last executing test programs: 3m14.308040346s ago: executing program 1 (id=1082): getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x1000, "8150227005dbbbaf9ad54f84c0c19b968b70777da1119b76e8c6f869adbbf394d6950b09dc03c57b062a9165f36c435e57576a3a4a9a12740cab3ee96e3265f103ca51763e08fad62278b0a0837379313bea85483d79a9b8d7ea1f7d146c5da3e892c8a8debaf01b1a8b6f7073d26b34fdbd361d42679a7581bc19fa06297011f6136f6a4e0f0292a1d3526a9d2463a32ce01d9b97388ff00da99e2df69c87ffbb2e17590725d35394619848564e3e95351c1e3e6704afab2ea47ea5847045b14b8b808c8d4e4573ce48c79549391ad9db7e94fbc6565ca70837c1624ccfb5b7a096c3334eaa2ea7c21a9c67b545f4ea8c37349148a8e5ddd02c9de7d3225583aa2078a78233d1ee5e8388bceba524b1136e42d5389cb66ca593423e3ed200eb8aa32dd98a7312230988aea0ef1da23b1b9256e4c600a66dedbe65f097e6db46eed95befc3b8cb31790598d68176f2e1862f7b53f835d54d4451ff918f2e67791c385c8707b5ac6f98ea6ddd47fe654d7e90045100e8d56ead90da652aaa86e051cf5a312594ae9f2ed0e6e586767783af15b1fdcab85b2eaaa364b3720b412099b897a005f3c3dd55158937a480017f9aad23a855c4745f166cea6e5def80e5aa20f5493be3df520a909cdf2919ae6cd4202f24dd347ed4e5fc95d80e38aed838da4b53c265c09d6cc91f8f3609d1c636e4d33ad43c0394536685c0fd31f3bd3418d80c537396a70354e960a673f0d5fee16606c9a6083cc8f370ed14b9d1e7b76b7e6311ca0f2e5874ba929a27e7028484be021497cf01f293b6028651822177fa46a3f8fc9d8bee10bfef7896eebe8dd4f48977e73763ab747bc0d2e5d67332a89f812eb4e4702294d6c0532bc4f2e993b5fd99a22c953690541a993a933be38a9ae055c564dc993ff5cdd26d09dd37bc09a4cc3708bb4a6cba5517eb687a4e008bef05c48e7da75a43e827ec3d7c0b1f01d419afac9bc875939ea30224ea126355026245df8fea85dd5e40c9247ea3e13e37b0d559600f238ba3099a2aa480448b7d34dfc61fa7376733fc72dbdab85676e38c5156ce460af7152cbe098df54e3edb60a79097f5ecaedc0f3bc628d952573f11031fc44b81fa6dd0eb243b617f6df3540f19d7858f89ba262e92ac664c6744ba6e72186519d607624fdf889847b80dad423f911c8ffb6b477b3b0e59ab8b8e4bdeda6eb78bf79311ce1998df057b77bd49d695e633306665f696e9e1757ed81de4218a0465d2149354174f95176d3f71acc6351de43043383b76afce396e61e0fc33529afe308cb4adb4f7b693abcc5c986882c0e2433bcb0acdefa9ca548425db12d3cfa6ecd3168e6559b567a7088ac61e44853553da9c0850a37b17b456ea38b48d1fc5eb0709c6a9754dfd1363cb5f758730f609111a801edaba314155368f0d70c30bebd93f3e9375924ff67bd6502fabe3d0429c962e3da33a19f6939fd507a604e05a0ccb90217149cf9c9223f0552955e86124877f58f95c90a34a27d2e3ffd41b6898f2d407cb86b19f29aa7b0bdee285a90d103316166c6c818c4ab0d693f7a14ff89c3b38702631b8df02e285ddc3a0ec9d0601a4187a450b451dc6859f895720451f36de4e5560d88fa22d1379febef86d3b7a569bd3541a81d740aeb8c9d3e7b794ba5ceda914dd675e7e8721625aeda922a26c41ccab1d22b493fb13f63ba31521a17e0097494b8338094b3467a56740ffda814eec6a6541abb75b54d4da50ec153044332d15f70a1c4f144dcc1592bd7512a4e03256a1df9bd41bbff4ea4b20fd82fa6cda4521471ac50cb4cb07f313c57cbb9f949324102b83ebf721776ee59ebb184f06901b58d97e64f12ce13e9bd5f00ec45288074c687c51654de08b6abeb223d93de70ed72aedf28a373b4e650bcdafbf21fc942c7b004952e9d99bd6cb19c00c64aa47e234da48cc7fa67d5f34626412c27e71c9e221a6d15fbe0ebc892b3d0597e8386055379d0b2f13114773b1e2459bbca592fd14467993d5c55abc1b03eee28b61c7c416d1ca47c43f2e32d0c8b59935a3294538ed3fad5aeefe783c3b4b474722da6b8a29e24727a2080cb88b6075162169675a93509a3ab9fa94162916665aa9d6ed71ec7839051d88278cdf136d9c77d80750a1af4bfda2476b290a5a73dd23fe780457dba23726162bcb71a4362fc946232c98db5bb8db09a22ad570063c9cafd649c7712c75510beeee5f9366bbe606918d0b84b617e948627e665cc266ebd3acdd03815b56f2a6eadc8cdd0b7f3d4466375db59622148da39f42410f18786b7caaac2d222b76310408bdfb255a3ee6b73b804cacd9b349ef55d3ade15e1095ba384afbb9c0e2963be22499963a335f323836722697ab041c7a7d69f73be64f0d08f328fe3de2d68ed3316f5a6417ab789ba9c96c97bcdc696b40efe75114a50bca16b0e09af7f4001c54b591538d40a0f12ab339676cc13feb07e0c04da5c4967bd3920e92a7f575ebb1fc6a80dc80179c2ab64c20bdb243847989274a03d5578e72030939a6c5ead86bd6069000d79273184d17454d47b8a9cb09ed81b202506f610081c2f8dae42379c2da6c7d4766329e9b4b7d62673c32228da95ec50355a6dbd89949d55e5a065f98b3644687a7c79df86ca677ef28e54867232cc6570973ec28bc8a36da0a5f3ed7d53329a3ee68a1cda4911114ed1c58c38b41b317651c2cac2eeb74883afe1a2635e8ab79110b9d97dc452ba1485fbb6281a5125d4c24c36dad74fcb7d2cb3a9e658c67614f575add029913adf04fdf951aa2474c85c0672870eaf6f13fce7d036d591bf7c6b29c766fef57811f3e22eb9ec9b3e2783efc59c64bafe0732130a29d65e0a2d9ddf46767d4ec641078d99487cb48a096e867727a8c4ef0830c3913bfcb73480e45ce1f5df7371e012523b31e296b6c62bb565f74b94e59ff4309401f0fea195ce4bffb3a3abd8df10d3ae01d84436bb953aad7a169068af31c458f292037cc53f65527d53b9141886461d376d662be8bffa33f2f92bca2bb9a897f96ed73e984a24f47e19893d804e0cf451471e200edb6d9ce43f69cff034cb0be7f724744a570a0e3c41833d607a05adc8d21bb5856158df8eeceeb157dd53dc6e1beea7995aada5990c202a056150d49b7def7e40cfb847d0978cb17b5ad4a04f05889ff87050d13012333e646137c5f617eeed52f11ad55365185926344d7b926d129e61baeb022f07250cc5af08a27dd83b5eeabcc05f2a449ab7b3742e734f89f77c03c40b2d3093768b85bc3fc2164d4717e1324f6aeba55ec383b55dbb406ab6a0c5d8c6e8fc7e07b8d450624ca8ec5d381953076ce8ee2303278a30aa460f9055a08e309f7f85e1b490e6da56dd92cf58e5bc5fa5f607c007b19f33a676476adf432a34cbb857cda754b86a3770048efc458e5a2d00ad97278fc7ea3aab191b849328b52254ca55dd83125d9591d45769deb80493a2d99768edc67390d40d3a9631ff30df99f65bd14fbc63c61f3a715f3ec81d397e3c69c0dff95ede37de181e64cadc9290e1a8db8340d71d646a370ee1bb4b23cff76ac6de4603ab1470df7ffe1cda98a9b62f2cef21fa6595e382e750bde1b5d97ed292298958ff0b345e5054506aa088cb7f69bca16d702d73febfc80a36822bd0028a886d9c66a7a7fcb3831af9a659e11d70c765e417a7eba8ee24a5ae535db76c0efaf75a9c1306f67ac5e8997dea27b4640aa52379270a99a9b426f568483474e9f56488065394d7503d429e55757989b02a13ca65891cfe20fb08802c175d4d6dab855c7c387eb624ca817e1dd0bc7666485365ec02ff4fd719cdd63f38e522f50f477b402795411c99340a71e76bedbfef23e3aafe4a2913462c3333d8c5c0878ae8445d24e67919a963bc9b42f779fa1edcfda015460e16f9d267c0c1faa1a9105e4ccf0498de8155ebc987754324cb30e3f3cc7d303654e156ec69758877870a330e6871748b2c320e538ac209a8e8038a5de47ceab29f100ca83b38058ceac49151bc85a603e73028eb76a45f1e66fbb023828e86955fb49de05d1b624a43a504e17674ba7a1a990fb7dd6a72b431be03a9d8645e55e1379647c3b284df67d8292873031e769d6dbf54260bbec00aa625269e439aacc8828cad89fad43d0d7577df1ad04fbdc409b1e17c9a1f1611be1dd1f56885a6cf77c1fe56fbf3bfadf0790dabfba344e0555a6d45c52aa9c3dbe9ae48e2f6fe36d8f8da0079b763af4f12da59e269197c3d7af7fb9b967d153ff52fc461a3e2bea7f380cd38ea2f09b1f917a8b920da914faef4bc8b27d834bb6de3de935bf2ad396a7f6c511cac0291b474d7d9a7c678541236866fd169b7337df91da2f2d3c9e45f37c1c72bca78e1525885b285092769ecaf391cd0d1102babaec616bca4e5a27b5cab6e0f25fcbcff5b48036e06836c9f269a033a9f2965af7a775a07a1dac88ac5914c4d14ddbb06f2a50cb2aeaa419236c09f21ee9c1945a945e701de4ea7a44170060e494878329bce46404e2fd38c22f76b18450473598f7706893dd269a8154f34062e010908a9e4fc6f007cb8014fe88ea057ca5313f224b6854d09175ab2a57a3a149f2853eff1ddba473b79775e5f79f3678db319886376e09a1474cda70f48d8f428aa9c71683317d8ad3026116179bf50675d17e52a980907f46f15ee2da1ae1ce78c36be1b73e4789be143dc66c83ecc9b36855f6311f2cb1c9497560f5c2058e4af87db2e041c1c7d2da0ea8ac93125e955df026ddbb0abf2f9d1bd6133ce79f16e786ab35ef54e0ac17bf2c1ee92da56d0a0cbc88849b2e7ea58f8ac127ab1a96c7417fbfbd523e3d91c05879af525285818fb7f9fcf51beb6e9dd6ed61c1cb33d6af23efbeaf90e67932ae5df147534f8abc52a54dba002cdc3e94e59a55bfa1954c004317093c6d211757fb1e837ec04a2d10e33424048130fc4f26d6e082fe37b86f5433d22bac87b70ce543a34bac44ef2338c8a72d9b816f15923b700dd05822458b324a493d6663a412e5eeab2367c81d9ede9e7407f3e8d0d55295d40e06ac3d0cddcf96d5ecc6ba3484b61f8c12a8fa102621b5194cb44562e3bde0bbe00ef41cc3b7ef8879c82f195c94598e9cf4c4cd1e6cab470be7e2364e83ad7d27d87cb9ea651fba1ee8e38891c03355f52570e1f51a2776540e843de9aa57c0b4588a5705eb2170a10ef587d7c31e5176591bafecf9f184310edcca3657e068aa09ebdf498e6bbab5622fa4fb72c485eec2118fba0d0ab89c43e98f4f511223443f3d8885b6f0c91e45dec88f8dec19983dc1a0bd34b5c4197a2c1bcd6c5e2f30757edc0e1fc81ea59c054245c0a11659cc17e07117bda6f09eb86ccad72acfd600d3883daaa4665eb0e6c6178bb743694f92ad1e0f71e3beba56e474c6ff3cae0617e38fe66af51bf170bbdacf3a054d28f8a661ae610b80161e5ed5cda9a5cb11c6d5b59ad94c8f32abe5985c9911536745622565fe3b63e9bdbca99f1e0255b277f64aa940ada821fe7d2b55f97ffb7981fc496aab111801c2fd6a5f38f7c1d7dcae287fd93bb31b7b0829b35dbf16ab89a983b6b56ae60104b88c660d16cf28395c70b3cbcc92d9ba70dc94ec3e58d1e7a7ea08bd08d58c766b8c9a89ab0b99f801e39ab92177c862d2bdf5be1d2f01c7c224b4349658a9060673a924b35a18fc7ff3fc72478572f3db6e1ff2dfbee76e7ad1290a36bb7c89670410f378c67cbcd58f02fe36d89ffbaab41d27b48c28a521"}, &(0x7f0000001040)=0x1024) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lseek(r0, 0x5, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x100, 0x0) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f00000010c0)=@in6={0xa, 0x4e20, 0x7, @empty, 0xfffffc01}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)="a62df13499f277ad6fa2649f07fba2ab55c286ca72515694beb1339579f65113ff63002c39855fccdf3f97d7d33647b48aeb4a9fbbe803d0de9925f0f97d5ec6096e3ece0ac74d61723f2e32151b614ce6f4aa0b93f6", 0x56}], 0x1}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$mouse(&(0x7f0000001240), 0x9, 0x20180) r4 = openat$cgroup_ro(r3, &(0x7f0000001280)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000016c0)={0x0, 0x1, 0x1d, 0x17, 