconnect, device number 36 [ 664.221722][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 664.239161][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.316957][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1357'. [ 664.533557][ T9776] usb 3-1: USB disconnect, device number 29 [ 665.040608][ T5891] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 665.054868][ T9776] Unregistered device nBox DVB-T Dongle [ 665.056781][ T9776] as10x_usb: device has been disconnected [ 665.060902][T10766] bond0: entered promiscuous mode [ 665.084378][T10766] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 665.141435][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.156161][ T5905] usb 4-1: USB disconnect, device number 44 [ 665.174815][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.182036][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.231311][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.238593][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.256955][ T5891] usb 5-1: Invalid ep0 maxpacket: 16 [ 665.427468][ T5891] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 665.617964][ T5891] usb 5-1: Invalid ep0 maxpacket: 16 [ 665.647455][ T5891] usb usb5-port1: attempt power cycle [ 666.686216][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.007508][ T5921] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 667.407008][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.427750][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.438883][ T5921] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 667.464756][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.486673][ T5921] usb 4-1: config 0 descriptor?? [ 667.835606][ T43] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 667.982993][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1371'. [ 667.992440][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 668.053973][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1371'. [ 668.624330][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.702616][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.716004][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 668.759374][ T43] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 668.885518][ T43] usb 2-1: config 0 interface 0 has no altsetting 1 [ 668.966307][ T43] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 669.009132][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.178797][ T43] usb 2-1: config 0 descriptor?? [ 669.552611][T10799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1369'. [ 669.564364][ T5921] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 669.712771][ T5921] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 669.901692][ T5921] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 669.985857][ T5921] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 670.000344][ T43] Bluetooth: Can't get state to change to load ram patch err [ 670.016189][ T5921] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 670.034397][ T43] Bluetooth: Loading patch file failed [ 670.050813][ T43] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 670.060406][ T5921] usb 4-1: USB disconnect, device number 45 [ 670.095920][ T43] usb 2-1: USB disconnect, device number 37 [ 670.119614][T10817] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1374'. [ 670.161639][T10817] bond_slave_0: left promiscuous mode [ 670.184124][T10817] bond_slave_1: left promiscuous mode [ 670.189658][T10817] bond0: entered allmulticast mode [ 670.208887][T10817] bond_slave_0: entered allmulticast mode [ 670.225966][T10817] bond_slave_1: entered allmulticast mode [ 670.307724][T10673] veth0_vlan: entered promiscuous mode [ 670.351891][T10673] veth1_vlan: entered promiscuous mode [ 670.421382][T10673] veth0_macvtap: entered promiscuous mode [ 670.433415][T10673] veth1_macvtap: entered promiscuous mode [ 670.452431][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.465058][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.477372][T10673] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.488899][T10673] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.498564][T10673] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.507928][T10673] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.622758][ T5891] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 670.631545][ T7287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.650998][ T7287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.704335][ T7279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.712476][ T7279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.716700][ T5921] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 670.964549][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.989799][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 670.999485][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.015584][ T5891] usb 3-1: config 0 descriptor?? [ 671.036072][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 671.069459][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 671.796539][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 671.805806][ T5921] usb 4-1: config 2 has an invalid interface number: 69 but max is 0 [ 671.834758][ T5921] usb 4-1: config 2 has no interface number 0 [ 671.846483][ T5921] usb 4-1: config 2 interface 69 has no altsetting 0 [ 671.868412][ T5921] usb 4-1: string descriptor 0 read error: -22 [ 671.878408][ T5921] usb 4-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=9a.ea [ 671.900144][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.005294][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 672.016155][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 672.035710][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 672.049886][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 672.059323][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 672.077509][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 672.142402][ T5891] pwc: recv_control_msg error -32 req 02 val 2000 [ 672.168404][T10838] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1379'. [ 672.177732][T10838] 0ªX¹¦À: renamed from caif0 [ 672.250622][T10838] 0ªX¹¦À: entered allmulticast mode [ 672.256298][T10838] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 673.107662][T10824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.126642][T10824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.243857][T10839] loop5: detected capacity change from 0 to 3335 [ 673.297682][T10848] loop5: detected capacity change from 3335 to 4159 [ 698.034660][ T0] sched: DL replenish lagged too much [ 698.039968][ T5891] pwc: recv_control_msg error -110 req 04 val 1500 [ 698.077054][ T5891] pwc: recv_control_msg error -32 req 02 val 2500 [ 698.084525][ T5891] pwc: recv_control_msg error -32 req 02 val 2400 [ 698.092853][ T5891] pwc: recv_control_msg error -32 req 02 val 2600 [ 698.099848][ T5891] pwc: recv_control_msg error -32 req 02 val 2900 [ 698.466647][ T5891] pwc: recv_control_msg error -32 req 02 val 2800 [ 698.590190][ T10] usb 4-1: USB disconnect, device number 46 [ 698.606770][ T5891] pwc: recv_control_msg error -32 req 04 val 1100 [ 698.808855][ T5891] pwc: recv_control_msg error -32 req 04 val 1200 [ 698.879276][ T5891] pwc: Registered as video103. [ 699.315747][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 699.410053][T10857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.432718][T10857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 699.447131][T10857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 699.459336][T10857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.469876][T10857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 699.478017][T10857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 699.510773][T10861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 699.572269][T10861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 699.612847][ T5827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 699.655919][ T5827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 699.663738][ T5891] usb 3-1: USB disconnect, device number 30 [ 699.809304][T10857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 699.818713][T10857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 699.828192][T10857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 699.838082][T10857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 699.845847][T10857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 700.188978][ T9817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 700.201378][ T9817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 700.210104][ T9817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 700.230554][ T9817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 700.240762][ T9817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.599925][ T9817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 700.616244][ T9817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 700.624913][ T9817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.643160][ T9817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.652550][ T9817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 701.040431][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.047084][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 701.310074][T10855] chnl_net:caif_netlink_parms(): no params data found [ 701.572800][T10865] chnl_net:caif_netlink_parms(): no params data found [ 701.746654][T10855] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.754438][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.762214][T10855] bridge_slave_0: entered allmulticast mode [ 701.769650][T10855] bridge_slave_0: entered promiscuous mode [ 701.815631][ T9817] Bluetooth: hci6: command tx timeout [ 701.854163][T10855] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.861504][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.869036][T10855] bridge_slave_1: entered allmulticast mode [ 701.876423][T10855] bridge_slave_1: entered promiscuous mode [ 701.883559][ T1161] bridge_slave_1: left allmulticast mode [ 701.889491][ T1161] bridge_slave_1: left promiscuous mode [ 701.895480][ T9817] Bluetooth: hci7: command tx timeout [ 701.895930][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.918216][ T1161] bridge_slave_0: left allmulticast mode [ 701.924186][ T1161] bridge_slave_0: left promiscuous mode [ 701.929911][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.061163][ T9817] Bluetooth: hci3: command tx timeout [ 702.499626][ T9817] Bluetooth: hci2: command tx timeout [ 702.830834][ T9817] Bluetooth: hci5: command tx timeout [ 702.900611][ T1161] team0: Port device bond0 removed [ 702.908466][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.920866][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.930583][ T1161] bond0 (unregistering): Released all slaves [ 703.038494][ T1161] bond1 (unregistering): Released all slaves [ 703.056931][T10854] chnl_net:caif_netlink_parms(): no params data found [ 703.246863][T10865] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.254120][T10865] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.261609][T10865] bridge_slave_0: entered allmulticast mode [ 703.269071][T10865] bridge_slave_0: entered promiscuous mode [ 703.300108][T10855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.319476][T10863] chnl_net:caif_netlink_parms(): no params data found [ 703.339222][T10867] chnl_net:caif_netlink_parms(): no params data found [ 703.351741][T10865] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.363806][T10865] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.371188][T10865] bridge_slave_1: entered allmulticast mode [ 703.379221][T10865] bridge_slave_1: entered promiscuous mode [ 703.403696][T10855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.532504][T10855] team0: Port device team_slave_0 added [ 703.584310][T10865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.620010][T10855] team0: Port device team_slave_1 added [ 703.679601][T10865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.770373][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.782620][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.790092][T10854] bridge_slave_0: entered allmulticast mode [ 703.800106][T10854] bridge_slave_0: entered promiscuous mode [ 703.809146][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.816616][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.823902][T10854] bridge_slave_1: entered allmulticast mode [ 703.832052][T10854] bridge_slave_1: entered promiscuous mode [ 703.872168][T10855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.879283][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.905366][T10855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.992575][T10865] team0: Port device team_slave_0 added [ 704.014842][T10855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.022048][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.048861][ T9817] Bluetooth: hci6: command tx timeout [ 704.057265][T10855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.068956][T10867] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.076543][T10867] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.083862][T10867] bridge_slave_0: entered allmulticast mode [ 704.092434][T10867] bridge_slave_0: entered promiscuous mode [ 704.105766][T10867] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.112938][T10867] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.120428][T10867] bridge_slave_1: entered allmulticast mode [ 704.128076][T10867] bridge_slave_1: entered promiscuous mode [ 704.134947][ T9817] Bluetooth: hci7: command tx timeout [ 704.172881][T10865] team0: Port device team_slave_1 added [ 704.196341][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.204615][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.212117][T10863] bridge_slave_0: entered allmulticast mode [ 704.219661][T10863] bridge_slave_0: entered promiscuous mode [ 704.263562][T10867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.277218][T10867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.300878][ T9817] Bluetooth: hci3: command tx timeout [ 704.314315][T10854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.328055][T10854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.358381][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.365711][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.373587][T10863] bridge_slave_1: entered allmulticast mode [ 704.383868][T10863] bridge_slave_1: entered promiscuous mode [ 704.556492][T10867] team0: Port device team_slave_0 added [ 704.564765][T10867] team0: Port device team_slave_1 added [ 704.590697][T10854] team0: Port device team_slave_0 added [ 704.599996][T10854] team0: Port device team_slave_1 added [ 704.607244][T10865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.614219][T10865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.642207][T10865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.655233][T10865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.662537][T10865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.688563][T10865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.704413][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.718845][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.733295][T10855] hsr_slave_0: entered promiscuous mode [ 704.733693][ T9817] Bluetooth: hci2: command tx timeout [ 704.740924][T10855] hsr_slave_1: entered promiscuous mode [ 704.751446][T10855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.759107][T10855] Cannot create hsr debugfs directory [ 704.880765][T10867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.888651][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.916982][T10867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.933091][T10867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.940297][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.968397][T10867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.986789][T10854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.993938][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.023678][T10854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.037933][T10854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.045092][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.071583][T10854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.084736][ T9817] Bluetooth: hci5: command tx timeout [ 705.095697][T10863] team0: Port device team_slave_0 added [ 705.175644][T10863] team0: Port device team_slave_1 added [ 705.213047][T10865] hsr_slave_0: entered promiscuous mode [ 705.220051][T10865] hsr_slave_1: entered promiscuous mode [ 705.226717][T10865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.234329][T10865] Cannot create hsr debugfs directory [ 705.369970][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.377495][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.409052][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.422210][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.429404][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.455458][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.487370][T10854] hsr_slave_0: entered promiscuous mode [ 705.495095][T10854] hsr_slave_1: entered promiscuous mode [ 705.501328][T10854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.509132][T10854] Cannot create hsr debugfs directory [ 705.651356][T10867] hsr_slave_0: entered promiscuous mode [ 705.658666][T10867] hsr_slave_1: entered promiscuous mode [ 705.665487][T10867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.673075][T10867] Cannot create hsr debugfs directory [ 705.711319][T10863] hsr_slave_0: entered promiscuous mode [ 705.719441][T10863] hsr_slave_1: entered promiscuous mode [ 705.725641][T10863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.736104][T10863] Cannot create hsr debugfs directory [ 706.252892][ T9817] Bluetooth: hci6: command tx timeout [ 706.337827][ T9817] Bluetooth: hci7: command tx timeout [ 706.428445][ T1161] hsr_slave_0: left promiscuous mode [ 706.435109][ T1161] hsr_slave_1: left promiscuous mode [ 706.441102][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.450271][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.510700][ T9817] Bluetooth: hci3: command tx timeout [ 706.834075][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 706.879765][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 706.937482][ T9817] Bluetooth: hci2: command tx timeout [ 707.229914][T10855] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 707.246724][T10855] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 707.283918][ T9817] Bluetooth: hci5: command tx timeout [ 707.334280][T10855] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 707.366658][T10855] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 707.463337][T10854] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 707.503435][T10854] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 707.529340][T10854] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 707.540649][T10854] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 707.630262][ T1161] IPVS: stop unused estimator thread 0... [ 707.660882][T10867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.689440][T10863] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 707.712334][T10863] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 707.759746][T10863] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 707.778821][T10863] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 707.808164][T10867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.879102][T10854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.938174][T10867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.966506][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.978959][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.986180][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.035212][T10855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.119674][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.163529][T10867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.208409][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.239421][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.246702][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.299376][T10855] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.333769][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.388185][T10863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.431381][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.479190][ T9817] Bluetooth: hci6: command tx timeout [ 708.496336][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.503580][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.522481][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.529672][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.561469][ T9817] Bluetooth: hci7: command tx timeout [ 708.574750][T10863] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.597910][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.605133][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.677667][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.684944][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.732695][ T9817] Bluetooth: hci3: command tx timeout [ 708.852499][T10865] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 709.003984][T10865] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 709.049274][T10865] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 709.161033][ T9817] Bluetooth: hci2: command tx timeout [ 709.204325][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.279763][T10865] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 709.322388][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.414196][T10863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.468172][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.503834][ T9817] Bluetooth: hci5: command tx timeout [ 709.530138][T10854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.582604][T10855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.625509][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.644288][T10867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 709.657446][T10867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 709.727689][T10867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 709.771621][T10867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.157714][ T1161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.344486][ T1161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.426486][ T1161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.494963][T10863] veth0_vlan: entered promiscuous mode [ 710.516742][T10865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.558358][ T1161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.614959][T10863] veth1_vlan: entered promiscuous mode [ 710.660820][T10865] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.747273][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.754478][ T7279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.775270][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.782412][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.816039][T10863] veth0_macvtap: entered promiscuous mode [ 710.841776][T10855] veth0_vlan: entered promiscuous mode [ 710.856877][T10854] veth0_vlan: entered promiscuous mode [ 710.868782][T10867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.879744][T10863] veth1_macvtap: entered promiscuous mode [ 710.905897][T10855] veth1_vlan: entered promiscuous mode [ 710.949072][T10854] veth1_vlan: entered promiscuous mode [ 711.035482][T10867] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.047647][T10863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.104110][T10863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.123062][T10854] veth0_macvtap: entered promiscuous mode [ 711.133013][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.140321][ T7279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.181997][T10854] veth1_macvtap: entered promiscuous mode [ 711.264264][ T1161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.293910][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.301082][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.325257][T10863] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.335411][T10863] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.347409][T10863] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.356544][T10863] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.382537][ T1161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.409025][T10855] veth0_macvtap: entered promiscuous mode [ 711.431871][T10855] veth1_macvtap: entered promiscuous mode [ 711.526710][ T1161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.581684][T10854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.609051][T10854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.649922][ T1161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.675241][T10855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.696760][T10865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.719181][T10854] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.758302][T10854] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.767096][T10854] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.776030][T10854] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.805453][T10855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.909467][T10855] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.924976][T10855] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.937756][T10855] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.955483][T10855] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.310570][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.323654][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.342797][T10867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.428961][ T1161] bridge_slave_1: left allmulticast mode [ 712.438355][ T1161] bridge_slave_1: left promiscuous mode [ 712.447295][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.462628][ T1161] bridge_slave_0: left allmulticast mode [ 712.470044][ T1161] bridge_slave_0: left promiscuous mode [ 712.479321][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.500241][ T1161] bridge_slave_1: left allmulticast mode [ 712.507519][ T1161] bridge_slave_1: left promiscuous mode [ 712.513258][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.526144][ T1161] @ÿÿ: left allmulticast mode [ 712.532225][ T1161] @ÿÿ: left promiscuous mode [ 712.537133][ T1161] bridge0: port 1(0@ÿÿ) entered disabled state [ 712.562588][ T1161] bridge_slave_1: left allmulticast mode [ 712.568289][ T1161] bridge_slave_1: left promiscuous mode [ 712.575532][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.587142][ T1161] bridge_slave_0: left allmulticast mode [ 712.593594][ T1161] bridge_slave_0: left promiscuous mode [ 712.599369][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.646410][ T1161] bond_slave_0: left promiscuous mode [ 712.653208][ T1161] bond_slave_1: left promiscuous mode [ 713.761219][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.773608][ T1161] bond_slave_0: left allmulticast mode [ 713.781664][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.791763][ T1161] bond_slave_1: left allmulticast mode [ 713.798609][ T1161] bond0 (unregistering): Released all slaves [ 714.346683][ T1161] bond0 (unregistering): left promiscuous mode [ 714.353066][ T1161] bond_slave_0: left promiscuous mode [ 714.358987][ T1161] bond_slave_1: left promiscuous mode [ 714.384768][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.402932][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.413337][ T1161] bond0 (unregistering): Released all slaves [ 715.013858][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.025047][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.039950][ T1161] bond0 (unregistering): Released all slaves [ 715.354541][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.368462][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.378648][ T1161] bond0 (unregistering): Released all slaves [ 715.453496][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.461699][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.522972][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.530866][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.554204][T10867] veth0_vlan: entered promiscuous mode [ 715.758910][T10867] veth1_vlan: entered promiscuous mode [ 715.768355][ T1161] tipc: Disabling bearer [ 715.774847][ T1161] tipc: Left network mode [ 715.811527][T10865] veth0_vlan: entered promiscuous mode [ 715.821811][ T7287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.829724][ T7287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.830033][T10865] veth1_vlan: entered promiscuous mode [ 715.919215][ T7287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.930841][ T7287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.057396][T10867] veth0_macvtap: entered promiscuous mode [ 716.068754][T10867] veth1_macvtap: entered promiscuous mode [ 716.133200][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.160306][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.165704][T10865] veth0_macvtap: entered promiscuous mode [ 716.182477][T10865] veth1_macvtap: entered promiscuous mode [ 716.183392][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 716.233768][T10865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.248954][T10865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.285501][T10867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.346301][T10980] FAULT_INJECTION: forcing a failure. [ 716.346301][T10980] name failslab, interval 1, probability 0, space 0, times 0 [ 716.357731][T10865] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.368158][T10865] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.375803][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 716.376924][T10865] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.391016][T10865] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.396410][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 716.421535][T10867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.466242][T10980] CPU: 0 UID: 0 PID: 10980 Comm: syz.7.1386 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 716.466266][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.466276][T10980] Call Trace: [ 716.466283][T10980] [ 716.466290][T10980] dump_stack_lvl+0x189/0x250 [ 716.466318][T10980] ? __pfx____ratelimit+0x10/0x10 [ 716.466341][T10980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.466363][T10980] ? __pfx__printk+0x10/0x10 [ 716.466380][T10980] ? __pfx___might_resched+0x10/0x10 [ 716.466408][T10980] should_fail_ex+0x414/0x560 [ 716.466430][T10980] should_failslab+0xa8/0x100 [ 716.466451][T10980] __kmalloc_cache_noprof+0x70/0x3d0 [ 716.466469][T10980] ? get_device_parent+0x255/0x3a0 [ 716.466487][T10980] get_device_parent+0x255/0x3a0 [ 716.466505][T10980] device_add+0x2e1/0xb50 [ 716.466527][T10980] ? device_initialize+0x24b/0x440 [ 716.466543][T10980] wakeup_source_sysfs_add+0x1af/0x280 [ 716.466563][T10980] wakeup_source_register+0x18a/0x380 [ 716.466590][T10980] ep_modify+0x2c9/0xb20 [ 716.466612][T10980] ? __pfx_ep_modify+0x10/0x10 [ 716.466628][T10980] ? rcu_is_watching+0x15/0xb0 [ 716.466652][T10980] ? __fget_files+0x2a/0x420 [ 716.466670][T10980] ? safesetid_security_capable+0xa9/0x1a0 [ 716.466690][T10980] ? bpf_lsm_capable+0x9/0x20 [ 716.466719][T10980] do_epoll_ctl+0x6b5/0xe90 [ 716.466743][T10980] __x64_sys_epoll_ctl+0x163/0x1a0 [ 716.466763][T10980] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 716.466781][T10980] ? rcu_is_watching+0x15/0xb0 [ 716.466806][T10980] ? do_syscall_64+0xbe/0x3b0 [ 716.466822][T10980] do_syscall_64+0xfa/0x3b0 [ 716.466834][T10980] ? lockdep_hardirqs_on+0x9c/0x150 [ 716.466855][T10980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.466870][T10980] ? clear_bhb_loop+0x60/0xb0 [ 716.466888][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.466902][T10980] RIP: 0033:0x7f0dcb38e929 [ 716.466915][T10980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.466929][T10980] RSP: 002b:00007f0dc91f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 716.466946][T10980] RAX: ffffffffffffffda RBX: 00007f0dcb5b6160 RCX: 00007f0dcb38e929 [ 716.466957][T10980] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000003 [ 716.466965][T10980] RBP: 00007f0dc91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 716.466974][T10980] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 716.466984][T10980] R13: 0000000000000001 R14: 00007f0dcb5b6160 R15: 00007ffedac25898 [ 716.467007][T10980] [ 716.773601][ T10] usb 7-1: config 2 has an invalid interface number: 69 but max is 0 [ 716.782031][ T10] usb 7-1: config 2 has no interface number 0 [ 716.790995][ T10] usb 7-1: config 2 interface 69 has no altsetting 0 [ 716.856541][T10867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.868217][T10867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.876956][T10867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.891425][T10867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.894883][ T10] usb 7-1: string descriptor 0 read error: -22 [ 716.909510][ T10] usb 7-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=9a.ea [ 716.982433][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.048545][T10987] netlink: 'syz.8.1391': attribute type 1 has an invalid length. [ 717.247473][T10989] netlink: 'syz.8.1391': attribute type 1 has an invalid length. [ 717.265981][T10989] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1391'. [ 717.350746][ T9788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.352527][ T5905] usb 7-1: USB disconnect, device number 2 [ 717.358638][ T9788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.928465][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.936378][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.107725][ T5905] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 718.340639][ T5905] usb 8-1: config 0 has an invalid interface number: 160 but max is 0 [ 718.367079][ T5905] usb 8-1: config 0 has no interface number 0 [ 718.373316][ T5905] usb 8-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 718.826943][ T5905] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 718.970571][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.125976][ T5905] usb 8-1: Product: syz [ 719.376068][ T5905] usb 8-1: Manufacturer: syz [ 719.705659][ T5905] usb 8-1: SerialNumber: syz [ 719.857104][ T5905] usb 8-1: config 0 descriptor?? [ 719.948962][ T5905] usb 8-1: Found UVC 0.00 device syz (05ac:8501) [ 719.955380][ T5905] usb 8-1: No valid video chain found. [ 719.993617][ T7287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.001311][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.002037][ T7287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.043039][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.936255][ T10] usb 8-1: USB disconnect, device number 2 [ 721.001158][T11024] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 721.007750][T11024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 721.015631][T11024] vhci_hcd vhci_hcd.0: Device attached [ 721.284212][ T5958] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 723.018236][T11029] netlink: 'syz.0.1389': attribute type 10 has an invalid length. [ 723.081493][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 723.145100][T11028] team0: No ports can be present during mode change [ 724.379720][T11029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.389036][T11029] team0: Port device bond0 added [ 724.470110][T11037] syz.6.1400: attempt to access beyond end of device [ 724.470110][T11037] nbd6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 724.833249][T11036] netlink: 'syz.9.1388': attribute type 4 has an invalid length. [ 725.021058][T11039] team0 (unregistering): Port device team_slave_0 removed [ 725.083721][T11039] team0 (unregistering): Port device team_slave_1 removed [ 725.110587][ T5891] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 725.130011][T11039] team0 (unregistering): Port device bond0 removed [ 725.294832][T11065] netlink: 'syz.6.1408': attribute type 11 has an invalid length. [ 725.724437][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1407'. [ 725.753675][ T5891] usb 8-1: config 0 has an invalid interface number: 163 but max is 0 [ 725.793507][ T5891] usb 8-1: config 0 has no interface number 0 [ 725.814880][ T5891] usb 8-1: config 0 interface 163 altsetting 0 endpoint 0xA has invalid maxpacket 27776, setting to 8 [ 725.844697][T11025] vhci_hcd: connection reset by peer [ 725.864475][ T5891] usb 8-1: config 0 interface 163 altsetting 0 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 725.878365][ T7287] vhci_hcd: stop threads [ 725.910969][ T7287] vhci_hcd: release socket [ 725.937532][ T7287] vhci_hcd: disconnect device [ 725.944588][ T5891] usb 8-1: config 0 interface 163 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 8 [ 726.281868][T11071] FAULT_INJECTION: forcing a failure. [ 726.281868][T11071] name failslab, interval 1, probability 0, space 0, times 0 [ 726.323884][T11071] CPU: 1 UID: 0 PID: 11071 Comm: syz.9.1411 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 726.323916][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 726.323929][T11071] Call Trace: [ 726.323938][T11071] [ 726.323947][T11071] dump_stack_lvl+0x189/0x250 [ 726.323983][T11071] ? __pfx____ratelimit+0x10/0x10 [ 726.324014][T11071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.324044][T11071] ? __pfx__printk+0x10/0x10 [ 726.324068][T11071] ? __pfx___might_resched+0x10/0x10 [ 726.324097][T11071] ? fs_reclaim_acquire+0x7d/0x100 [ 726.324133][T11071] should_fail_ex+0x414/0x560 [ 726.324165][T11071] should_failslab+0xa8/0x100 [ 726.324194][T11071] __kmalloc_noprof+0xcb/0x4f0 [ 726.324217][T11071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 726.324244][T11071] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 726.324302][T11071] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 726.324340][T11071] genl_family_rcv_msg_doit+0xb8/0x300 [ 726.324378][T11071] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 726.324411][T11071] ? rcu_is_watching+0x15/0xb0 [ 726.324441][T11071] ? cap_capable+0x11f/0x460 [ 726.324468][T11071] ? safesetid_security_capable+0xa9/0x1a0 [ 726.324496][T11071] ? bpf_lsm_capable+0x9/0x20 [ 726.324525][T11071] ? security_capable+0x7e/0x2e0 [ 726.324561][T11071] genl_rcv_msg+0x60e/0x790 [ 726.324598][T11071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 726.324623][T11071] ? ref_tracker_free+0x63a/0x7d0 [ 726.324647][T11071] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 726.324671][T11071] ? __pfx_nl80211_start_ap+0x10/0x10 [ 726.324698][T11071] ? __pfx_nl80211_post_doit+0x10/0x10 [ 726.324726][T11071] ? __pfx_ref_tracker_free+0x10/0x10 [ 726.324764][T11071] netlink_rcv_skb+0x208/0x470 [ 726.324788][T11071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 726.324818][T11071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 726.324859][T11071] ? down_read+0x1ad/0x2e0 [ 726.324882][T11071] genl_rcv+0x28/0x40 [ 726.324909][T11071] netlink_unicast+0x75b/0x8d0 [ 726.324941][T11071] netlink_sendmsg+0x805/0xb30 [ 726.324976][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.325002][T11071] ? irqentry_exit+0x74/0x90 [ 726.325035][T11071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 726.325059][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.325083][T11071] __sock_sendmsg+0x219/0x270 [ 726.325117][T11071] ____sys_sendmsg+0x505/0x830 [ 726.325148][T11071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.325183][T11071] ? import_iovec+0x74/0xa0 [ 726.325207][T11071] ___sys_sendmsg+0x21f/0x2a0 [ 726.325234][T11071] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.325304][T11071] ? __fget_files+0x2a/0x420 [ 726.325329][T11071] ? __fget_files+0x3a0/0x420 [ 726.325367][T11071] __x64_sys_sendmsg+0x19b/0x260 [ 726.325395][T11071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.325429][T11071] ? __pfx_ksys_write+0x10/0x10 [ 726.325449][T11071] ? rcu_is_watching+0x15/0xb0 [ 726.325483][T11071] ? do_syscall_64+0xbe/0x3b0 [ 726.325506][T11071] do_syscall_64+0xfa/0x3b0 [ 726.325522][T11071] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.325550][T11071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.325569][T11071] ? clear_bhb_loop+0x60/0xb0 [ 726.325593][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.325612][T11071] RIP: 0033:0x7f106ad8e929 [ 726.325630][T11071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.325647][T11071] RSP: 002b:00007f106bc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.325668][T11071] RAX: ffffffffffffffda RBX: 00007f106afb5fa0 RCX: 00007f106ad8e929 [ 726.325682][T11071] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 726.325694][T11071] RBP: 00007f106bc48090 R08: 0000000000000000 R09: 0000000000000000 [ 726.325705][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.325716][T11071] R13: 0000000000000000 R14: 00007f106afb5fa0 R15: 00007fff600c8018 [ 726.325765][T11071] [ 726.710442][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.721113][ T5905] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 726.853846][ T5958] vhci_hcd: vhci_device speed not set [ 726.900239][ T5905] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 726.910328][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.940401][ T5905] usb 9-1: config 0 descriptor?? [ 727.002287][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 728.524664][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 728.547995][ T10] usb 7-1: config index 0 descriptor too short (expected 31494, got 18) [ 728.742286][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.765558][ T5891] usb 8-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.01 [ 728.783868][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.794482][ T10] usb 7-1: config 0 has no interfaces? [ 728.814747][ T10] usb 7-1: config index 1 descriptor too short (expected 31494, got 18) [ 728.860511][ T5905] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 728.872614][ T5891] usb 8-1: config 0 descriptor?? [ 729.010967][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.025480][ T5891] usb 8-1: can't set config #0, error -71 [ 729.032530][ T5905] [drm:udl_init] *ERROR* Selecting channel failed [ 729.040292][ T5891] usb 8-1: USB disconnect, device number 3 [ 729.054782][ T10] usb 7-1: config 0 has no interfaces? [ 729.069777][ T10] usb 7-1: config index 2 descriptor too short (expected 31494, got 18) [ 729.075686][T11085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 729.084225][ T5905] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 729.104920][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.125404][ T5905] [drm] Initialized udl on minor 2 [ 729.130807][ T10] usb 7-1: config 0 has no interfaces? [ 729.139259][ T5905] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 729.163360][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 729.177064][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.186549][ T5905] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 729.194030][ T10] usb 7-1: Product: syz [ 729.202682][ T5838] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 729.229978][ T10] usb 7-1: Manufacturer: syz [ 729.234649][ T10] usb 7-1: SerialNumber: syz [ 729.239956][ T5905] usb 9-1: USB disconnect, device number 2 [ 729.248726][ T5838] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 729.260953][ T10] usb 7-1: config 0 descriptor?? [ 729.432789][T10765] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 729.559095][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000000 [ 729.568645][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x60000000000 [ 729.578369][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000080 [ 729.590237][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x60000000080 [ 729.609692][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000000 [ 729.619398][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x60000000000 [ 729.629727][T10765] usb 10-1: Using ep0 maxpacket: 32 [ 729.646103][T10765] usb 10-1: config 0 has an invalid interface number: 63 but max is 0 [ 729.656666][T10765] usb 10-1: config 0 has no interface number 0 [ 729.663394][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000080 [ 729.672960][T10765] usb 10-1: config 0 interface 63 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 729.684404][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x60000000080 [ 729.693811][T10765] usb 10-1: config 0 interface 63 has no altsetting 0 [ 729.702906][T11101] FAULT_INJECTION: forcing a failure. [ 729.702906][T11101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.703309][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000000 [ 729.729083][T11101] CPU: 0 UID: 0 PID: 11101 Comm: syz.8.1421 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 729.729114][T11101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.729127][T11101] Call Trace: [ 729.729136][T11101] [ 729.729146][T11101] dump_stack_lvl+0x189/0x250 [ 729.729182][T11101] ? __pfx____ratelimit+0x10/0x10 [ 729.729214][T11101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.729243][T11101] ? __pfx__printk+0x10/0x10 [ 729.729265][T11101] ? __might_fault+0xb0/0x130 [ 729.729303][T11101] should_fail_ex+0x414/0x560 [ 729.729334][T11101] _copy_from_user+0x2d/0xb0 [ 729.729356][T11101] snd_pcm_oss_write+0x84f/0x11a0 [ 729.729386][T11101] ? get_pid_task+0x20/0x1f0 [ 729.729427][T11101] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 729.729459][T11101] ? bpf_lsm_file_permission+0x9/0x20 [ 729.729486][T11101] ? security_file_permission+0x75/0x290 [ 729.729515][T11101] ? rw_verify_area+0x258/0x650 [ 