0x15f, &(0x7f00000012c0)="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"}) io_setup(0xeb85, &(0x7f0000001700)=0x0) getpeername$packet(r3, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001900)=0x14) sendmsg$inet(r4, &(0x7f0000001b80)={&(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001780)="b13f3e8c1207fa54e47c5a021a830439a2e425d332227e5c65c61094e892ebce967d2d79a3411d990479a37c9f01d298057a992fa553f0cc2eae32ad23093126ab1ff64bae3230a3aaf66aff349e04ba8a20c1d7053cd12cd7272fe3c530c6758034bf4f48e19aa2d66e0faaec72080307b1bf02170c1ba54f25db75de4c32653414b0e6dae4e740962735eaecb13a2a9253f4abccb4e29545d5ebe5d83612072db8f36b6bd20333b3df7db7ed6f697ac115e2818d17c0c1453b27307be34e4ef782eb878dd8099eb2ab76d914", 0xcd}], 0x1, &(0x7f0000001940)=[@ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0x23, 0x79, [@rand_addr=0x64010102, @multicast1, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x9, [{@empty, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@broadcast, 0xfffffff9}, {@multicast2}]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @noop, @end, @ssrr={0x89, 0xf, 0x80, [@dev={0xac, 0x14, 0x14, 0x27}, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0xe4, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x14}]}, @timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0xb, [{@private=0xa010102, 0x6}]}, @lsrr={0x83, 0x7, 0xf8, [@rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @rand_addr=0x64010102}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xc2, [@empty, @dev={0xac, 0x14, 0x14, 0x18}, @local, @private=0xa010101, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x83, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0xfffffffb}, {@empty, 0x8d42}, {@broadcast, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x15}, {@broadcast, 0xc}, {@loopback, 0x5}]}, @ssrr={0x89, 0x17, 0xde, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @remote, @multicast1]}, @rr={0x7, 0x13, 0x27, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1]}, @cipso={0x86, 0x35, 0x3, [{0x1, 0x3, "cb"}, {0x2, 0xb, "a34617ae645a6080ae"}, {0x2, 0xf, "619a35f221bdf211d277f3881e"}, {0x0, 0x4, "92d7"}, {0x7, 0xe, "fa83ab4bc903b354356ad526"}]}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0x8c}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x210}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4000010, r1, 0xde9b0000) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000001bc0)) io_getevents(r5, 0x6, 0x4, &(0x7f0000001c00)=[{}, {}, {}, {}], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001c80)=0x3) r7 = socket(0x0, 0x4, 0xaba2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000001cc0)={r3}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x8, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000001d80)=0x4) getrandom(&(0x7f0000001dc0)=""/63, 0x3f, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) write(r8, &(0x7f0000001e00)="f868e3a5b1a6c5a37c1da3df6b8489ded95a641be4717645d132e2aedfed631990118c2ea9167323d09f48fa6f1bdb7c3044cb32fe48ee0c91465d68b0b41ebc891f32887ceff7826e9fd8d57fd58651bd274afcfddec00e24b4c20695fe7e739d4737ad605d72ba4581f97c65370dfa82f35e5af402b96312c8a7a03ce1", 0x7e) preadv2(r8, &(0x7f0000002380)=[{&(0x7f0000001e80)=""/239, 0xef}, {&(0x7f0000001f80)=""/134, 0x86}, {&(0x7f0000002040)=""/177, 0xb1}, {&(0x7f0000002100)=""/195, 0xc3}, {&(0x7f0000002200)=""/23, 0x17}, {&(0x7f0000002240)=""/200, 0xc8}, {&(0x7f0000002340)=""/51, 0x33}], 0x7, 0x0, 0x7f, 0x5) futex(&(0x7f0000002400)=0x1, 0xc, 0x1, &(0x7f0000002440)={0x77359400}, &(0x7f0000002480)=0x2, 0x1) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f00000024c0)={0x5, [0x2, 0x7, 0x1, 0x6, 0x7]}) io_submit(r5, 0x3, &(0x7f00000026c0)=[&(0x7f0000002540)={0x0, 0x0, 0x0, 0x6, 0x4, r4, &(0x7f0000002500)="72953bf5990e062e6857a4a9d536fd5cf02107bedcbe3cee6b6b", 0x1a, 0x5, 0x0, 0x0, r3}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x2bc0, r2, &(0x7f0000002580)="b20c951e767c8bad2eed1f3647a64d81b5f5e996ea12793f3fcb08430419e2b888761ea59f7bb520b48d7cd5ab04c84ef678cde67808f85e467f294ea755d3bfbf99ff3a479f1145213be429dc5092", 0x4f, 0x100, 0x0, 0x2, r3}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000002640)="1770ffae05de30a7ea5cdb90525dc859ce50aa86422145d408888ac4b9f412c3843e14b587230824ad9aa374f2e689fe4dbd36c45ca6030bf289ddffdb", 0x3d, 0x8000000000, 0x0, 0x1}]) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000027c0)={{0x8, 0x4, 0x4, 0x9, '\x00', 0x2bc0}, 0x3, 0x20, 0x3686, 0x0, 0xa, 0x5, 'syz1\x00', &(0x7f0000002740)=['/dev/input/mouse#\x00', '!/{/^&#&}[.@\x00', '+*', '/dev/snd/controlC#\x00', '\a:\x00', '\x00', '\x00', '/dev/input/mouse#\x00', 'blkio.bfq.empty_time\x00', '\x00'], 0x61}) 3m13.554412512s ago: executing program 1 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x8, 0x0, 0x0}}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) signalfd4(r2, &(0x7f0000000040)={[0x80]}, 0x8, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8"], 0x44}}, 0x0) 3m12.884289904s ago: executing program 1 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000081"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 3m12.542217237s ago: executing program 1 (id=1088): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf7f}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000020000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000010c0), &(0x7f0000001100)=0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x10000008ebc, 0x7) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) 3m9.355207306s ago: executing program 1 (id=1099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x13, 0x30}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x800) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000010000000000000012000900020000", 0x23) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) sysinfo(&(0x7f0000000500)=""/90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r5, r6+60000000}}, &(0x7f0000000400)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1000000, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r9}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, 0x0) 3m8.308005122s ago: executing program 1 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x2c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x149882, 0x3) pipe2$9p(&(0x7f0000000240), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x110000, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB=',\x00']) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x48ca02, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x8080) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c00010062697477697365002400028008000340000000000800014000000013080004004f800400010008000240000000160900010073797a30000000000900020073797a32000000001400000011000100"/140], 0xff82}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000c0c0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)="71392a258241355e5158fd95a3300cdd001a5ce979e5d51d2f7fba5f4f343c60cb740330b76aa8442a27ede7c48f2622c165e1c6a4cdd4f649f2480a86d5528172ef551208d989782df91fd3e653bdd5db717f36e1ad9b33960ae36add071c68f20759820c2aee4f2f3fe97a0777cf7325b0", 0x72}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002fbd7000fcffffff8900000008000300", @ANYRES32=r7, @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0x9, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032db97000fcdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB="05971c89"], 0x1c}, 0x1, 0x0, 0x0, 0x20048090}, 0x4810) socket$packet(0x11, 0x3, 0x300) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0203000209cd0000000000000000000002002c5154f0fd9cb708000200660000006e9292f88db2ccbcb51044a01035fa1bbe29d7ac0781902e483ac0ea4cc081d2d402e1aa8d420f61d0253cc6c3b67287b2808c5a457ef9500d0d45b0d9047276063d292b1aa69da3a17147d2beaa52de33838ebac039e64567f6bee1d003ed96ce27ca54a33a00b4f5129b54ad26bbc05d66ad47f439c6d3f1392950d3a5ef336c0a78052f95b08a312565d431"], 0x48}, 0x1, 0x7}, 0x0) 2m52.662607968s ago: executing program 32 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x2c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x149882, 0x3) pipe2$9p(&(0x7f0000000240), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x110000, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB=',\x00']) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x48ca02, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x8080) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c00010062697477697365002400028008000340000000000800014000000013080004004f800400010008000240000000160900010073797a30000000000900020073797a32000000001400000011000100"/140], 0xff82}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000c0c0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)="71392a258241355e5158fd95a3300cdd001a5ce979e5d51d2f7fba5f4f343c60cb740330b76aa8442a27ede7c48f2622c165e1c6a4cdd4f649f2480a86d5528172ef551208d989782df91fd3e653bdd5db717f36e1ad9b33960ae36add071c68f20759820c2aee4f2f3fe97a0777cf7325b0", 0x72}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002fbd7000fcffffff8900000008000300", @ANYRES32=r7, @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0x9, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032db97000fcdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB="05971c89"], 0x1c}, 0x1, 0x0, 0x0, 0x20048090}, 0x4810) socket$packet(0x11, 0x3, 0x300) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0203000209cd0000000000000000000002002c5154f0fd9cb708000200660000006e9292f88db2ccbcb51044a01035fa1bbe29d7ac0781902e483ac0ea4cc081d2d402e1aa8d420f61d0253cc6c3b67287b2808c5a457ef9500d0d45b0d9047276063d292b1aa69da3a17147d2beaa52de33838ebac039e64567f6bee1d003ed96ce27ca54a33a00b4f5129b54ad26bbc05d66ad47f439c6d3f1392950d3a5ef336c0a78052f95b08a312565d431"], 0x48}, 0x1, 0x7}, 0x0) 2m49.321528788s ago: executing program 2 (id=1144): r0 = io_uring_setup(0x2a5a, &(0x7f0000000080)={0x0, 0x52c4, 0x4000, 0xffffffff, 0x51}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) shmget(0x2, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) getpgid(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = getpid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000500)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(r2, 0x5, &(0x7f00000003c0)={0x1, 0x4, 0x4, 0x8, r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) 2m47.579455852s ago: executing program 2 (id=1145): syz_init_net_socket$ax25(0x3, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40894}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@private1, 0x0}, &(0x7f00000000c0)=0x14) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x8000000000000001, 0x20) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)={0x20, 0x0, 0x6, "0000eaff0000"}, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x10, 0x7861, 0x0, 0x3, {{0x32, 0x4, 0x1, 0x9, 0xc8, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_addr={0x44, 0x34, 0xbd, 0x1, 0xe, [{@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x6}, {@loopback, 0xd3d2}, {@private=0xa010101, 0x9}, {@remote, 0x7fff}]}, @timestamp_prespec={0x44, 0x24, 0xcd, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc953}, {@empty, 0x6}]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x4, '1I'}, @timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0x8, [{@loopback, 0x10001}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x3f, 0x3, [{0x1, 0x2}, {0x1, 0x10, "96b0e3a1550e5e5789bf812122d6"}, {0x7effd8d8f4c91d09, 0x7, "a12d4011ee"}, {0x0, 0xe, "50fd6ba9830398277ba7061e"}, {0x7, 0x2}, {0x6, 0x3, 'g'}, {0x5, 0x2}, {0x5, 0xb, "f7928d4e811c666981"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0xad, 0x1, {{0x48, 0x4, 0x0, 0x1, 0x120, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd, 0x3, 0x5, [{@loopback, 0xc}]}, @end, @timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x9, [{@empty, 0xfffffffb}]}, @cipso={0x86, 0x5e, 0xffffffffffffffff, [{0x0, 0x10, "6b63c3395c01876c06cb9346732e"}, {0x2, 0xa, "998a144b2d1e35cb"}, {0x7, 0xe, "4423a51ea3c27a2fc2130260"}, {0x0, 0xf, "6a68d841e9d388ddac571ad0cc"}, {0x2, 0x7, "e483c82d7b"}, {0x2, 0xf, "8612614bf4252cf1067944286c"}, {0x2, 0xb, "bad3eb382b9eaa1e72"}]}, @timestamp={0x44, 0x28, 0xf0, 0x0, 0x0, [0xc, 0xfffffffc, 0x9, 0xfffffb51, 0xf, 0x8, 0x0, 0xffffffff, 0x8]}, @timestamp_addr={0x44, 0x54, 0xe4, 0x1, 0x3, [{@broadcast, 0x2}, {@multicast1, 0x7ff}, {@loopback, 0x2ddb}, {@local, 0x2}, {@multicast2, 0x6}, {@loopback, 0x2}, {@local, 0x6}, {@remote, 0x7b}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3ff}, {@empty, 0x6}]}, @rr={0x7, 0x17, 0xbd, [@multicast1, @broadcast, @broadcast, @rand_addr=0x64010102, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x80, 0x8, 0x9, 0x8, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x68, 0x0, 0x80, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x3e, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x5}, {@rand_addr=0x64010100, 0xfffffff7}, {@empty, 0x80}, {@remote, 0x6c}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x1}, {@remote, 0x400}]}, @lsrr={0x83, 0x1b, 0x17, [@loopback, @empty, @empty, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x84, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008000}, 0x8015) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r11, 0x5761, 0x0) 2m42.940496184s ago: executing program 2 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) readv(r1, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/240, 0xf0}], 0x4) 2m42.6943924s ago: executing program 2 (id=1158): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf7f}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000020000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000010c0), &(0x7f0000001100)=0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x10000008ebc, 0x7) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) 2m39.385935388s ago: executing program 2 (id=1165): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r2) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0x140400c, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.873210788s ago: executing program 2 (id=1168): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmmsg$unix(r2, &(0x7f0000004600)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0xa0, 0x4000}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000035c0), 0x0, 0x0, 0x0, 0x40057}}, {{0x0, 0x0, &(0x7f00000037c0), 0x0, &(0x7f0000003840), 0x0, 0x4c004}}, {{&(0x7f0000003900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003d00), 0x0, 0x0, 0x0, 0x8080}}, {{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003f80)}, {&(0x7f0000004000)}], 0x2, &(0x7f0000004080), 0x0, 0x802}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000000380)="4f54121dcb1175adcf2a6e3cc59268892176a3e8b8309994602cbd30867203c7bb11db612afee8d5382f9f19cfe3f95ba076214718e8e228e376138ee73bfafd5a400742e4d7132da80953fd1abf44280c739a29a83d47703506de08f1838afb3f0213c50b000000801dd7390426033108d51f36118e8670c6a45df7bb159a8a13833a33ebfcc48706c4b24b56abce15ba48aacb084870fa79fcfb4f8ddc36e2000000000000000000", 0xa9}, {0x0}, {&(0x7f00000043c0)}], 0x3, &(0x7f0000004580), 0x0, 0x20008841}}], 0x6, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1e) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={'dummy0\x00', {0x2, 0x4e21, @broadcast}}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x10000530, 0xc, 0xfffffffffffffffd, 0x596}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) r7 = socket$kcm(0x10, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) 2m23.675955277s ago: executing program 33 (id=1168): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmmsg$unix(r2, &(0x7f0000004600)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0xa0, 0x4000}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000035c0), 0x0, 0x0, 0x0, 0x40057}}, {{0x0, 0x0, &(0x7f00000037c0), 0x0, &(0x7f0000003840), 0x0, 0x4c004}}, {{&(0x7f0000003900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003d00), 0x0, 0x0, 0x0, 0x8080}}, {{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003f80)}, {&(0x7f0000004000)}], 0x2, &(0x7f0000004080), 0x0, 0x802}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000000380)="4f54121dcb1175adcf2a6e3cc59268892176a3e8b8309994602cbd30867203c7bb11db612afee8d5382f9f19cfe3f95ba076214718e8e228e376138ee73bfafd5a400742e4d7132da80953fd1abf44280c739a29a83d47703506de08f1838afb3f0213c50b000000801dd7390426033108d51f36118e8670c6a45df7bb159a8a13833a33ebfcc48706c4b24b56abce15ba48aacb084870fa79fcfb4f8ddc36e2000000000000000000", 0xa9}, {0x0}, {&(0x7f00000043c0)}], 0x3, &(0x7f0000004580), 0x0, 0x20008841}}], 0x6, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1e) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={'dummy0\x00', {0x2, 0x4e21, @broadcast}}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x10000530, 0xc, 0xfffffffffffffffd, 0x596}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) r7 = socket$kcm(0x10, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) 1m53.708766622s ago: executing program 0 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x6}], 0x10, 0x71, @void, @value}, 0x94) open(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x800, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') getsockopt$MRT6(r5, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000d000000f520eabc4363494c8900ff00000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) 1m51.519355883s ago: executing program 0 (id=1236): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)=0xc) lchown(&(0x7f0000000240)='./file0\x00', r1, 0xee00) 1m51.390542812s ago: executing program 0 (id=1237): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="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", 0x3e7}], 0x1}}], 0x1, 0x40011) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014000700100008001300080003"], 0x44}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESOCT=r7], 0xffe) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18fbd9"]) 1m47.384524126s ago: executing program 0 (id=1244): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000800, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ftruncate(r8, 0x0) 1m46.320662101s ago: executing program 4 (id=1246): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000400ffffe000fd6e08000a0000000004060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000040)={0x8, 0x4, 0x0, 0x1114, 0x1, 0x5, 0x2}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x9, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x70}]}}}}}}}, 0x0) 1m46.166756998s ago: executing program 0 (id=1247): mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e62"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x3, 0x4, 0x2}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000580008805400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c2c00098028"], 0x80}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1m44.962670212s ago: executing program 0 (id=1249): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) gettid() prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r2, 0x0, &(0x7f0000001b80)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) getdents(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.860407469s ago: executing program 4 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000), 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdd) syz_clone3(0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x4000}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1m37.979827373s ago: executing program 4 (id=1256): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b600000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_BMAP(r0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x10}}, 0x18) recvmsg$can_bcm(r0, &(0x7f0000000080)={&(0x7f0000000540)=@ethernet, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000940)=""/123, 0x7b}, {&(0x7f0000000b40)=""/65, 0x41}, {&(0x7f0000000bc0)=""/153, 0x99}, {&(0x7f0000000c80)=""/250, 0xfa}, {&(0x7f0000000d80)=""/234, 0xea}, {0x0}, {&(0x7f0000000f40)=""/213, 0xd5}], 0x8}, 0x100) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e10ea5e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001280), 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) 1m34.193859764s ago: executing program 4 (id=1262): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000380), &(0x7f00000003c0)=@sha1={0x1, "68396060d7c7d9ac2e6497d9f1a9786c14df06ad"}, 0x15, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r3, &(0x7f0000000740)=' ', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000200)=0x102, 0x4) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x11, 0xa, 0x300) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r7, 0x0, 0xffffbffffffffffb, 0x403}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r7, 0x0, 0x2, 0x6dd}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) 1m31.98366531s ago: executing program 4 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x73, @private0, 0x5}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000600)="3680e912ac3121b08e52f6a224f491cfc7c7debc905056c1b490d6a6b7d90abe4cbca3b28a04161903093eae169582602c50405ef8e1aebbd1befc7a9a6e9539ca969910738c4f5acf9f2202c8c4d02b75da6e2ba100783a6c862bff7dcf09afa96c2686c18410f36aa54ea05b0bb757b8fb353fbf3d37d26f8d092fda34cfb8a13174a1001d08a73c18df52682532cd6a4d394f4805ca8cd6fdd570c31881257bd651cdf6473844c78d12f27a7f35298a1dfc3b5acffc0a9f7d340c94a9d61b31f84c8623cb92bc79c19526335b4429f27ee017948803fdd60f4e7d5ec344d927a6a14b91", 0xe5}, {&(0x7f0000000380)="120eae3c743170cd079740589974d7a6b4f79c8b3e72b77d17135fc40cd1088bcbb737ed5a61e8d7fa22186fd612c01f5638b4315702a62a2228020c0d735f00257393e0a05d582a7f33ef79e0585da90fbcad738dbd7094b356641b85108f", 0x5f}], 0x2, &(0x7f0000000900)=[{0xa8, 0x177, 0xc, "6a34cc6a195ee4c79c9bd00343faff75f499c3d433636640383cd1d89a2c2c8ff696f79cdc9aa83bec4468b0ab3b0d0c03ee457eecc20bb606f30cbaf9e75105ffbabd73515d6cbf0a43105d36530d0feabb48bc461fa5056c8b7ae87856b31dc46b4f72dc6fe97039eec5b4c090e626233096cff047e5a57cc60dab3a9ef02337a3bb178c2341ebea2e72e23d205dc2bd88"}, {0x18, 0x10d, 0x40, "354b078159c7"}, {0x28, 0x116, 0xb8, "951ab70bc4d07fc26b03de6b578ea2b804"}, {0xb8, 0x116, 0x7, "f25b82972fda3333049359804b320ba2a60dd5b03a8a73bc02c6f3ffc3c301326d981eb2203615839e97ab69d0e620f952aa235dd24554b456930978451e6d446a782d1b5fde26d87ef51e74fdcba5da7f19d87c60a144d921cc15112112f6384c7208c2665a8c2f081068e9020a8b676a79700c3982de5d7120ed3b45228c1e0b37c8f001af6ce04335d66d602aaf91b0b8410a64c8e6f1887b83567775fa95aac3ac266cbff5e0"}, {0x30, 0x116, 0x6, "e5c3b490716ae518f512717b7a9c7d6f5220169e0df5890ed45c85b278"}], 0x1d0}}, {{&(0x7f0000000500)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000700)="49edc6a933993c272d0cdd517d00cde0ebce86b9132c3c955da5624b0314fbcf9f4cd47c987b515bca1ad37be0abd91503b5a4225d844ce5668cf2653772738c9e083027002aa72ee4808c2e529ed3810e98fb8a8f7b381fc8fa068a1a592ef274a96c88271fd42ba9adca", 0x6b}, {&(0x7f0000000840)="56c1640768786a9100240ad68645df1216515f4d7c1d0d87524d0cd7491113f7a8f5a6dca47da3da47bd91ad095700e677a95030c0b605b91296377cee980f1de11693a45618b3e64e731cd85a5b357bd7faa1199e09fbfbb2d4abb8b6fefe8bba24ebe2c48eb447d22fd6ef3c1c", 0x6e}, {&(0x7f0000000b00)="bd8b1b3463d4150279532af2c7a3d6ef57a823ab186487349665c05820d05c8147e67b9367c9c3d577b76bcd41439597ca8aeff33334ad81b57ee12aa1bdcc73aa4fd43fc0a7d9e1fc2644cc867c9ae3eb1685f25143a6268bf9ba3d0b1f9bc3663945a08f50cf678a06c44eb0ed676191563c9c4c2f1bc30b341acb94b0ab65d6740b326631fea4823dea0c9ca4d264f2c3", 0x92}, {&(0x7f0000000bc0)="8b058a2bb94c65cfc0bfe0b3492651dd1713835ca7a20560781316aaaadf99ae29af2d6023bd12d385d0fa6fe8a5a0687ed648e0db43cd406d83850e55b901a7d6ff0bbcba944f33edc374751f0ce97486f851c7a1373839820dfacc18161769afd57accad28185843d8ad873afd04d685ec934438985597a932bfa225741e3fef3b807ce95f6375a501470f44e469cea583936c5e55c1078cb19fb61d53dbbe175b748db9c2d09527341e134de166682dca574561a54ee9979ebde6a4c664eb1274f0fee2eaf85cf7e680fbe028f66ecbe02495de19d0", 0xd7}, {&(0x7f0000000580)="25d13a95cb53089234c5475c4b9b8b72d2ab7e1de5", 0x15}, {&(0x7f0000000cc0)="42f117126c48957d8b50a4fbc446926e940228a03510b09fa1043f97700453dd6055458dc7457a9ad4e368ee48af6263f8eae899073dd2eb9fb5b2db079ad9d1de12e0afeb647158510808e3302fe4b6f610dae1cee7999b75fab7c14228c6ab2ab56a851c44a24385d87c87", 0x6c}], 0x6, &(0x7f0000000dc0)=[{0x30, 0x10f, 0x7ff, "953424f0022387a3f63a2c50eccd5463df7aa8b1ccaa25f241ef"}, {0xe8, 0x118, 0xc, "b7f8d7f872928717dbb49afc1db4f3f6af45b9b0f78363ab41d0bb5dd6b9ca301f466fc1ce21e25809f511701bb0fffa2d349ec151a12a5b4902d82a390115ee4428d5b19c33e73d281f8c415bf600768956363aa138995c0b4ccefd9417dd09ec30149e8e30233d5d9b72511a7d6721c0d342b329150828da24e3bc6c1f736aba46f426b2aa948ab78931e9b4aa79695a0f8398e7e13d010e28097d997fcaedfeae364af5a4347cf6f24e2736b59ddc132dab449b10d62fc6143b49622e893934fae77d72b9fe8d38ee2298ce2d51d6e401"}, {0x78, 0x10a, 0x3, "9c668ae2c3fda288f42b62420a39b4445dd31e624644b5cac0fd4a5cb5fa0448f87efaac8569bf825cd9032f31cad58d012304be8d4c480be53607fc36e79d0f821505ba98e67df332057d30c458e7250dab3396dd485ec705a6ce699306fae8f608434433"}, {0x30, 0x1, 0x4, "1719748291d7a48c4a579d7bf7820c885ae7de896cd4df173ec652d8507a5f27"}, {0xd8, 0x103, 0x3, "c24f368b3e02db7ee5d5ac8365222b4bc7d3efcca188cfcee110724da43f511e992a906be07f9fb594cf0f4774e05fb1fc060e3ca4f35d852bb38f355bfad2d56776e0fb14d71e0ca3f88ff32599f4d9199b26d3c2d881dcd0c28b61d430f72e125a02cdd05e27ebac8ea61c71c816cf78d96560bc487ec7ff5f74cb5d05df5adfca17f4e5404e1d2eb23042f5301a3b194f5364982b332caf740a876737a61bf74ffde6f20cfd54ac4eb92913698dad29bbdf79bd6cf11609326158bf62953fca64d74a5a8c"}, {0x28, 0x84, 0x0, "f17422cd7280a299c3b2693775b5e0b38c6071a167e845"}], 0x2c0}}], 0x2, 0x40000) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000008c0)={0xfffffffe, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) accept(r3, 0x0, 0x0) 1m30.816251075s ago: executing program 4 (id=1269): userfaultfd(0x80801) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r5, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x6, 0x5}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002a80)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x1, 0x0) 1m29.634661394s ago: executing program 34 (id=1249): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) gettid() prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r2, 0x0, &(0x7f0000001b80)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) getdents(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.670058664s ago: executing program 35 (id=1269): userfaultfd(0x80801) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r5, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x6, 0x5}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000002a80)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x1, 0x0) 14.528756046s ago: executing program 5 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x18080, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfa, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fbac141416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 11.820808303s ago: executing program 5 (id=1377): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp, @window={0x3, 0x401}, @timestamp, @window={0x3, 0x4, 0x9}, @sack_perm, @timestamp, @mss={0x2, 0x5}], 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000100)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.371149601s ago: executing program 6 (id=1378): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000006062726f6164636173742d6c696e6b000000ffff00000000000000000000000000000000000000000000000000001a00"/98], 0x68}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="33e00ff48962788b8933039d724b7786060250115e506ad41ee180d782383a01aeb265a533e1f92abbdb940ba23e29be4a482f44186205f7f8996d44c38896cb6bfd589c10b883bf66379cd5142fb64ebf02d701de0b9fe0aaab5408000000297c567c02976d069f62546a240c3a4bff349245cc60a70e1b749fce524f6f175ec4a506d7d391b1bd084d4a6f0181000000000000"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, 0x0, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000300000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x6ae9, &(0x7f0000000340)={0x0, 0x40000000, 0x4000}, &(0x7f00000002c0), 0x0) unshare(0x24020400) r4 