729.729538][T11101] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 729.729571][T11101] vfs_write+0x27e/0xa90 [ 729.729604][T11101] ? __pfx_vfs_write+0x10/0x10 [ 729.729630][T11101] ? __fget_files+0x2a/0x420 [ 729.729661][T11101] ? __fget_files+0x2a/0x420 [ 729.729686][T11101] ? __fget_files+0x3a0/0x420 [ 729.729712][T11101] ? __fget_files+0x2a/0x420 [ 729.729749][T11101] ksys_write+0x145/0x250 [ 729.729784][T11101] ? __pfx_ksys_write+0x10/0x10 [ 729.729804][T11101] ? rcu_is_watching+0x15/0xb0 [ 729.729841][T11101] ? do_syscall_64+0xbe/0x3b0 [ 729.729863][T11101] do_syscall_64+0xfa/0x3b0 [ 729.729881][T11101] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.729910][T11101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.729931][T11101] ? clear_bhb_loop+0x60/0xb0 [ 729.729957][T11101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.729977][T11101] RIP: 0033:0x7f07d938e929 [ 729.729995][T11101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.730014][T11101] RSP: 002b:00007f07da219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.730037][T11101] RAX: ffffffffffffffda RBX: 00007f07d95b5fa0 RCX: 00007f07d938e929 [ 729.730053][T11101] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003 [ 729.730067][T11101] RBP: 00007f07da219090 R08: 0000000000000000 R09: 0000000000000000 [ 729.730081][T11101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.730093][T11101] R13: 0000000000000000 R14: 00007f07d95b5fa0 R15: 00007ffc32b634d8 [ 729.730139][T11101] [ 729.989065][T11073] kvm: kvm [11072]: vcpu2, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x60000000000 [ 730.043590][T10765] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=40.69 [ 730.053151][T10765] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.061632][T10765] usb 10-1: Product: syz [ 730.065928][T10765] usb 10-1: Manufacturer: syz [ 730.070732][T10765] usb 10-1: SerialNumber: syz [ 730.098742][T10765] usb 10-1: config 0 descriptor?? [ 730.106277][T10765] kvaser_usb 10-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 730.385228][T11092] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1417'. [ 730.594371][ T5838] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 730.758556][ T5838] usb 9-1: device descriptor read/64, error -71 [ 730.765630][ T5905] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 730.774874][ T9776] usb 7-1: USB disconnect, device number 3 [ 731.070155][T11114] netlink: 'syz.6.1426': attribute type 11 has an invalid length. [ 731.188803][ T5838] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 731.589258][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.605926][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.631250][ T5905] usb 8-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 731.645968][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.660801][ T5905] usb 8-1: config 0 descriptor?? [ 731.717220][ T5838] usb 9-1: device descriptor read/64, error -71 [ 731.835617][ T5838] usb usb9-port1: attempt power cycle [ 732.321731][ T5905] wacom 0003:056A:00F4.0015: ignoring exceeding usage max [ 732.360332][ T5905] wacom 0003:056A:00F4.0015: item fetching failed at offset 8/11 [ 732.379776][ T5838] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 732.398444][T11117] netlink: 'syz.0.1427': attribute type 11 has an invalid length. [ 732.424501][ T5905] wacom 0003:056A:00F4.0015: parse failed [ 732.430784][ T5838] usb 9-1: device descriptor read/8, error -71 [ 732.435900][ T43] usb 10-1: USB disconnect, device number 2 [ 732.453723][ T5905] wacom 0003:056A:00F4.0015: probe with driver wacom failed with error -22 [ 733.415558][ T5838] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 733.470801][ T5838] usb 9-1: device descriptor read/8, error -71 [ 733.588841][ T5838] usb usb9-port1: unable to enumerate USB device [ 733.621053][ T43] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 733.907501][T10958] usb 8-1: USB disconnect, device number 4 [ 733.951905][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 733.983065][ T43] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 734.065898][ T43] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 734.086572][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.100699][ T43] usb 10-1: Product: syz [ 734.105043][ T43] usb 10-1: Manufacturer: syz [ 734.119770][ T43] usb 10-1: SerialNumber: syz [ 734.144507][ T43] usb 10-1: config 0 descriptor?? [ 734.175028][ T43] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 734.949009][ T43] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 735.301411][ T5838] usb 10-1: USB disconnect, device number 3 [ 735.591377][T11154] netlink: 'syz.0.1440': attribute type 10 has an invalid length. [ 735.655889][T11154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.687432][T11154] sctp: [Deprecated]: syz.0.1440 (pid 11154) Use of int in max_burst socket option. [ 735.687432][T11154] Use struct sctp_assoc_value instead [ 736.260686][ T9776] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 736.517089][ T9776] usb 10-1: Invalid ep0 maxpacket: 64 [ 736.577435][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1445'. [ 736.719990][ T9776] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 736.893545][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1447'. [ 736.955262][ T9776] usb 10-1: Invalid ep0 maxpacket: 64 [ 736.972763][ T9776] usb usb10-port1: attempt power cycle [ 737.070312][ T1161] hsr_slave_0: left promiscuous mode [ 737.103440][ T1161] hsr_slave_1: left promiscuous mode [ 737.127681][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.155074][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.175637][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.194110][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.281635][ T1161] hsr_slave_0: left promiscuous mode [ 737.317582][ T1161] hsr_slave_1: left promiscuous mode [ 737.340337][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.363794][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.372067][ T9776] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 737.380938][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.389116][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.549755][ T1161] hsr_slave_0: left promiscuous mode [ 737.594224][ T1161] hsr_slave_1: left promiscuous mode [ 737.621217][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.650040][ T9776] usb 10-1: Invalid ep0 maxpacket: 64 [ 737.669016][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.715078][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.741047][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.778501][ T1161] hsr_slave_0: left promiscuous mode [ 737.788055][ T1161] hsr_slave_1: left promiscuous mode [ 737.808265][ T9776] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 737.815205][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.828462][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.846955][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.860184][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.868590][ T9776] usb 10-1: Invalid ep0 maxpacket: 64 [ 737.887699][ T9776] usb usb10-port1: unable to enumerate USB device [ 737.955673][T11193] 9pnet_fd: Insufficient options for proto=fd [ 737.972235][T11193] mmap: syz.6.1451 (11193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 738.072454][ T1161] veth1_to_batadv: left promiscuous mode [ 738.087166][ T1161] veth1_macvtap: left promiscuous mode [ 738.097882][ T1161] veth0_macvtap: left promiscuous mode [ 738.112594][ T1161] veth1_vlan: left promiscuous mode [ 738.118901][ T1161] veth0_vlan: left promiscuous mode [ 738.138456][ T1161] team0: left promiscuous mode [ 738.150807][ T1161] team_slave_0: left promiscuous mode [ 738.172809][ T1161] team_slave_1: left promiscuous mode [ 738.180795][ T1161] veth1_macvtap: left promiscuous mode [ 738.193152][ T1161] veth0_macvtap: left promiscuous mode [ 738.199259][ T1161] veth1_vlan: left promiscuous mode [ 738.217473][ T1161] veth0_vlan: left promiscuous mode [ 738.242706][ T1161] dummy0: left allmulticast mode [ 738.265562][ T1161] veth1_macvtap: left promiscuous mode [ 738.281708][ T1161] veth0_macvtap: left promiscuous mode [ 738.287397][ T1161] veth1_vlan: left promiscuous mode [ 738.303049][ T1161] veth0_vlan: left promiscuous mode [ 738.335773][ T1161] veth1_macvtap: left promiscuous mode [ 738.351711][ T1161] veth0_macvtap: left promiscuous mode [ 738.370978][ T1161] veth1_vlan: left promiscuous mode [ 738.389319][ T1161] veth0_vlan: left promiscuous mode [ 740.116740][T11197] netlink: 'syz.9.1452': attribute type 5 has an invalid length. [ 740.126873][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1452'. [ 740.319895][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 740.372565][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 741.280960][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 741.331109][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 742.229825][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 742.275944][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 743.090576][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 743.136932][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 744.102604][T11202] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1453'. [ 744.594663][T11210] netlink: 'syz.6.1455': attribute type 11 has an invalid length. [ 747.442150][T11241] Driver unsupported XDP return value 0 on prog (id 300) dev N/A, expect packet loss! [ 748.078374][T11250] netlink: 2980 bytes leftover after parsing attributes in process `syz.6.1469'. [ 748.997676][ T1161] IPVS: stop unused estimator thread 0... [ 749.021383][ T1161] IPVS: stop unused estimator thread 0... [ 749.078450][ T978] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 749.293587][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 749.336295][ T978] usb 7-1: Using ep0 maxpacket: 32 [ 749.384320][ T978] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.581863][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 749.622908][ T43] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.804490][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 749.846792][ T43] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.988688][ T978] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 750.005059][ T43] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.080726][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.105176][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.229536][T11269] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 750.230199][ T978] usb 7-1: config 0 descriptor?? [ 750.258145][ T43] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.288603][T11263] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 750.299016][ T978] hub 7-1:0.0: USB hub found [ 750.577829][ T978] hub 7-1:0.0: 2 ports detected [ 750.717687][T10958] usb 8-1: USB disconnect, device number 5 [ 750.993172][ T9776] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 751.367690][ T9776] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 751.398264][ T9776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.417418][ T9776] usb 1-1: Product: syz [ 751.423806][ T9776] usb 1-1: Manufacturer: syz [ 751.439706][ T9776] usb 1-1: SerialNumber: syz [ 751.614463][ T978] usb 7-1: USB disconnect, device number 4 [ 751.697118][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.719039][ T5891] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 751.762084][T11287] @: renamed from vlan0 (while UP) [ 751.770718][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.837660][ T9776] gspca_main: pac207-2.14.0 probing 093a:2476 [ 751.846830][ T9776] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 751.863335][ T9776] usb 1-1: Found UVC 0.00 device syz (093a:2476) [ 751.873479][ T9776] usb 1-1: No valid video chain found. [ 751.882570][ T9776] usb 1-1: USB disconnect, device number 37 [ 751.924052][ T5891] usb 9-1: config 0 has no interfaces? [ 751.931995][ T5891] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 751.947553][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.010358][ T5891] usb 9-1: config 0 descriptor?? [ 752.082558][ T5905] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 752.242741][ T5905] usb 8-1: Using ep0 maxpacket: 32 [ 752.255398][ T5905] usb 8-1: config 0 has an invalid interface number: 211 but max is 0 [ 752.275217][ T5905] usb 8-1: config 0 has no interface number 0 [ 752.441871][T11294] random: crng reseeded on system resumption [ 752.504726][ T5905] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 3.f9 [ 752.514125][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.528430][ T5905] usb 8-1: Product: syz [ 752.532716][ T5905] usb 8-1: Manufacturer: syz [ 752.537364][ T5905] usb 8-1: SerialNumber: syz [ 752.545675][ T5905] usb 8-1: config 0 descriptor?? [ 753.011046][ T5905] mdc800 8-1:0.211: probe fails -> wrong Interface [ 753.227121][ T5905] usb 8-1: USB disconnect, device number 6 [ 753.399231][T11310] FAULT_INJECTION: forcing a failure. [ 753.399231][T11310] name failslab, interval 1, probability 0, space 0, times 0 [ 753.426732][T11310] CPU: 1 UID: 0 PID: 11310 Comm: syz.9.1486 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 753.426764][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 753.426777][T11310] Call Trace: [ 753.426786][T11310] [ 753.426803][T11310] dump_stack_lvl+0x189/0x250 [ 753.426840][T11310] ? __pfx____ratelimit+0x10/0x10 [ 753.426871][T11310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.426902][T11310] ? __pfx__printk+0x10/0x10 [ 753.426925][T11310] ? __pfx___might_resched+0x10/0x10 [ 753.426956][T11310] ? fs_reclaim_acquire+0x7d/0x100 [ 753.426991][T11310] should_fail_ex+0x414/0x560 [ 753.427023][T11310] should_failslab+0xa8/0x100 [ 753.427052][T11310] __kmalloc_cache_noprof+0x70/0x3d0 [ 753.427077][T11310] ? tcf_chain_create+0xb0/0x310 [ 753.427109][T11310] tcf_chain_create+0xb0/0x310 [ 753.427141][T11310] __tcf_chain_get+0x111/0x3c0 [ 753.427168][T11310] tc_new_tfilter+0x753/0x15b0 [ 753.427208][T11310] ? __local_bh_enable_ip+0x12d/0x1c0 [ 753.427252][T11310] ? __pfx_tc_new_tfilter+0x10/0x10 [ 753.427277][T11310] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 753.427345][T11310] ? __pfx_tc_new_tfilter+0x10/0x10 [ 753.427372][T11310] rtnetlink_rcv_msg+0x7cc/0xb70 [ 753.427398][T11310] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 753.427419][T11310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.427438][T11310] ? ref_tracker_free+0x63a/0x7d0 [ 753.427463][T11310] ? __copy_skb_header+0xa7/0x550 [ 753.427492][T11310] ? __pfx_ref_tracker_free+0x10/0x10 [ 753.427520][T11310] ? __skb_clone+0x63/0x7a0 [ 753.427556][T11310] netlink_rcv_skb+0x208/0x470 [ 753.427582][T11310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.427604][T11310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.427644][T11310] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.427667][T11310] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.427698][T11310] netlink_unicast+0x75b/0x8d0 [ 753.427732][T11310] netlink_sendmsg+0x805/0xb30 [ 753.427769][T11310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.427812][T11310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.427838][T11310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.427864][T11310] __sock_sendmsg+0x219/0x270 [ 753.427900][T11310] ____sys_sendmsg+0x505/0x830 [ 753.427934][T11310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.427972][T11310] ? import_iovec+0x74/0xa0 [ 753.427997][T11310] ___sys_sendmsg+0x21f/0x2a0 [ 753.428026][T11310] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.428091][T11310] ? __fget_files+0x2a/0x420 [ 753.428119][T11310] ? __fget_files+0x3a0/0x420 [ 753.428159][T11310] __x64_sys_sendmsg+0x19b/0x260 [ 753.428189][T11310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 753.428239][T11310] ? __pfx_ksys_write+0x10/0x10 [ 753.428268][T11310] ? do_syscall_64+0xbe/0x3b0 [ 753.428292][T11310] do_syscall_64+0xfa/0x3b0 [ 753.428309][T11310] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.428338][T11310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.428359][T11310] ? clear_bhb_loop+0x60/0xb0 [ 753.428384][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.428405][T11310] RIP: 0033:0x7f106ad8e929 [ 753.428424][T11310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.428461][T11310] RSP: 002b:00007f106bc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.428484][T11310] RAX: ffffffffffffffda RBX: 00007f106afb5fa0 RCX: 00007f106ad8e929 [ 753.428500][T11310] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000004 [ 753.428515][T11310] RBP: 00007f106bc48090 R08: 0000000000000000 R09: 0000000000000000 [ 753.428529][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.428542][T11310] R13: 0000000000000000 R14: 00007f106afb5fa0 R15: 00007fff600c8018 [ 753.428584][T11310] [ 754.082341][ T9776] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 754.283216][ T9776] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.307578][ T9776] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.318301][ T9776] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 754.328053][ T9776] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.287213][ T9776] usb 8-1: config 0 descriptor?? [ 755.393886][ T5905] usb 9-1: USB disconnect, device number 7 [ 756.212176][T11327] block nbd9: shutting down sockets [ 756.390683][T10958] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 756.644587][T10958] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 756.654148][T10958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.662885][T10958] usb 7-1: Product: syz [ 756.667356][T10958] usb 7-1: Manufacturer: syz [ 756.672176][T10958] usb 7-1: SerialNumber: syz [ 756.837811][T11348] FAULT_INJECTION: forcing a failure. [ 756.837811][T11348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.851352][T11348] CPU: 0 UID: 0 PID: 11348 Comm: syz.9.1498 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 756.851382][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.851395][T11348] Call Trace: [ 756.851405][T11348] [ 756.851414][T11348] dump_stack_lvl+0x189/0x250 [ 756.851449][T11348] ? __pfx____ratelimit+0x10/0x10 [ 756.851480][T11348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.851510][T11348] ? __pfx__printk+0x10/0x10 [ 756.851544][T11348] should_fail_ex+0x414/0x560 [ 756.851575][T11348] _copy_from_user+0x2d/0xb0 [ 756.851597][T11348] copy_folio_from_user+0x1e4/0x320 [ 756.851630][T11348] mfill_atomic_copy+0xf94/0x12f0 [ 756.851679][T11348] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 756.851723][T11348] userfaultfd_ioctl+0x29ba/0x4bc0 [ 756.851754][T11348] ? do_syscall_64+0xfa/0x3b0 [ 756.851770][T11348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.851803][T11348] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 756.851838][T11348] ? do_vfs_ioctl+0x12ba/0x1990 [ 756.851863][T11348] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 756.851892][T11348] ? kasan_quarantine_put+0xdd/0x220 [ 756.851925][T11348] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 756.851953][T11348] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 756.851980][T11348] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 756.852004][T11348] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 756.852032][T11348] ? smack_log+0xef/0x3f0 [ 756.852053][T11348] ? __pfx_smack_log+0x10/0x10 [ 756.852074][T11348] ? smk_access+0x14c/0x4e0 [ 756.852101][T11348] ? smk_tskacc+0x2fc/0x370 [ 756.852126][T11348] ? smack_file_ioctl+0x2a9/0x340 [ 756.852153][T11348] ? __pfx_smack_file_ioctl+0x10/0x10 [ 756.852188][T11348] ? __fget_files+0x2a/0x420 [ 756.852214][T11348] ? __fget_files+0x3a0/0x420 [ 756.852240][T11348] ? __fget_files+0x2a/0x420 [ 756.852270][T11348] ? bpf_lsm_file_ioctl+0x9/0x20 [ 756.852299][T11348] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 756.852323][T11348] __se_sys_ioctl+0xfc/0x170 [ 756.852353][T11348] do_syscall_64+0xfa/0x3b0 [ 756.852375][T11348] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.852406][T11348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.852426][T11348] ? clear_bhb_loop+0x60/0xb0 [ 756.852452][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.852472][T11348] RIP: 0033:0x7f106ad8e929 [ 756.852491][T11348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.852509][T11348] RSP: 002b:00007f106bc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.852531][T11348] RAX: ffffffffffffffda RBX: 00007f106afb6080 RCX: 00007f106ad8e929 [ 756.852547][T11348] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 000000000000000b [ 756.852560][T11348] RBP: 00007f106bc27090 R08: 0000000000000000 R09: 0000000000000000 [ 756.852573][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.852585][T11348] R13: 0000000000000000 R14: 00007f106afb6080 R15: 00007fff600c8018 [ 756.852617][T11348] [ 757.152653][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.400021][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.411635][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.818410][T10958] gspca_main: pac207-2.14.0 probing 093a:2476 [ 757.831085][T10958] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 757.865977][T10958] usb 7-1: Found UVC 0.00 device syz (093a:2476) [ 757.872981][T10958] usb 7-1: No valid video chain found. [ 757.881526][T10958] usb 7-1: USB disconnect, device number 5 [ 757.890964][ T9776] usb 8-1: string descriptor 0 read error: -71 [ 757.898102][ T9776] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 757.930325][ T9776] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 757.938545][ T9776] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 757.959494][ T9776] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 757.967824][ T9776] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 758.043138][ T9776] usb 8-1: USB disconnect, device number 7 [ 758.182326][T11359] FAULT_INJECTION: forcing a failure. [ 758.182326][T11359] name failslab, interval 1, probability 0, space 0, times 0 [ 758.217315][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 758.269853][T11359] CPU: 1 UID: 0 PID: 11359 Comm: syz.8.1502 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 758.269887][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 758.269905][T11359] Call Trace: [ 758.269915][T11359] [ 758.269925][T11359] dump_stack_lvl+0x189/0x250 [ 758.269961][T11359] ? __pfx____ratelimit+0x10/0x10 [ 758.269993][T11359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.270024][T11359] ? __pfx__printk+0x10/0x10 [ 758.270053][T11359] ? __pfx___might_resched+0x10/0x10 [ 758.270082][T11359] ? fs_reclaim_acquire+0x7d/0x100 [ 758.270119][T11359] should_fail_ex+0x414/0x560 [ 758.270151][T11359] should_failslab+0xa8/0x100 [ 758.270181][T11359] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 758.270209][T11359] ? __alloc_skb+0x112/0x2d0 [ 758.270237][T11359] __alloc_skb+0x112/0x2d0 [ 758.270273][T11359] netlink_ack+0x146/0xa50 [ 758.270316][T11359] netlink_rcv_skb+0x28c/0x470 [ 758.270342][T11359] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 758.270376][T11359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.270413][T11359] ? bpf_lsm_capable+0x9/0x20 [ 758.270443][T11359] ? security_capable+0x7e/0x2e0 [ 758.270482][T11359] nfnetlink_rcv+0x26a/0x2520 [ 758.270516][T11359] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 758.270550][T11359] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 758.270577][T11359] ? __dev_queue_xmit+0x27e/0x3a70 [ 758.270606][T11359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.270638][T11359] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 758.270668][T11359] ? __pfx___dev_queue_xmit+0x10/0x10 [ 758.270711][T11359] ? ref_tracker_free+0x63a/0x7d0 [ 758.270737][T11359] ? __copy_skb_header+0xa7/0x550 [ 758.270765][T11359] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.270792][T11359] ? __skb_clone+0x63/0x7a0 [ 758.270822][T11359] ? __skb_clone+0x483/0x7a0 [ 758.270856][T11359] ? skb_clone+0x246/0x3a0 [ 758.270886][T11359] ? __netlink_deliver_tap+0x807/0x850 [ 758.270909][T11359] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.270939][T11359] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.270962][T11359] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.270992][T11359] netlink_unicast+0x75b/0x8d0 [ 758.271025][T11359] netlink_sendmsg+0x805/0xb30 [ 758.271059][T11359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.271092][T11359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.271116][T11359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.271141][T11359] __sock_sendmsg+0x219/0x270 [ 758.271176][T11359] ____sys_sendmsg+0x505/0x830 [ 758.271208][T11359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.271245][T11359] ? import_iovec+0x74/0xa0 [ 758.271279][T11359] ___sys_sendmsg+0x21f/0x2a0 [ 758.271308][T11359] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.271374][T11359] ? __fget_files+0x2a/0x420 [ 758.271402][T11359] ? __fget_files+0x3a0/0x420 [ 758.271441][T11359] __x64_sys_sendmsg+0x19b/0x260 [ 758.271470][T11359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 758.271519][T11359] ? __pfx_ksys_write+0x10/0x10 [ 758.271540][T11359] ? rcu_is_watching+0x15/0xb0 [ 758.271575][T11359] ? do_syscall_64+0xbe/0x3b0 [ 758.271598][T11359] do_syscall_64+0xfa/0x3b0 [ 758.271615][T11359] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.271645][T11359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.271665][T11359] ? clear_bhb_loop+0x60/0xb0 [ 758.271691][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.271711][T11359] RIP: 0033:0x7f07d938e929 [ 758.271730][T11359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.271748][T11359] RSP: 002b:00007f07da219038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.271771][T11359] RAX: ffffffffffffffda RBX: 00007f07d95b5fa0 RCX: 00007f07d938e929 [ 758.271787][T11359] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 758.271801][T11359] RBP: 00007f07da219090 R08: 0000000000000000 R09: 0000000000000000 [ 758.271814][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.271826][T11359] R13: 0000000000000000 R14: 00007f07d95b5fa0 R15: 00007ffc32b634d8 [ 758.271857][T11359] [ 759.127506][ T9776] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 759.320019][ T9776] usb 1-1: Using ep0 maxpacket: 32 [ 759.391195][ T9776] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 759.438567][ T9776] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 759.458659][ T9776] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 759.467411][ T9776] usb 1-1: Product: syz [ 759.509893][ T9776] usb 1-1: Manufacturer: syz [ 759.522424][ T9776] usb 1-1: SerialNumber: syz [ 759.652952][ T9776] usb 1-1: config 0 descriptor?? [ 759.659060][T11369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 759.828246][T11380] FAULT_INJECTION: forcing a failure. [ 759.828246][T11380] name failslab, interval 1, probability 0, space 0, times 0 [ 759.841820][T11380] CPU: 0 UID: 0 PID: 11380 Comm: syz.9.1510 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 759.841852][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.841865][T11380] Call Trace: [ 759.841874][T11380] [ 759.841883][T11380] dump_stack_lvl+0x189/0x250 [ 759.841919][T11380] ? __pfx____ratelimit+0x10/0x10 [ 759.841969][T11380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.842000][T11380] ? __pfx__printk+0x10/0x10 [ 759.842028][T11380] ? __pfx___might_resched+0x10/0x10 [ 759.842058][T11380] ? fs_reclaim_acquire+0x7d/0x100 [ 759.842093][T11380] should_fail_ex+0x414/0x560 [ 759.842138][T11380] should_failslab+0xa8/0x100 [ 759.842167][T11380] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 759.842193][T11380] ? __alloc_skb+0x112/0x2d0 [ 759.842221][T11380] __alloc_skb+0x112/0x2d0 [ 759.842248][T11380] netlink_ack+0x146/0xa50 [ 759.842308][T11380] netlink_rcv_skb+0x28c/0x470 [ 759.842333][T11380] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 759.842367][T11380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.842416][T11380] ? bpf_lsm_capable+0x9/0x20 [ 759.842444][T11380] ? security_capable+0x7e/0x2e0 [ 759.842509][T11380] nfnetlink_rcv+0x26a/0x2520 [ 759.842544][T11380] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 759.842578][T11380] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 759.842606][T11380] ? __dev_queue_xmit+0x27e/0x3a70 [ 759.842635][T11380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.842669][T11380] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 759.842700][T11380] ? __pfx___dev_queue_xmit+0x10/0x10 [ 759.842744][T11380] ? ref_tracker_free+0x63a/0x7d0 [ 759.842770][T11380] ? __copy_skb_header+0xa7/0x550 [ 759.842800][T11380] ? __pfx_ref_tracker_free+0x10/0x10 [ 759.842826][T11380] ? __skb_clone+0x63/0x7a0 [ 759.842858][T11380] ? __skb_clone+0x483/0x7a0 [ 759.842892][T11380] ? skb_clone+0x246/0x3a0 [ 759.842923][T11380] ? __netlink_deliver_tap+0x807/0x850 [ 759.842947][T11380] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.842978][T11380] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.843001][T11380] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.843032][T11380] netlink_unicast+0x75b/0x8d0 [ 759.843065][T11380] netlink_sendmsg+0x805/0xb30 [ 759.843101][T11380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.843135][T11380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.843160][T11380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.843185][T11380] __sock_sendmsg+0x219/0x270 [ 759.843220][T11380] ____sys_sendmsg+0x505/0x830 [ 759.843253][T11380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.843290][T11380] ? import_iovec+0x74/0xa0 [ 759.843315][T11380] ___sys_sendmsg+0x21f/0x2a0 [ 759.843344][T11380] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.843410][T11380] ? __fget_files+0x2a/0x420 [ 759.843442][T11380] ? __fget_files+0x3a0/0x420 [ 759.843487][T11380] __x64_sys_sendmsg+0x19b/0x260 [ 759.843517][T11380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.843554][T11380] ? __pfx_ksys_write+0x10/0x10 [ 759.843576][T11380] ? rcu_is_watching+0x15/0xb0 [ 759.843612][T11380] ? do_syscall_64+0xbe/0x3b0 [ 759.843635][T11380] do_syscall_64+0xfa/0x3b0 [ 759.843652][T11380] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.843683][T11380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.843716][T11380] ? clear_bhb_loop+0x60/0xb0 [ 759.843741][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.843762][T11380] RIP: 0033:0x7f106ad8e929 [ 759.843780][T11380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.843797][T11380] RSP: 002b:00007f106bc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.843818][T11380] RAX: ffffffffffffffda RBX: 00007f106afb5fa0 RCX: 00007f106ad8e929 [ 759.843833][T11380] RDX: 0000000004000080 RSI: 