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0xffffff62) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711241000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x2b, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb50, @void, @value}, 0x94) 11.139399115s ago: executing program 5 (id=1379): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x12}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000026c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40004044) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x40) sendmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f00000001c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="c8be4bf0f2491bab9c09280878261852c3c8f1b7b9e8b8694b9d17a260c5a84430cbc580ac5121ac532c86433528f2254fc36a9fefcdc5905441d13eeccc22b36a8e5f38b9f2eb88558b45486f115e9ee83482e3186ea7ecb428961eed81706a69053c7a4ccaf64c714a5f869d4022625d1104160a1a0e95149349da6636876460c2d658ea564d9bf89531e03f07000c4e4557e660a3bc4d0a8e845e627b7fdd6c8b59f301aae4dc99e65ea3ec51c22bde84fede6114516859b04c23f1a1ffe914f695edf28e2c596b0f787ee9026566f10a4dda7ab5677bc90e53f29a565876267459c592c41024621f3c72ce915b1fd7ef02c5ba9354c97b", 0xf9}, {&(0x7f00000000c0)="0f94776dbef70ca477fa73996379f26bde440726c658ec09304bb50869a1f0d0b93495fb5217897936f23f7f4b8d002768a6d464f17b10b467946c7e821bdd", 0x3f}, {&(0x7f0000000380)="1a472119939dd47f10a31a21d2ccd83e27934d61a03e16a3c1ccaec9e3ced2307ffee197a5edd0dcbaf508b64ab42959e064ee1c06b7ef0bfdad1e047520e95ebae9f8102f224d393143aa5143857b6d956fc15981ff1eaa9eb5a9a92d89c6c71ee1be141ddef989737f6335748ee396bf30de709a90d4542469a7828a2429108432beaa43c342ace24a5dd3bf43e22a0a8a2a66d118762c019681e79b33b5d077eccf8e31bd5800b1084ec1a51ffa1238dca8d0e5b486534a1f13d7776bc7786dfc4e290ae51d1c8ea903242939d823547b96bf7af13f8d48aa1d398f65", 0xde}, {&(0x7f0000000480)="d59488d0f4cd9f047c68a40fed4be219acc9f5b60c64719f76b0c885d5d7794a10b21fee19ee998c7aebec1c9814fcfca17bd5fc50382a1e18c69ca499cc1e37ef5198529288324f5dd6d7d25bf4ea8343c6d34f5fd6884506932058", 0x5c}, {&(0x7f0000000500)="9d112fb39db30911b750d9a548ab49db8309ac62af1fef12ca85847c902f519e21fffd20913bf20932f341eef29d9b2565071641f8354ca17527a7fa546210530028361aeae75acaa195b4070928644c73e144c2c14edd5142f6dda6ae26796a8e6b4c01bebc6fc3c8f92bb3c7da3ab6ddc53127749161154ebc97d21f079b79f0a56702c3e75e6a30e405727b63bd8aa44b814c086cf96f84e85950471adbd70c69712bac6d7f6ce6b3b996b779681fc64edfe1624ba9341ace8abb97a943a4583f2122ba48d075960296ed3a54673399", 0xd1}], 0x5, 0xfffffffffffffffe}}, {{&(0x7f0000000680)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000700)="3ea282dd3e3ab8ffc6a88b8f8ae5d55b504c8552160791939347c1514e358f8d3f680447758f396cb6fda6896422a5223fff839fffb6e5a65748686d79316f619d5fa8dfb3d6e1bc", 0x48}], 0x1}}, {{&(0x7f0000000880)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000900)="bbf1b7ee453cd2daf25778c09a2928f2871e356bf173e40e870e94ec48202c29940ed950c4ce00dc660d7971a3593c8da259979cda4e066e1ad594b1f20b61029d5aaace150292983c83d4d8669097a47441bc62f5c40f4a19dbb9e2bc19932a44e56137d0434323998102689b55c96d4adf0c96dc109fbb4b5b3d6890", 0x7d}, {&(0x7f0000000980)="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", 0x1000}], 0x2, &(0x7f0000001980)=[{0x108, 0x111, 0xf, "851fb38e30d707e6d3306c67b0434f56ad907c82f7a3dddcdb6818647561c84c8e3010d764226ec3fd56809a912af5c54c93647765b89ed02f9a80d27501813c9e12efa6a42e08ef1e55b5d3c30491ab60a652f07cc2cf2dd18bf45b1a3d5681ccf4d55d766d7729b0e45f51c5cdded655c0b9fb494d17a759549d535c960541c12cad191f63716f95ca5b776a1452e9fe588f9ed8c272e207130b1c849cd8c7c583904b99d2ad03e8d5b5c54af190ef9df1ef9a205847a7e13208cc168e6b7fed732d576f2438db5fe51fd0e7d48adb0ee6602a0297dfe962bade7b5e3e4707f1a697a068f84ab17e8101d4195dafca07f9f9fcbace"}, {0x108, 0x108, 0x6, "5ea92766da62eabaa80cc27d33fc12dbcaf40bc125dc5b028e7b43c1f4619246e44da6d1b11fff84db460744ce4f7663ab74f00a8978fd3a523d76555b45e94e216e47fd7d76bf1126fcf2ab25d8c96b49dbe0880c3e74ee5274866d2e9efccb6158c72541f76779220239cd403a2c980414b9109033ceb61c593184825b67e201c3c9ad2dacac311b104690a108ab8202b6eee8ce03c69d0cf87e435b71953e299b78d102e9a1b9a7f16a872453cc0ac54c19eca1cf30bdf7e73650a8add9b86de7f8d5664d02c7e752e581bb664dbea5a2d7a352fcab3435d4681f9c489ae4f5b6752d099291a500accd32012949f60b7a11"}, {0xb8, 0x10f, 0x6, "f2f3cf66989dc846f8784bf7ffd5eabdc23f848d1c901670c479b2d31b80122bfb81109aace8b1c2dffca1aad9c3a8f60b4943667ed9c8194f0ff8df8fa1d863add1dc5e42bd7f9f00e9ff52e3182186fe70e91b7c3fee3aba63230684644dce4e8bfc6910601325481fbedc37b07ef4aa5cdddbbec81ed442e13b67ae2e0987bac914ec1d32fef7cc0d9cf4c2ae7721b475653b2e66cc7cdbcc9ce3bc9222444a95f25d"}, {0x58, 0x10e, 0x9, "ec1cf6e57c8bf594d21672449b4c85c57ad598fe9aa98f5919f8e0a15738fb1d87832f7826e242237ef45b1b85a54217c1a80fea52bbf607c46c40ff904cd233ef31983d85544d"}, {0xf0, 0x117, 0x9, "f10f799bc6ab1344e0c54469b4eed0b37142e4e26986f0e56f272b81180e8e4169ab366ddbfc40c9f1d0aa9882bbef0aee3ae1e23b9c43c79a259adb1d09180aafe7b2e1e3ce76237a98d110ccf9ed50a36aa7cbd81910249fca8ff2079b7feb15e5a79850f5de2aa9e2c625a139807628994396be8eedbb15b3c3627fd09943c5d9f802ae8cdec7a3af89e97f36fea46d332fb91f75953038490983f1500897c64322bd63b8a525dda2d8be4809945c8d8d25757b69d28bc644597a2ffae143b87e4eaca1ccecfb4b39757d698dc0f213d9adb7aa3ac328cf"}, {0xe8, 0x11, 0xf, "0feed0af106c6215474ac343abc6d93b8afacd6178397ed3a743c92d5b34b657573792351c8b2393eda59ae3b75b9287677a4301d8ac7bb95d9caa6bde29dcb7d0d3f2ac56791002d474dbff0e4d0d112ef8ecfe27a512b81f038aefe4f05610452ed46d9bd1670d1e336100ba62c4227aab53932e8675eff07a9243963a0e6376e1561d171686f1dc853dae546935b5e10c4fef23959a40214cac72aaaadd42a640b09b12556e3b4378904e0e1c5e808855f817b2a86979210e61523e0f8dfbdcf5353022495c6709718e95372d3e3aa3a7dfe0"}, {0x98, 0x114, 0x81, "db7df7d3e50336b2df79d6ed145b296b6aebc03e2d74dc2c979647acdced9ad4dd38baf4dcb12e9689327839dfea2e703adb6bac7bad501ea86a8e0ed99d246d5261ecb2553a05c11b9460bf13d7bfabeb2a4d057ab8d8a959687a33e2520522e1807324a32fe477d7e520d9e4050c1fdb4fc84ec7dc1f521a951debe960090418f2642dfdb7"}, {0xb8, 0x118, 0x8, "00c1a36e26a69bb9dbf824707955286f35be8c19d8973b64bfa4ecd52778a394545b507e48992e947f1defe8e5c24531f5aafe1f99bc1755302c3ae6538de579866edad535ee7277534d277701efff2cf7abd090e8c374626771b1ccf90ae7a70c0194ffbf1450f7e6f486733dcf7d3318cd51c2a6666818c32380fceeaf481e749793ab974783064b223eafe5170ab649328e70c816f3132a3c037adc960d0f6a0d7103"}, {0x28, 0x109, 0x1ce, "60b90e843af559b204f81c344e188e40dd28310ccf"}], 0x670}}, {{&(0x7f0000002000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)="5c4fa4cd26da1b0dabfed9bb2af2679dddd9c8b2c39c93fee554dc667b8b9928b53c9057e3c19ddb92f6c0f94a3a885f76dcdccc0cdd90ea79c065c5535198006910caff043074684607a7f7589c02095b1cfd35f2d3732ae2a925c4ac743758ba1b1ed7aa9d2aa85adc75a79cfb91abb54ee1dac51179d84b3efe165db265ddf9b54706076d5e88621eac1645062c7d24a3dbdc72845f4068bd745740a68a656f952ba6ccf2ee5e2432a5000683c67edb714dcb4497920b41494118319015218b8e428a6a92e905a03d934c5ac7", 0xce}], 0x2}}, {{&(0x7f0000002200)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x100}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002280)="11a6c3d5f40b38b10d3442814879784c613a382be4775725a2fb5725b8fcb0f858417b6edb789ffe2d3a8c0d94d246952f8ffb9714f779577a860b489ad12bebb265d631eef5eb98a9176b3da72e89754f68168eadc729977178d2f393f0daaabf2fd12ebe115d9e6394aaca297e2043f4cf0b230bc33195cf8417abb6982647065e3ff7eb668f0fa6ddb69160458ddd48891c4f9eeb4cc9021c4356d789d026c837023547386464169652c17109c9", 0xaf}, {&(0x7f0000002340)="a99cc1b9d9e0664544da854a6c0c889e21a47a093e8757316f96d7b69f56e9b88c46785d39fa6793727dd614a653733ccb708f3edbd231048d94f786d257884c72119eeb99a0fda89c51aea177a0f4ff66cdf0bedfb7e75f3d7c41c630119dc0eee1498b9ee34855b749cd6bb727327844ef751606c7edb9ef6a4ff5002bd4ef4e8ad9e8e9a3fc8ddd0aacb6cb02f1cddde2ad75b087dbb57c64fb9fc9481f017e6471cb1d1da579806adf067b68840fe2a326943caf126999375ddf6c2e8b", 0xbf}, {&(0x7f0000002400)="13c862e6fcdb9f4a9886cdc5101ba92731", 0x11}], 0x3}}, {{&(0x7f0000002480)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002500)="16821e342b4ab92b30e20cc34d57cbb64e66acf2d414931fc1f8c9296ae8ebc2da1994cde1f01e0508c181d8bfe147e3e16769427b7295ce5cb2634c03a5a6ee91d1be2d9456b7eed339aea2048f03298c62882d384e4448da7ddae98fb6f271f03c1a5d90b9d099010945b643aec9cfd244537d6783c50e597b540f2806c7e1b15b5bb869b2dd3f6ebd44e34ed87ec8a9dd04f37610d7fbb76047df1f4a048cdb8442b63e81389079267def575589fad96dfbeb8ca5ce71a2b6", 0xba}], 0x1, &(0x7f0000003d00)=ANY=[@ANYBLOB="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"], 0x1240}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003840)="b9c309e11fd4823ac8b6a737f7783f967468d28a1135b702dff28a3baf3cdf8cece648633aa121d0b0c697d57e578c3b0329b58a2b5fe5e7707ad6000f059471412c", 0x42}, {&(0x7f00000038c0)="bc8f2f4ba24e2f8373009fe3a899c62666076894ae5429ac840dd49cef36dd7fbc8805749bc00b2426d6a8f66398c5ed646415c76a990dbd03e64daacd971dcc9a22780b00866bcbc827a734a0b03c", 0x4f}], 0x2, &(0x7f0000003980)=[{0x100, 0x98, 0x0, "d7676af7786b9962574236a39a59c5b765cf1cd1dc6650101c217b92d9ffafc836adf9b20e1e4ccf058ab6796fe7e8df86d0c8952ca6ba77ef3288c72b100b42a93d8479f75177eab3693ff27586098e3d8a8891eb1cb5a72c7292609c34be445250b0e7bf5664ed970d0966e9884af9de4713badfcd6d9ee7622aa079356cd057e1fe683076c02c8689b03442121d7d2bd04c2ed82b7d965357548eff4e597fb8f4b135638967a6c799255b032d711db415ac173c2aea2be4c130e5e5d6e3b70b9f1fde8fa465ef9c7efdfe62259c9cf8de4f3573ad7bc0375ad3b260d37122145486faf26c57b4e448cb"}, {0x28, 0x1, 0x3, "a9a64c4c76f6d71d8214c7317c861acbff00f848"}, {0x70, 0x11, 0x8b0, "696fdbdbaf7a9923a7abc30afbb362b4c1903632ff50aeded24f6868874630a1625b1334002698c0275d3d566727bd2fa1b7dd4a61375ea6d98d273fdb8ffa1ae385ce5a8b1d1af44ffae4173c82f707170d34ad58c4789a2350e7"}], 0x198}}], 0x7, 0x804) 9.416364518s ago: executing program 6 (id=1381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x40, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) write$binfmt_script(r5, &(0x7f0000000600)={'#! ', './file1/file0', [{0x20, '\x89,Qhm\xcd\xc7\xeb\xaf\xcd]y\x9c\x93\xacz\xd2c.\xc9}\xafm\t\x91\xcf\xcc\\N\xeb\x17\xc0\x90\\\x9d\x18\xb2\xbd\x17\x12\x8c{\xa5X\x92\x9b\xed?\xfd\xcb\xa5\xd0\xeduI\xc81w\xa9\x83\x89\xb1h\xe11=\x85\x82\xa2OI\xee\x02[\xf5:[\xb7\xa4l\xa6\xc5~\x8d\t\x00b\xf1\xe8I\x94\x82!\xedW\xb7t+\x02\xfb\xb9\x82\x89\x00\x00\x00\x00\x00'}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1f0) ioctl$BLKRRPART(r5, 0x125f, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 7.99084293s ago: executing program 5 (id=1383): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.864311936s ago: executing program 3 (id=1384): syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, 0x0, 0x20040051) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="4cc84cdd3740e7827f6da04b1c9f479edd3c4975ab9f4373b39597dbfb7e31bea628804ac8c53963c1a46fa68595fdd9f9eec4bdad7cdfcde4051c0373a06fde005291fab55867bb16851ed72d63bd1cf920c431572cb9a3d9d86888d85859bdadbfaa6d922a091d8c9ff27f8a45c29fee5e3c38e7227d62e0d3398bff3198bfe07af6b19759", 0x86}], 0x1, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x7, [@remote]}, @rr={0x7, 0x13, 0xfd, [@multicast1, @empty, @remote, @local]}, @cipso={0x86, 0x6, 0x1}, @lsrr={0x83, 0x27, 0x8e, [@rand_addr=0x64010102, @multicast1, @rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010101, @remote, @multicast2, @multicast1, @multicast2]}, @rr={0x7, 0x17, 0x58, [@empty, @multicast2, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x29}]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xd, "3c0a0fd01807c70772a14f"}, {0x6, 0x9, "305940d0d86088"}, {0x2, 0xd, "ed5868699d3b58fe4db483"}, {0x1, 0x5, 'xy['}, {0x0, 0x6, "ccdfd3b6"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x68, 0xffffffffffffffff, [{0x0, 0xd, "bf74f51333a2876986cc9a"}, {0x1, 0x12, "ce3ab41d48d4220a2d587d386baa0d34"}, {0x6, 0x12, "cc6744407ae1dd6ee379d37d9f5984c9"}, {0x7, 0x7, "93dd9fa66d"}, {0x1, 0x8, "8d6d1567884f"}, {0x4, 0x5, "c01ab8"}, {0x6, 0xb, "db72025362b1f34a66"}, {0x7, 0x4, "7583"}, {0x0, 0xe, "c44831abd1ca8eb8ef94c130"}]}, @noop, @ssrr={0x89, 0xb, 0xb4, [@remote, @multicast2]}, @lsrr={0x83, 0x13, 0x10, [@empty, @empty, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xd3, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}], 0x200}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40080) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = fsopen(&(0x7f00000000c0)='gfs2meta\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x4, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) socket(0x200000000000011, 0x2, 0x0) 7.334926356s ago: executing program 3 (id=1385): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000003000)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)=':', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000f40)=[{&(0x7f00000077c0)="d7", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) clock_getres(0x5, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000200000000004e2300000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="01000800030000000000000000f800000800030011"], 0x54}}, 0x20004010) r7 = fcntl$dupfd(r3, 0x406, r3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xfc) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@fd={0xab1, 0x2, 0x4, 0x1000, 0x1, {r1, r2/1000+10000}, {0x2, 0xc, 0x1, 0x9, 0xa6, 0x2, "d4e1d843"}, 0x50, 0x4, {}, 0x2, 0x0, r7}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) 6.413678946s ago: executing program 6 (id=1386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x25, 0x1, 0x5) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fsopen(&(0x7f00000006c0)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r7) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000140)={0xc, r8}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x2, 0x200, 0x4, 0xffff, 0xc}) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e23, 0x2c04f3e0, @mcast1, 0x3}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="46a634756fcc27e5748e3fd8def0b4c80100000000000000014d564b00000000af00007f00000000"]) ioctl$KVM_KVMCLOCK_CTRL(r11, 0xaead) 6.344922231s ago: executing program 3 (id=1387): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0100000000000000"], 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1b, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008502"]) 6.284247488s ago: executing program 5 (id=1388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x2}, 0x800) 5.987636196s ago: executing program 3 (id=1389): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xa0, 0x94, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x4bb2, 0x2, 0x1, {0x22, 0x4ca}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa7, 0x8f, 0xf8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400000004030d0446a970690b984af4b06c98c46ad48afae62b241a2b16b2f98e62ebf9938e5aec532e3befb783fb93af70747af60330831f8225031831a83ad069147d47f315046122f56d6129e92ecc2a063c07b7d2785cdcf0a179299c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x36}, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="a1a938559e11"}) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r5}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c0000007a006bcd9e3fe3dc6e08000007000000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r6, &(0x7f0000000740)={0x28, 0x0, r8, {{0x7, 0x4000005, 0x1, r9}}}, 0x28) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xe6, 0x0}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRESHEX=r5], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r11}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 3.904280021s ago: executing program 6 (id=1390): r0 = io_uring_setup(0x2a5a, &(0x7f0000000080)={0x0, 0x52c4, 0x4000, 0xffffffff, 0x51}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r4 = getpgid(0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x4}, &(0x7f0000000500)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000003c0)={0x1, 0x4, 0x4, 0x8}) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0xee01, 0xee00, r3, 0x134, 0x3ff}, 0x9e7, 0xc, 0xfffffffffffffff9, 0x1, r4, 0x0, 0x8}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) 2.886501137s ago: executing program 5 (id=1391): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000), 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdd) syz_clone3(0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x4000}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 2.839339723s ago: executing program 6 (id=1392): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x100a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000040)) 2.749670055s ago: executing program 3 (id=1393): syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, 0x0, 0x20040051) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="4cc84cdd3740e7827f6da04b1c9f479edd3c4975ab9f4373b39597dbfb7e31bea628804ac8c53963c1a46fa68595fdd9f9eec4bdad7cdfcde4051c0373a06fde005291fab55867bb16851ed72d63bd1cf920c431572cb9a3d9d86888d85859bdadbfaa6d922a091d8c9ff27f8a45c29fee5e3c38e7227d62e0d3398bff3198bfe07af6b19759", 0x86}], 0x1, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x7, [@remote]}, @rr={0x7, 0x13, 0xfd, [@multicast1, @empty, @remote, @local]}, @cipso={0x86, 0x4a, 0x1, [{0x7, 0xc, "73d4cfa91103814298f2"}, {0x0, 0xe, "4ab924a0ee548bfa12933632"}, {0x5, 0x11, "78b937ca07a31048173775353d4110"}, {0x5, 0x11, "41af53aff57d0314fb52fdfcaba27d"}, {0x0, 0x8, "1c0abcb06528"}]}, @lsrr={0x83, 0x27, 0x8e, [@rand_addr=0x64010102, @multicast1, @rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010101, @remote, @multicast2, @multicast1, @multicast2]}, @rr={0x7, 0x17, 0x58, [@empty, @multicast2, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x29}]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xd, "3c0a0fd01807c70772a14f"}, {0x6, 0x9, "305940d0d86088"}, {0x2, 0xd, "ed5868699d3b58fe4db483"}, {0x1, 0x5, 'xy['}, {0x0, 0x6, "ccdfd3b6"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x68, 0xffffffffffffffff, [{0x0, 0xd, "bf74f51333a2876986cc9a"}, {0x1, 0x12, "ce3ab41d48d4220a2d587d386baa0d34"}, {0x6, 0x12, "cc6744407ae1dd6ee379d37d9f5984c9"}, {0x7, 0x7, "93dd9fa66d"}, {0x1, 0x8, "8d6d1567884f"}, {0x4, 0x5, "c01ab8"}, {0x6, 0xb, "db72025362b1f34a66"}, {0x7, 0x4, "7583"}, {0x0, 0xe, "c44831abd1ca8eb8ef94c130"}]}, @noop, @ssrr={0x89, 0xb, 0xb4, [@remote, @multicast2]}, @lsrr={0x83, 0x13, 0x10, [@empty, @empty, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xd3, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}], 0x240}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40080) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = fsopen(&(0x7f00000000c0)='gfs2meta\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x4, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) socket(0x200000000000011, 0x2, 0x0) 2.149100399s ago: executing program 6 (id=1394): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x1, 0x3, "8d29ef"}, 0x0}) 0s