0000200000000480 RDI: 0000000000000003 [ 759.843847][T11380] RBP: 00007f106bc48090 R08: 0000000000000000 R09: 0000000000000000 [ 759.843860][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.843873][T11380] R13: 0000000000000000 R14: 00007f106afb5fa0 R15: 00007fff600c8018 [ 759.843905][T11380] [ 759.963556][T10958] usb 1-1: USB disconnect, device number 38 [ 759.966140][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.245488][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.351613][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.422121][ T5891] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 760.430499][T10765] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 760.608536][T10765] usb 8-1: Using ep0 maxpacket: 32 [ 760.611699][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.628223][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.638378][ T5891] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 760.647679][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.687778][ T5891] usb 7-1: config 0 descriptor?? [ 760.729276][T10765] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 760.784888][T10765] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9026, setting to 1024 [ 760.876337][T10765] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 760.886192][T10765] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.894492][T10765] usb 8-1: Product:   [ 760.915869][T10765] usb 8-1: Manufacturer: à°š [ 761.156828][T10765] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 761.178099][T10765] usb 8-1: USB disconnect, device number 8 [ 762.634508][ T5891] usb 7-1: string descriptor 0 read error: -71 [ 762.670430][ T5891] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71 [ 762.691982][ T5891] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 762.704562][ T5891] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71 [ 762.712894][ T5891] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 762.725417][ T5891] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 762.757068][ T5891] usb 7-1: USB disconnect, device number 6 [ 762.978001][ T5905] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 763.301561][T11413] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1522'. [ 763.353192][ T5905] usb 8-1: device descriptor read/64, error -71 [ 763.674949][ T5905] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 763.773943][T11420] netlink: 'syz.8.1524': attribute type 11 has an invalid length. [ 764.240194][ T5905] usb 8-1: device descriptor read/64, error -71 [ 764.497955][ T5905] usb usb8-port1: attempt power cycle [ 764.527718][T11421] netlink: 'syz.6.1525': attribute type 11 has an invalid length. [ 764.692530][T11427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1528'. [ 764.749233][T11427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1528'. [ 764.879089][ T5905] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 764.915356][ T5905] usb 8-1: device descriptor read/8, error -71 [ 765.163484][T11437] netlink: 'syz.9.1530': attribute type 11 has an invalid length. [ 765.185222][T11434] @: renamed from vlan0 (while UP) [ 765.257040][ T5905] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 765.278340][T10765] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 765.281427][T11439] FAULT_INJECTION: forcing a failure. [ 765.281427][T11439] name failslab, interval 1, probability 0, space 0, times 0 [ 765.472202][ T5905] usb 8-1: device descriptor read/8, error -71 [ 765.513851][T11439] CPU: 0 UID: 0 PID: 11439 Comm: syz.6.1532 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 765.513881][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 765.513893][T11439] Call Trace: [ 765.513901][T11439] [ 765.513910][T11439] dump_stack_lvl+0x189/0x250 [ 765.513944][T11439] ? __pfx____ratelimit+0x10/0x10 [ 765.513974][T11439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.514002][T11439] ? __pfx__printk+0x10/0x10 [ 765.514045][T11439] ? __pfx___might_resched+0x10/0x10 [ 765.514071][T11439] ? fs_reclaim_acquire+0x7d/0x100 [ 765.514106][T11439] should_fail_ex+0x414/0x560 [ 765.514145][T11439] should_failslab+0xa8/0x100 [ 765.514175][T11439] kmem_cache_alloc_noprof+0x73/0x3c0 [ 765.514198][T11439] ? skb_clone+0x212/0x3a0 [ 765.514230][T11439] skb_clone+0x212/0x3a0 [ 765.514256][T11439] ? nfnetlink_rcv+0x486/0x2520 [ 765.514290][T11439] nfnetlink_rcv+0x4b4/0x2520 [ 765.514324][T11439] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 765.514358][T11439] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 765.514386][T11439] ? __dev_queue_xmit+0x27e/0x3a70 [ 765.514414][T11439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.514446][T11439] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 765.514494][T11439] ? ref_tracker_free+0x63a/0x7d0 [ 765.514520][T11439] ? __copy_skb_header+0xa7/0x550 [ 765.514549][T11439] ? __pfx_ref_tracker_free+0x10/0x10 [ 765.514577][T11439] ? __skb_clone+0x63/0x7a0 [ 765.514608][T11439] ? __skb_clone+0x483/0x7a0 [ 765.514641][T11439] ? skb_clone+0x246/0x3a0 [ 765.514672][T11439] ? __netlink_deliver_tap+0x807/0x850 [ 765.514696][T11439] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.514726][T11439] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.514749][T11439] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.514779][T11439] netlink_unicast+0x75b/0x8d0 [ 765.514809][T11439] netlink_sendmsg+0x805/0xb30 [ 765.514842][T11439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.514875][T11439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 765.514900][T11439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.514925][T11439] __sock_sendmsg+0x219/0x270 [ 765.514961][T11439] ____sys_sendmsg+0x505/0x830 [ 765.514993][T11439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.515030][T11439] ? import_iovec+0x74/0xa0 [ 765.515055][T11439] ___sys_sendmsg+0x21f/0x2a0 [ 765.515084][T11439] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.515153][T11439] ? __fget_files+0x2a/0x420 [ 765.515180][T11439] ? __fget_files+0x3a0/0x420 [ 765.515217][T11439] __x64_sys_sendmsg+0x19b/0x260 [ 765.515245][T11439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 765.515281][T11439] ? __pfx_ksys_write+0x10/0x10 [ 765.515303][T11439] ? rcu_is_watching+0x15/0xb0 [ 765.515338][T11439] ? do_syscall_64+0xbe/0x3b0 [ 765.515362][T11439] do_syscall_64+0xfa/0x3b0 [ 765.515379][T11439] ? lockdep_hardirqs_on+0x9c/0x150 [ 765.515408][T11439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.515428][T11439] ? clear_bhb_loop+0x60/0xb0 [ 765.515454][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.515474][T11439] RIP: 0033:0x7f6832d8e929 [ 765.515494][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.515512][T11439] RSP: 002b:00007f6833c11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.515548][T11439] RAX: ffffffffffffffda RBX: 00007f6832fb5fa0 RCX: 00007f6832d8e929 [ 765.515563][T11439] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 765.515577][T11439] RBP: 00007f6833c11090 R08: 0000000000000000 R09: 0000000000000000 [ 765.515590][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.515602][T11439] R13: 0000000000000000 R14: 00007f6832fb5fa0 R15: 00007ffc6c8a6688 [ 765.515633][T11439] [ 765.879256][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.923969][ T5905] usb usb8-port1: unable to enumerate USB device [ 766.014762][T10765] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.026897][T10765] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.037987][T10765] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 766.047175][T10765] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.078444][T10765] usb 9-1: config 0 descriptor?? [ 766.266304][T11454] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1538'. [ 766.280625][T11454] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1538'. [ 766.295051][T11454] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1538'. [ 766.343932][ T5905] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 766.825366][T11462] netlink: 'syz.6.1539': attribute type 21 has an invalid length. [ 766.837719][T10958] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 766.846779][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 766.853343][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.567192][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 767.578314][ T5905] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 768.067479][T10958] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.107218][T10958] usb 8-1: config 0 has no interfaces? [ 768.124262][T10958] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 768.154696][T10958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.189424][T10958] usb 8-1: config 0 descriptor?? [ 768.210993][ T5905] usb 1-1: config 0 has no interface number 0 [ 768.303684][ T5905] usb 1-1: string descriptor 0 read error: -71 [ 768.316643][ T5905] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 3.f9 [ 768.333771][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.355545][ T5905] usb 1-1: config 0 descriptor?? [ 768.375123][ T5905] usb 1-1: can't set config #0, error -71 [ 768.384887][ T5905] usb 1-1: USB disconnect, device number 39 [ 768.443889][T11452] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1537'. [ 768.487750][ T978] usb 8-1: USB disconnect, device number 13 [ 769.345763][T11480] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1545'. [ 769.378861][T11480] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1545'. [ 769.527767][T10765] usb 9-1: string descriptor 0 read error: -71 [ 769.534701][T10765] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 769.543687][T10765] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 769.551941][T10765] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 769.561676][T10765] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 769.569332][T10765] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 769.590222][T10765] usb 9-1: USB disconnect, device number 8 [ 769.872094][T10958] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 770.254406][T10958] usb 8-1: Using ep0 maxpacket: 32 [ 770.322741][T10958] usb 8-1: config 0 has an invalid interface number: 219 but max is 0 [ 770.331019][T10958] usb 8-1: config 0 has no interface number 0 [ 770.347332][T10958] usb 8-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 770.408696][T10958] usb 8-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 770.445104][T10958] usb 8-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 770.580801][T11499] netlink: 'syz.8.1552': attribute type 11 has an invalid length. [ 770.980103][T10958] usb 8-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 771.019030][T10958] usb 8-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 771.212245][T11506] netlink: 'syz.6.1554': attribute type 11 has an invalid length. [ 771.750871][T10958] usb 8-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 772.440548][T10958] usb 8-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 772.469434][T10958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.485882][T10958] usb 8-1: Product: syz [ 772.494424][T10958] usb 8-1: Manufacturer: syz [ 772.505417][T10958] usb 8-1: SerialNumber: syz [ 772.523825][T10958] usb 8-1: config 0 descriptor?? [ 772.529697][T11484] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 772.539905][T11484] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 772.843047][T10958] etas_es58x 8-1:0.219: Starting syz syz (Serial Number syz) [ 772.916558][T11516] FAULT_INJECTION: forcing a failure. [ 772.916558][T11516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.930088][T11516] CPU: 0 UID: 0 PID: 11516 Comm: syz.0.1557 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 772.930118][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 772.930132][T11516] Call Trace: [ 772.930142][T11516] [ 772.930151][T11516] dump_stack_lvl+0x189/0x250 [ 772.930188][T11516] ? __pfx____ratelimit+0x10/0x10 [ 772.930219][T11516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.930250][T11516] ? __pfx__printk+0x10/0x10 [ 772.930272][T11516] ? __might_fault+0xb0/0x130 [ 772.930310][T11516] should_fail_ex+0x414/0x560 [ 772.930342][T11516] _copy_from_user+0x2d/0xb0 [ 772.930364][T11516] do_replace+0xe8/0x430 [ 772.930395][T11516] ? __pfx_do_replace+0x10/0x10 [ 772.930436][T11516] ? bpf_lsm_capable+0x9/0x20 [ 772.930467][T11516] ? security_capable+0x7e/0x2e0 [ 772.930506][T11516] do_ebt_set_ctl+0x1e3/0xb60 [ 772.930541][T11516] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 772.930567][T11516] ? __local_bh_enable_ip+0x135/0x1c0 [ 772.930601][T11516] ? rcu_is_watching+0x15/0xb0 [ 772.930642][T11516] ? nf_setsockopt+0x221/0x290 [ 772.930685][T11516] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 772.930721][T11516] ? __pfx___mutex_lock+0x10/0x10 [ 772.930754][T11516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 772.930800][T11516] ? security_socket_setsockopt+0x33/0x2c0 [ 772.930830][T11516] nf_setsockopt+0x26f/0x290 [ 772.930858][T11516] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 772.930883][T11516] do_sock_setsockopt+0x25a/0x3e0 [ 772.930912][T11516] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 772.930942][T11516] ? __fget_files+0x2a/0x420 [ 772.930987][T11516] __x64_sys_setsockopt+0x18b/0x220 [ 772.931043][T11516] do_syscall_64+0xfa/0x3b0 [ 772.931064][T11516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.931085][T11516] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 772.931105][T11516] ? clear_bhb_loop+0x60/0xb0 [ 772.931131][T11516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.931152][T11516] RIP: 0033:0x7f00f298e929 [ 772.931172][T11516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.931190][T11516] RSP: 002b:00007f00f384d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 772.931211][T11516] RAX: ffffffffffffffda RBX: 00007f00f2bb6160 RCX: 00007f00f298e929 [ 772.931226][T11516] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 772.931239][T11516] RBP: 00007f00f384d090 R08: 0000000000000108 R09: 0000000000000000 [ 772.931252][T11516] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 772.931265][T11516] R13: 0000000000000000 R14: 00007f00f2bb6160 R15: 00007ffd5212d558 [ 772.931298][T11516] [ 773.285361][T10958] etas_es58x 8-1:0.219: could not retrieve the product info string [ 773.343888][T11519] syz.7.1558 uses old SIOCAX25GETINFO [ 773.735388][T10958] usb 8-1: USB disconnect, device number 14 [ 774.029437][T10958] etas_es58x 8-1:0.219: Disconnecting syz syz [ 774.565119][ T9776] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 774.819586][ T9776] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 774.868171][ T5905] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 774.899323][ T9776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.937471][ T9776] usb 1-1: Product: syz [ 774.984248][ T9776] usb 1-1: Manufacturer: syz [ 775.046640][ T9776] usb 1-1: SerialNumber: syz [ 775.426444][T11544] netlink: 'syz.7.1567': attribute type 11 has an invalid length. [ 775.864605][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 775.890309][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 775.891825][ T9776] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 775.905175][ T5905] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice=2a.94 [ 775.932474][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.979981][ T5905] usb 9-1: config 0 descriptor?? [ 776.037034][T10958] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 776.311987][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1569'. [ 776.736263][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.885224][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.886935][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1570'. [ 776.984051][ T5905] usb 1-1: USB disconnect, device number 40 [ 777.006234][ T5891] usb 9-1: USB disconnect, device number 9 [ 777.161177][T10958] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 777.186616][T10958] ath9k_htc: Failed to initialize the device [ 777.387689][ T5905] usb 1-1: ath9k_htc: USB layer deinitialized [ 777.571301][ T5891] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 778.014321][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 778.086615][ T5891] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.105687][ T5891] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 778.115088][ T5891] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 778.126461][ T5891] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 778.148607][ T5891] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 778.173991][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.234164][ T5891] hub 7-1:1.0: bad descriptor, ignoring hub [ 778.270484][ T5891] hub 7-1:1.0: probe with driver hub failed with error -5 [ 778.302412][ T5891] cdc_wdm 7-1:1.0: skipping garbage [ 778.333578][ T5891] cdc_wdm 7-1:1.0: skipping garbage [ 778.357395][ T5891] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 778.366385][ T5891] cdc_wdm 7-1:1.0: Unknown control protocol [ 778.382062][T10958] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 778.563278][ T5891] usb 7-1: USB disconnect, device number 7 [ 778.651868][ T9817] block nbd0: Receive control failed (result -32) [ 778.712620][T10958] usb 8-1: Using ep0 maxpacket: 8 [ 778.733495][T10958] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 778.743334][T10958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.867661][ T5891] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 778.926666][ T5905] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 779.108443][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 779.181414][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 779.225856][ T5905] usb 7-1: Using ep0 maxpacket: 8 [ 779.318786][T10958] usb 8-1: Product: syz [ 779.323750][T10958] usb 8-1: Manufacturer: syz [ 779.328392][T10958] usb 8-1: SerialNumber: syz [ 779.335029][ T5905] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.336034][T10958] usb 8-1: config 0 descriptor?? [ 779.371961][ T5891] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 779.386211][ T5905] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 779.395266][ T5905] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 779.408589][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.416663][ T5891] usb 1-1: Product: syz [ 779.444278][ T5891] usb 1-1: Manufacturer: syz [ 779.449042][ T5891] usb 1-1: SerialNumber: syz [ 779.454878][ T5905] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 779.484283][ T5891] usb 1-1: config 0 descriptor?? [ 779.495199][ T5905] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 779.514387][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.555309][ T5905] hub 7-1:1.0: bad descriptor, ignoring hub [ 779.575373][T10958] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 779.580386][ T5905] hub 7-1:1.0: probe with driver hub failed with error -5 [ 779.597616][ T5905] cdc_wdm 7-1:1.0: skipping garbage [ 779.603538][ T5905] cdc_wdm 7-1:1.0: skipping garbage [ 779.617782][ T5905] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 779.640322][ T5905] cdc_wdm 7-1:1.0: Unknown control protocol [ 779.687415][T11590] syz.8.1583: attempt to access beyond end of device [ 779.687415][T11590] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 779.701201][T11590] syz.8.1583: attempt to access beyond end of device [ 779.701201][T11590] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 779.714448][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 779.727086][T11590] syz.8.1583: attempt to access beyond end of device [ 779.727086][T11590] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 779.742508][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 779.755448][T11590] syz.8.1583: attempt to access beyond end of device [ 779.755448][T11590] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 779.770086][T11590] syz.8.1583: attempt to access beyond end of device [ 779.770086][T11590] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 779.783259][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 779.793049][T11590] syz.8.1583: attempt to access beyond end of device [ 779.793049][T11590] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 779.806322][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 779.816637][T11590] syz.8.1583: attempt to access beyond end of device [ 779.816637][T11590] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 779.831272][T11590] syz.8.1583: attempt to access beyond end of device [ 779.831272][T11590] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 779.845890][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 779.856832][T11590] syz.8.1583: attempt to access beyond end of device [ 779.856832][T11590] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 779.869970][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 779.880329][T11590] syz.8.1583: attempt to access beyond end of device [ 779.880329][T11590] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 779.893603][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 779.903530][T11590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 779.913118][T11590] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 780.102849][ T5905] usb 7-1: USB disconnect, device number 8 [ 780.131739][ T5891] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 780.673282][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1586'. [ 780.687290][T10958] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 780.688000][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1586'. [ 780.724288][T10958] usb 8-1: USB disconnect, device number 15 [ 780.806480][T11607] netlink: 'syz.8.1586': attribute type 7 has an invalid length. [ 780.839886][ T978] usb 1-1: USB disconnect, device number 41 [ 781.150524][T11616] IPv6: Can't replace route, no match found [ 782.260534][ T5891] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 782.690098][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 782.796264][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 782.888210][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1593'. [ 782.897354][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1593'. [ 783.006584][T11633] [U] „ [ 783.537762][ T5891] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice=2a.94 [ 783.629829][T11634] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1594'. [ 783.641290][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.087702][ T5891] usb 10-1: config 0 descriptor?? [ 784.917172][T11647] ubi31: attaching mtd0 [ 784.945132][T11647] ubi31: scanning is finished [ 784.950031][T11647] ubi31: empty MTD device detected [ 785.789766][T11650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.851203][T11650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.868252][T11647] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 785.902940][ T9776] usb 10-1: USB disconnect, device number 8 [ 787.678173][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1601'. [ 787.713807][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1601'. [ 787.732092][T11667] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1601'. [ 789.575690][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1604'. [ 789.584870][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1604'. [ 789.777436][T11681] [U] „ [ 790.186527][ T5838] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 790.404339][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.441589][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.492543][ T5838] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 790.508397][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.549000][ T5838] usb 1-1: config 0 descriptor?? [ 790.598901][T11687] netlink: 'syz.7.1606': attribute type 11 has an invalid length. [ 790.650222][ T978] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 790.817314][ T978] usb 10-1: Using ep0 maxpacket: 8 [ 791.078539][ T978] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.098651][ T978] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 791.275264][T11690] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1608'. [ 791.297860][ T978] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 791.309920][ T978] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 791.324864][ T978] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 791.381142][ T978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.438939][ T978] hub 10-1:1.0: bad descriptor, ignoring hub [ 791.448947][ T978] hub 10-1:1.0: probe with driver hub failed with error -5 [ 791.491866][T11698] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 791.501502][ T978] cdc_wdm 10-1:1.0: skipping garbage [ 791.501526][ T978] cdc_wdm 10-1:1.0: skipping garbage [ 791.518666][ T978] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 791.534946][ T978] cdc_wdm 10-1:1.0: Unknown control protocol [ 791.578098][T11700] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1611'. [ 791.596119][ T5838] usb 1-1: language id specifier not provided by device, defaulting to English [ 791.740463][T10958] usb 10-1: USB disconnect, device number 9 [ 791.828095][ T978] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 792.075698][ T978] usb 8-1: Using ep0 maxpacket: 16 [ 792.286470][ T9776] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 792.838687][ T978] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.849092][ T978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.860748][ T978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 792.870612][ T978] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 792.880884][ T978] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.897119][ T978] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 792.906445][ T978] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 792.915214][ T978] usb 8-1: Manufacturer: syz [ 792.922687][ T978] usb 8-1: config 0 descriptor?? [ 792.979736][ T5838] uclogic 0003:256C:006D.0019: failed retrieving Huion firmware version: -71 [ 793.176225][ T9776] usb 10-1: Using ep0 maxpacket: 8 [ 793.185736][ T5838] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 793.199019][ T9776] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.831468][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.856387][ T5838] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 793.858046][ T9776] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 793.881756][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.941498][ T9776] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 793.948103][ T5838] usb 1-1: USB disconnect, device number 42 [ 794.018872][ T9776] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 794.042778][ T978] rc_core: IR keymap rc-hauppauge not found [ 794.048745][ T978] Registered IR keymap rc-empty [ 794.134134][ T30] kauditd_printk_skb: 661 callbacks suppressed [ 794.134154][ T30] audit: type=1804 audit(1750712809.665:774): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.1616" name="/newroot/50/bus" dev="tmpfs" ino=285 res=1 errno=0 [ 794.169527][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 794.176919][ T9776] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 794.210833][ T9776] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.221958][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 794.290131][ T9776] usb 10-1: can't set config #1, error -71 [ 794.313507][ T978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 794.321918][T11723] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1615'. [ 794.365265][ T9776] usb 10-1: USB disconnect, device number 10 [ 794.366295][T11722] FAULT_INJECTION: forcing a failure. [ 794.366295][T11722] name failslab, interval 1, probability 0, space 0, times 0 [ 794.380581][ T978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input14 [ 794.621223][T11722] CPU: 0 UID: 0 PID: 11722 Comm: syz.8.1617 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 794.621253][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 794.621264][T11722] Call Trace: [ 794.621273][T11722] [ 794.621283][T11722] dump_stack_lvl+0x189/0x250 [ 794.621313][T11722] ? __pfx____ratelimit+0x10/0x10 [ 794.621339][T11722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.621363][T11722] ? __pfx__printk+0x10/0x10 [ 794.621386][T11722] ? __pfx___might_resched+0x10/0x10 [ 794.621410][T11722] ? fs_reclaim_acquire+0x7d/0x100 [ 794.621438][T11722] should_fail_ex+0x414/0x560 [ 794.621466][T11722] should_failslab+0xa8/0x100 [ 794.621492][T11722] kmem_cache_alloc_noprof+0x73/0x3c0 [ 794.621514][T11722] ? io_submit_one+0x11f/0x1310 [ 794.621542][T11722] io_submit_one+0x11f/0x1310 [ 794.621590][T11722] ? __pfx_io_submit_one+0x10/0x10 [ 794.621616][T11722] ? __might_fault+0xb0/0x130 [ 794.621651][T11722] ? __might_fault+0xb0/0x130 [ 794.621680][T11722] __se_sys_io_submit+0x185/0x2f0 [ 794.621707][T11722] ? __pfx___se_sys_io_submit+0x10/0x10 [ 794.621728][T11722] ? ksys_write+0x22a/0x250 [ 794.621763][T11722] ? do_syscall_64+0xbe/0x3b0 [ 794.621784][T11722] do_syscall_64+0xfa/0x3b0 [ 794.621800][T11722] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.621828][T11722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.621848][T11722] ? clear_bhb_loop+0x60/0xb0 [ 794.621873][T11722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.621892][T11722] RIP: 0033:0x7f07d938e929 [ 794.621911][T11722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.621929][T11722] RSP: 002b:00007f07da219038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 794.621951][T11722] RAX: ffffffffffffffda RBX: 00007f07d95b5fa0 RCX: 00007f07d938e929 [ 794.621966][T11722] RDX: 0000200000000300 RSI: 0000000000000002 RDI: 00007f07da1e8000 [ 794.621980][T11722] RBP: 00007f07da219090 R08: 0000000000000000 R09: 0000000000000000 [ 794.621993][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.622005][T11722] R13: 0000000000000000 R14: 00007f07d95b5fa0 R15: 00007ffc32b634d8 [ 794.622037][T11722] [ 794.629969][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 794.866987][T10958] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 794.946426][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 794.993845][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 795.058664][T10958] usb 7-1: Using ep0 maxpacket: 32 [ 795.080257][T10958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.098358][T10958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.199709][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 795.207117][T10958] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 795.234875][T10958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.253644][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 795.271684][T10958] usb 7-1: config 0 descriptor?? [ 795.281435][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 795.496323][T10765] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 795.575989][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 795.607655][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 795.636970][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 796.159667][T10958] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 796.169973][ T978] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 796.206920][ T978] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 796.209838][T10765] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 796.234662][T11741] binder: BINDER_SET_CONTEXT_MGR already set [ 796.242149][T10765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.250893][T11741] binder: 11740:11741 ioctl 4018620d 200000000040 returned -16 [ 796.258990][T10958] ft260 0003:0403:6030.001A: chip code: 6424 8183 [ 796.259289][T10765] usb 1-1: Product: syz [ 796.265644][ T978] mceusb 8-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 796.381938][T10958] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 796.468058][ T978] usb 8-1: USB disconnect, device number 16 [ 796.478986][T10765] usb 1-1: Manufacturer: syz [ 796.490646][T10765] usb 1-1: SerialNumber: syz [ 894.488991][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 894.496037][ C1] rcu: 0-...!: (1 GPs behind) idle=4394/1/0x4000000000000000 softirq=54607/54608 fqs=0 [ 894.506893][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10855/1:b..l [ 894.514935][ C1] rcu: (detected by 1, t=10502 jiffies, g=47805, q=234 ncpus=2) [ 894.522728][ C1] Sending NMI from CPU 1 to CPUs 0: [ 894.522774][ C0] NMI backtrace for cpu 0 [ 894.522792][ C0] CPU: 0 UID: 0 PID: 11749 Comm: syz.9.1624 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 894.522813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 894.522825][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 894.522861][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a e9 58 3e [ 894.522877][ C0] RSP: 0018:ffffc90000007c38 EFLAGS: 00000046 [ 894.522893][ C0] RAX: 0000000000000001 RBX: ffffffff99cbd250 RCX: 0000000000000000 [ 894.522905][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff99cbd250 [ 894.522916][ C0] RBP: 1ffffffff3397a4b R08: ffffffff99cbd253 R09: 1ffffffff3397a4a [ 894.522930][ C0] R10: dffffc0000000000 R11: fffffbfff3397a4b R12: dffffc0000000000 [ 894.522943][ C0] R13: 1ffffffff3397a4c R14: ffffffff99cbd260 R15: ffffffff99cbd258 [ 894.522957][ C0] FS: 00007f106bc276c0(0000) GS:ffff888125c83000(0000) knlGS:0000000000000000 [ 894.522972][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 894.522984][ C0] CR2: 0000001b32a11ff8 CR3: 0000000079072000 CR4: 00000000003526f0 [ 894.523006][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 894.523016][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 894.523027][ C0] Call Trace: [ 894.523037][ C0] [ 894.523046][ C0] do_raw_spin_unlock+0x122/0x240 [ 894.523069][ C0] _raw_spin_unlock_irqrestore+0x78/0x110 [ 894.523093][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 894.523116][ C0] ? debug_object_deactivate+0x9a/0x250 [ 894.523142][ C0] debug_deactivate+0x1d/0x200 [ 894.523168][ C0] __hrtimer_run_queues+0x2b0/0xc60 [ 894.523204][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 894.523228][ C0] ? read_tsc+0x9/0x20 [ 894.523263][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 894.523303][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 894.523348][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 894.523373][ C0] [ 894.523380][ C0] [ 894.523387][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 894.523406][ C0] RIP: 0010:__kasan_slab_pre_free+0xb/0x30 [ 894.523427][ C0] Code: e9 1a b0 40 09 cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 8b 05 15 76 7e 0d <48> 89 f1 48 29 c1 48 81 f9 00 00 20 00 0f 92 c1 48 85 c0 0f 95 c0 [ 894.523442][ C0] RSP: 0018:ffffc9000d047b08 EFLAGS: 00000292 [ 894.523457][ C0] RAX: ffff88823be00000 RBX: ffff888033ea0000 RCX: fffffffdf80a0000 [ 894.523471][ C0] RDX: ffffffff847951b8 RSI: ffff888033ea0000 RDI: ffff88801a442140 [ 894.523484][ C0] RBP: 0000000000212008 R08: ffffffff8f9fe5f7 R09: 1ffffffff1f3fcbe [ 894.523497][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fcbf R12: ffff88801a442140 [ 894.523510][ C0] R13: 0000000000000000 R14: ffffffff847951b8 R15: ffffea0000cfa800 [ 894.523524][ C0] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 894.523555][ C0] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 894.523585][ C0] kfree+0x13f/0x440 [ 894.523607][ C0] tomoyo_realpath_from_path+0x598/0x5d0 [ 894.523655][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 894.523677][ C0] tomoyo_path_number_perm+0x1e8/0x5a0 [ 894.523701][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 894.523723][ C0] ? __seccomp_filter+0x765/0x1a40 [ 894.523764][ C0] ? __lock_acquire+0xab9/0xd20 [ 894.523800][ C0] ? __fget_files+0x2a/0x420 [ 894.523831][ C0] ? __fget_files+0x2a/0x420 [ 894.523852][ C0] ? __fget_files+0x3a0/0x420 [ 894.523874][ C0] ? __fget_files+0x2a/0x420 [ 894.523899][ C0] security_file_ioctl+0xcb/0x2d0 [ 894.523923][ C0] __se_sys_ioctl+0x47/0x170 [ 894.523944][ C0] do_syscall_64+0xfa/0x3b0 [ 894.523960][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.523977][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 894.524104][ C0] ? clear_bhb_loop+0x60/0xb0 [ 894.524135][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.524154][ C0] RIP: 0033:0x7f106ad8e929 [ 894.524172][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.524187][ C0] RSP: 002b:00007f106bc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 894.524206][ C0] RAX: ffffffffffffffda RBX: 00007f106afb6080 RCX: 00007f106ad8e929 [ 894.524220][ C0] RDX: 0000200000000280 RSI: 00000000c01064c8 RDI: 0000000000000004 [ 894.524232][ C0] RBP: 00007f106ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 894.524243][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.524254][ C0] R13: 0000000000000000 R14: 00007f106afb6080 R15: 00007fff600c8018 [ 894.524276][ C0] [ 894.524779][ C1] task:syz-executor state:R running task stack:21960 pid:10855 tgid:10855 ppid:10853 task_flags:0x400140 flags:0x00004002 [ 895.009926][ C1] Call Trace: [ 895.013232][ C1] [ 895.016192][ C1] __schedule+0x16a2/0x4cb0 [ 895.020751][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 895.027380][ C1] ? preempt_schedule_common+0x83/0xd0 [ 895.032884][ C1] ? __pfx___schedule+0x10/0x10 [ 895.037782][ C1] ? __lock_acquire+0xab9/0xd20 [ 895.042678][ C1] ? preempt_schedule+0xae/0xc0 [ 895.047573][ C1] preempt_schedule_common+0x83/0xd0 [ 895.052894][ C1] preempt_schedule+0xae/0xc0 [ 895.057606][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 895.063029][ C1] preempt_schedule_thunk+0x16/0x30 [ 895.068277][ C1] _raw_spin_unlock+0x3f/0x50 [ 895.072983][ C1] ? copy_pmd_range+0x66f1/0x7000 [ 895.078059][ C1] copy_pmd_range+0x6727/0x7000 [ 895.082960][ C1] ? rcu_is_watching+0x15/0xb0 [ 895.087776][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 895.093007][ C1] ? irqentry_exit+0x74/0x90 [ 895.097631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.102890][ C1] ? copy_page_range+0x92/0x1270 [ 895.107870][ C1] copy_page_range+0xc46/0x1270 [ 895.112753][ C1] ? __lock_acquire+0xab9/0xd20 [ 895.117679][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 895.123007][ C1] ? up_write+0x1c4/0x420 [ 895.127359][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 895.134160][ C1] dup_mmap+0xf57/0x1ac0 [ 895.138457][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 895.143193][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 895.149131][ C1] ? mm_init+0xca7/0xf00 [ 895.153420][ C1] copy_mm+0x13c/0x4b0 [ 895.157527][ C1] copy_process+0x1706/0x3c00 [ 895.162261][ C1] ? copy_process+0x97f/0x3c00 [ 895.167067][ C1] ? __pfx_copy_process+0x10/0x10 [ 895.172129][ C1] ? __handle_mm_fault+0x1144/0x5620 [ 895.177454][ C1] kernel_clone+0x224/0x7f0 [ 895.181988][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 895.187064][ C1] __x64_sys_clone+0x18b/0x1e0 [ 895.191859][ C1] ? count_memcg_event_mm+0x21/0x260 [ 895.197176][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 895.202507][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 895.207828][ C1] ? do_syscall_64+0xbe/0x3b0 [ 895.212536][ C1] do_syscall_64+0xfa/0x3b0 [ 895.217075][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.222310][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.228424][ C1] ? clear_bhb_loop+0x60/0xb0 [ 895.233144][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.239074][ C1] RIP: 0033:0x7f07d9385193 [ 895.243521][ C1] RSP: 002b:00007ffc32b63758 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 895.251960][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07d9385193 [ 895.259975][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 895.267970][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 895.276050][ C1] R10: 000055558c7757d0 R11: 0000000000000246 R12: 0000000000000000 [ 895.284045][ C1] R13: 00000000000927c0 R14: 00000000000bdb17 R15: 00007ffc32b638f0 [ 895.292062][ C1] [ 895.295108][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g47805 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 895.306322][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 895.316308][ C1] rcu: RCU grace-period kthread stack dump: [ 895.322215][ C1] task:rcu_preempt state:R running task stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 895.335846][ C1] Call Trace: [ 895.339151][ C1] [ 895.342105][ C1] __schedule+0x16a2/0x4cb0 [ 895.346668][ C1] ? schedule+0x165/0x360 [ 895.351035][ C1] ? __pfx___schedule+0x10/0x10 [ 895.355939][ C1] ? schedule+0x91/0x360 [ 895.360220][ C1] schedule+0x165/0x360 [ 895.364411][ C1] schedule_timeout+0x12b/0x270 [ 895.369291][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 895.374691][ C1] ? __pfx_process_timeout+0x10/0x10 [ 895.380022][ C1] ? prepare_to_swait_event+0x341/0x380 [ 895.385600][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 895.390491][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 895.395492][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.400738][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 895.406054][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 895.411288][ C1] ? finish_swait+0xcd/0x1f0 [ 895.415917][ C1] rcu_gp_kthread+0x99/0x390 [ 895.420560][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 895.425817][ C1] ? __kthread_parkme+0x7b/0x200 [ 895.430808][ C1] ? __kthread_parkme+0x1a1/0x200 [ 895.435881][ C1] kthread+0x70e/0x8a0 [ 895.439986][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 895.445217][ C1] ? __pfx_kthread+0x10/0x10 [ 895.449836][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.455076][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.460303][ C1] ? __pfx_kthread+0x10/0x10 [ 895.464922][ C1] ret_from_fork+0x3f9/0x770 [ 895.469548][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 895.474706][ C1] ? __switch_to_asm+0x39/0x70 [ 895.479501][ C1] ? __switch_to_asm+0x33/0x70 [ 895.484304][ C1] ? __pfx_kthread+0x10/0x10 [ 895.488922][ C1] ret_from_fork_asm+0x1a/0x30 [ 895.493817][ C1] [ 895.496873][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 895.503214][ C1] CPU: 1 UID: 0 PID: 11741 Comm: syz.7.1623 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 895.515362][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 895.525436][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 895.532149][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 895.551781][ C1] RSP: 0018:ffffc9000d377360 EFLAGS: 00000293 [ 895.557873][ C1] RAX: ffffffff81b4e760 RBX: ffff8880b873b040 RCX: ffff888024693c00 [ 895.565867][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 895.573855][ C1] RBP: ffffc9000d3774c0 R08: ffffffff8f9fe5f7 R09: 1ffffffff1f3fcbe [ 895.581852][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fcbf R12: 1ffff110170c835d [ 895.589849][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8641ae8 [ 895.597850][ C1] FS: 0000000000000000(0000) GS:ffff888125d83000(0000) knlGS:0000000000000000 [ 895.606808][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.613418][ C1] CR2: 0000200000caf000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 895.621419][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 895.629413][ C1] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 895.637412][ C1] Call Trace: [ 895.640713][ C1] [ 895.643702][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 895.650072][ C1] ? stack_trace_save+0x9c/0xe0 [ 895.654958][ C1] ? stack_depot_save_flags+0x40/0x900 [ 895.660452][ C1] ? rcu_is_watching+0x15/0xb0 [ 895.665248][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 895.670470][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 895.675628][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 895.680776][ C1] ? do_futex+0x395/0x420 [ 895.685128][ C1] ? __se_sys_futex+0x36f/0x400 [ 895.690010][ C1] ? free_pgd_range+0x144b/0x14c0 [ 895.695068][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 895.700660][ C1] tlb_flush_mmu+0x1a7/0x680 [ 895.705291][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 895.709911][ C1] ? free_pgd_range+0x144b/0x14c0 [ 895.714976][ C1] free_ldt_pgtables+0x17b/0x320 [ 895.719956][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 895.725476][ C1] exit_mmap+0x17c/0xb50 [ 895.729782][ C1] ? uprobe_clear_state+0x20f/0x290 [ 895.735016][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 895.739812][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 895.745516][ C1] ? __pfx_exit_aio+0x10/0x10 [ 895.750240][ C1] ? uprobe_clear_state+0x274/0x290 [ 895.755465][ C1] ? mm_update_next_owner+0xa7/0x870 [ 895.760795][ C1] __mmput+0x118/0x420 [ 895.764897][ C1] exit_mm+0x1da/0x2c0 [ 895.768999][ C1] ? __pfx_exit_mm+0x10/0x10 [ 895.773626][ C1] ? rcu_is_watching+0x15/0xb0 [ 895.778431][ C1] do_exit+0x640/0x22e0 [ 895.782624][ C1] ? do_raw_spin_lock+0x121/0x290 [ 895.787679][ C1] ? __pfx_do_exit+0x10/0x10 [ 895.792311][ C1] do_group_exit+0x21c/0x2d0 [ 895.796926][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.802158][ C1] get_signal+0x125e/0x1310 [ 895.806710][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 895.812301][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 895.818499][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 895.824004][ C1] exit_to_user_mode_loop+0x75/0x110 [ 895.829319][ C1] do_syscall_64+0x2bd/0x3b0 [ 895.833928][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.839159][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.845247][ C1] ? clear_bhb_loop+0x60/0xb0 [ 895.849950][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.855865][ C1] RIP: 0033:0x7f0dcb38e929 [ 895.860301][ C1] Code: Unable to access opcode bytes at 0x7f0dcb38e8ff. [ 895.867339][ C1] RSP: 002b:00007f0dcc2390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 895.875783][ C1] RAX: 0000000000000001 RBX: 00007f0dcb5b5fa8 RCX: 00007f0dcb38e929 [ 895.883965][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0dcb5b5fac [ 895.891955][ C1] RBP: 00007f0dcb5b5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 895.899946][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f0dcb5b5fac [ 895.907938][ C1] R13: 0000000000000000 R14: 00007ffedac257b0 R15: 00007ffedac25898 [ 895.916051][ C1]