ago: executing program 3 (id=1395): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x1, 0x3, "8d29ef"}, 0x0}) kernel console output (not intermixed with test programs): 31 using dummy_hcd [ 665.041852][ T48] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 665.050990][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.083543][ T48] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 665.099023][ T48] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 665.117297][ T48] usb 1-1: Manufacturer: syz [ 665.133060][ T48] usb 1-1: config 0 descriptor?? [ 665.151816][ T48] igorplugusb 1-1:0.0: incorrect number of endpoints [ 665.419252][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 665.925057][ T979] usb 1-1: USB disconnect, device number 31 [ 665.959262][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 670.008017][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 670.753992][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 670.946170][ T48] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 671.236936][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 671.349004][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 671.373271][ T48] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 671.433097][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.442188][ T48] usb 1-1: Product: syz [ 671.446463][ T48] usb 1-1: Manufacturer: syz [ 671.452183][ T48] usb 1-1: SerialNumber: syz [ 671.462578][ T48] usb 1-1: config 0 descriptor?? [ 672.375193][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 672.397939][ T48] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 673.569061][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 673.586230][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.607748][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 673.634346][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.667889][ T24] usb 4-1: config 0 descriptor?? [ 673.700625][ T9551] FAULT_INJECTION: forcing a failure. [ 673.700625][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 673.713586][ T9551] CPU: 0 UID: 0 PID: 9551 Comm: syz.1.1011 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 673.713615][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 673.713628][ T9551] Call Trace: [ 673.713636][ T9551] [ 673.713644][ T9551] dump_stack_lvl+0x189/0x250 [ 673.713681][ T9551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.713709][ T9551] ? __pfx__printk+0x10/0x10 [ 673.713753][ T9551] ? __pfx___might_resched+0x10/0x10 [ 673.713790][ T9551] should_fail_ex+0x414/0x560 [ 673.713817][ T9551] should_failslab+0xa8/0x100 [ 673.713838][ T9551] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 673.713870][ T9551] ? __alloc_skb+0x112/0x2d0 [ 673.713900][ T9551] __alloc_skb+0x112/0x2d0 [ 673.713930][ T9551] netlink_sendmsg+0x5c6/0xb30 [ 673.713953][ T9551] ? is_bpf_text_address+0x26/0x2b0 [ 673.713990][ T9551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.714023][ T9551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.714045][ T9551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.714071][ T9551] __sock_sendmsg+0x219/0x270 [ 673.714095][ T9551] ____sys_sendmsg+0x505/0x830 [ 673.714130][ T9551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.714168][ T9551] ? import_iovec+0x74/0xa0 [ 673.714200][ T9551] ___sys_sendmsg+0x21f/0x2a0 [ 673.714231][ T9551] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.714299][ T9551] ? __fget_files+0x2a/0x420 [ 673.714318][ T9551] ? __fget_files+0x3a0/0x420 [ 673.714349][ T9551] __x64_sys_sendmsg+0x19b/0x260 [ 673.714381][ T9551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.714427][ T9551] ? do_syscall_64+0xba/0x210 [ 673.714458][ T9551] do_syscall_64+0xf6/0x210 [ 673.714487][ T9551] ? clear_bhb_loop+0x60/0xb0 [ 673.714511][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.714531][ T9551] RIP: 0033:0x7fb78c78e969 [ 673.714549][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.714566][ T9551] RSP: 002b:00007fb78d641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.714588][ T9551] RAX: ffffffffffffffda RBX: 00007fb78c9b5fa0 RCX: 00007fb78c78e969 [ 673.714603][ T9551] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 673.714617][ T9551] RBP: 00007fb78d641090 R08: 0000000000000000 R09: 0000000000000000 [ 673.714630][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.714642][ T9551] R13: 0000000000000000 R14: 00007fb78c9b5fa0 R15: 00007ffcdaa44da8 [ 673.714675][ T9551] [ 674.171998][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 674.180946][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 676.443041][ T48] usb write operation failed. (-71) [ 676.644627][ T24] usb 4-1: USB disconnect, device number 39 [ 677.925092][ T48] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 678.056288][ T48] dvbdev: DVB: registering new adapter (Terratec H7) [ 678.063378][ T48] usb 1-1: media controller created [ 678.071551][ T48] usb read operation failed. (-71) [ 678.089785][ T9565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.103615][ T48] usb write operation failed. (-71) [ 678.128722][ T48] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 678.233117][ T48] usb 1-1: USB disconnect, device number 32 [ 678.275545][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 678.369020][ T120] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 678.518902][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 678.560179][ T120] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.608233][ T120] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 678.617878][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.646018][ T9578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.698521][ T120] usb 3-1: config 0 descriptor?? [ 678.830134][ T9556] syz.1.1013 (9556): drop_caches: 2 [ 679.121859][ T120] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 679.671558][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 679.793049][ T120] ryos 0003:1E7D:3138.000D: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 679.854370][ T120] usb 3-1: USB disconnect, device number 43 [ 680.559247][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 680.577545][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 680.603302][ T24] usb 1-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 681.085554][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 681.092477][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 681.162513][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.232589][ T24] usb 1-1: config 0 descriptor?? [ 681.649080][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 681.886218][ T24] kye 0003:0458:5013.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 681.916408][ T24] kye 0003:0458:5013.000E: unknown main item tag 0x0 [ 681.962074][ T120] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 682.045801][ T24] kye 0003:0458:5013.000E: hidraw0: USB HID v0.07 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 682.106131][ T24] kye 0003:0458:5013.000E: tablet-enabling feature report not found [ 682.145354][ T24] kye 0003:0458:5013.000E: tablet enabling failed [ 682.228897][ T120] usb 2-1: Using ep0 maxpacket: 16 [ 682.237095][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.255246][ T120] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 682.277406][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.300252][ T120] usb 2-1: config 0 descriptor?? [ 683.297938][ T120] usb 2-1: USB disconnect, device number 48 [ 683.356712][ T5907] usb 1-1: USB disconnect, device number 33 [ 683.719668][ T9620] FAULT_INJECTION: forcing a failure. [ 683.719668][ T9620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.867545][ T9620] CPU: 1 UID: 0 PID: 9620 Comm: syz.0.1030 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 683.867576][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.867588][ T9620] Call Trace: [ 683.867596][ T9620] [ 683.867605][ T9620] dump_stack_lvl+0x189/0x250 [ 683.867635][ T9620] ? __lock_acquire+0xaac/0xd20 [ 683.867665][ T9620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.867697][ T9620] ? __pfx__printk+0x10/0x10 [ 683.867728][ T9620] ? __might_fault+0xb0/0x130 [ 683.867769][ T9620] should_fail_ex+0x414/0x560 [ 683.867794][ T9620] _copy_from_user+0x2d/0xb0 [ 683.867821][ T9620] ___sys_sendmsg+0x158/0x2a0 [ 683.867850][ T9620] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.867910][ T9620] ? __fget_files+0x2a/0x420 [ 683.867926][ T9620] ? __fget_files+0x3a0/0x420 [ 683.867955][ T9620] __sys_sendmmsg+0x227/0x430 [ 683.867987][ T9620] ? __pfx___sys_sendmmsg+0x10/0x10 [ 683.868023][ T9620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 683.868067][ T9620] ? ksys_write+0x1f0/0x250 [ 683.868092][ T9620] ? rcu_is_watching+0x15/0xb0 [ 683.868126][ T9620] __x64_sys_sendmmsg+0xa0/0xc0 [ 683.868154][ T9620] do_syscall_64+0xf6/0x210 [ 683.868181][ T9620] ? clear_bhb_loop+0x60/0xb0 [ 683.868204][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.868222][ T9620] RIP: 0033:0x7fb51f18e969 [ 683.868239][ T9620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.868255][ T9620] RSP: 002b:00007fb520040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 683.868276][ T9620] RAX: ffffffffffffffda RBX: 00007fb51f3b5fa0 RCX: 00007fb51f18e969 [ 683.868290][ T9620] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000004 [ 683.868302][ T9620] RBP: 00007fb520040090 R08: 0000000000000000 R09: 0000000000000000 [ 683.868313][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.868324][ T9620] R13: 0000000000000000 R14: 00007fb51f3b5fa0 R15: 00007ffd8fcde058 [ 683.868354][ T9620] [ 684.657981][ T9634] fuse: Bad value for 'group_id' [ 684.663336][ T9634] fuse: Bad value for 'group_id' [ 685.577880][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 686.115747][ T9639] Lens B: ================= START STATUS ================= [ 686.123387][ T9639] Lens B: Focus, Absolute: 0 [ 686.128021][ T9639] Lens B: ================== END STATUS ================== [ 686.223477][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.229981][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.729662][ T9649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.141699][ T9647] can: request_module (can-proto-0) failed. [ 687.494069][ T30] audit: type=1326 audit(2000000843.549:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9657 comm="syz.0.1041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x0 [ 687.897295][ T5857] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 688.263536][ T9665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.302467][ T9670] FAULT_INJECTION: forcing a failure. [ 688.302467][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.374440][ T9670] CPU: 0 UID: 0 PID: 9670 Comm: syz.1.1045 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 688.374471][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.374484][ T9670] Call Trace: [ 688.374492][ T9670] [ 688.374501][ T9670] dump_stack_lvl+0x189/0x250 [ 688.374533][ T9670] ? __lock_acquire+0xaac/0xd20 [ 688.374564][ T9670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.374590][ T9670] ? __pfx__printk+0x10/0x10 [ 688.374621][ T9670] ? __might_fault+0xb0/0x130 [ 688.374665][ T9670] should_fail_ex+0x414/0x560 [ 688.374692][ T9670] _copy_from_user+0x2d/0xb0 [ 688.374732][ T9670] ___sys_sendmsg+0x158/0x2a0 [ 688.374762][ T9670] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.374838][ T9670] ? __fget_files+0x2a/0x420 [ 688.374855][ T9670] ? __fget_files+0x3a0/0x420 [ 688.374882][ T9670] __x64_sys_sendmsg+0x19b/0x260 [ 688.374910][ T9670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.374971][ T9670] ? do_syscall_64+0xba/0x210 [ 688.375001][ T9670] do_syscall_64+0xf6/0x210 [ 688.375027][ T9670] ? clear_bhb_loop+0x60/0xb0 [ 688.375051][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.375070][ T9670] RIP: 0033:0x7fb78c78e969 [ 688.375088][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.375104][ T9670] RSP: 002b:00007fb78d641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.375133][ T9670] RAX: ffffffffffffffda RBX: 00007fb78c9b5fa0 RCX: 00007fb78c78e969 [ 688.375148][ T9670] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 688.375161][ T9670] RBP: 00007fb78d641090 R08: 0000000000000000 R09: 0000000000000000 [ 688.375173][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.375185][ T9670] R13: 0000000000000000 R14: 00007fb78c9b5fa0 R15: 00007ffcdaa44da8 [ 688.375216][ T9670] [ 689.039232][ T5907] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 689.198308][ T9686] fuse: Bad value for 'group_id' [ 689.203423][ T9686] fuse: Bad value for 'group_id' [ 689.637135][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 689.788948][ T5907] usb 4-1: device descriptor read/64, error -71 [ 690.188913][ T5907] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 690.407679][ T9692] Lens B: ================= START STATUS ================= [ 690.415143][ T9692] Lens B: Focus, Absolute: 0 [ 690.419790][ T9692] Lens B: ================== END STATUS ================== [ 690.427309][ T5907] usb 4-1: device descriptor read/64, error -71 [ 690.518524][ T9697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.539932][ T5907] usb usb4-port1: attempt power cycle [ 690.764093][ T979] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 690.789376][ T30] audit: type=1326 audit(2000000846.859:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 690.811087][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.833846][ T30] audit: type=1326 audit(2000000846.859:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 690.867562][ T30] audit: type=1326 audit(2000000846.859:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 690.919003][ T5907] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 690.938938][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 691.385462][ T5907] usb 4-1: device descriptor read/8, error -71 [ 691.392879][ T979] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 691.405133][ T30] audit: type=1326 audit(2000000846.859:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 691.426658][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.434303][ T979] usb 3-1: config 127 has no interface number 1 [ 691.458514][ T979] usb 3-1: config 127 interface 171 has no altsetting 0 [ 691.468344][ T979] usb 3-1: config 127 interface 0 has no altsetting 0 [ 691.476319][ T30] audit: type=1326 audit(2000000846.859:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 691.503361][ T979] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=d5.b9 [ 691.512890][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.521166][ T979] usb 3-1: Product: syz [ 691.525562][ T979] usb 3-1: Manufacturer: syz [ 691.530613][ T30] audit: type=1326 audit(2000000846.859:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 691.554506][ T979] usb 3-1: SerialNumber: syz [ 691.556683][ T30] audit: type=1326 audit(2000000846.859:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 691.582216][ T9711] kAFS: No cell specified [ 691.592121][ T30] audit: type=1326 audit(2000000846.859:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 691.613509][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.622749][ T30] audit: type=1326 audit(2000000846.859:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 691.644279][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.656112][ T120] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 691.692520][ T5907] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 691.991728][ T48] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 692.336483][ T48] usb 2-1: device descriptor read/64, error -71 [ 692.665864][ T979] xr_serial 3-1:127.171: xr_serial converter detected [ 692.712891][ T979] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 692.726459][ T5907] usb 4-1: device descriptor read/8, error -71 [ 693.189929][ T5907] usb usb4-port1: unable to enumerate USB device [ 693.234279][ T979] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 693.262037][ T979] usb 3-1: USB disconnect, device number 44 [ 693.277842][ T979] xr_serial 3-1:127.171: device disconnected [ 693.286090][ T9718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1059'. [ 693.331768][ T48] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 693.479389][ T48] usb 2-1: device descriptor read/64, error -71 [ 697.429559][ T48] usb usb2-port1: attempt power cycle [ 697.621978][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 697.904313][ T9737] fuse: Bad value for 'group_id' [ 697.909452][ T9737] fuse: Bad value for 'group_id' [ 698.892785][ T9739] fuse: Bad value for 'group_id' [ 698.897790][ T9739] fuse: Bad value for 'group_id' [ 700.819781][ T9756] Lens B: ================= START STATUS ================= [ 700.827235][ T9756] Lens B: Focus, Absolute: 0 [ 700.831970][ T9756] Lens B: ================== END STATUS ================== [ 700.904019][ T9760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.233587][ T9772] netlink: 'syz.0.1069': attribute type 2 has an invalid length. [ 701.374717][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 701.374849][ T30] audit: type=1326 audit(2000000857.439:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 701.413746][ T30] audit: type=1326 audit(2000000857.439:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 701.438264][ T30] audit: type=1326 audit(2000000857.469:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 701.477454][ T30] audit: type=1326 audit(2000000857.469:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 702.438016][ T30] audit: type=1326 audit(2000000857.469:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 702.461004][ T30] audit: type=1326 audit(2000000857.469:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 702.482652][ T30] audit: type=1326 audit(2000000857.469:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 702.505682][ T30] audit: type=1326 audit(2000000857.469:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 702.553614][ T30] audit: type=1326 audit(2000000857.469:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 702.581486][ T30] audit: type=1326 audit(2000000857.469:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9778 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 702.669349][ T5907] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 702.838304][ T5907] usb 1-1: device descriptor read/64, error -71 [ 703.102381][ T9792] misc userio: Invalid payload size [ 703.170614][ T5907] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 703.355244][ T9791] netlink: 'syz.1.1076': attribute type 5 has an invalid length. [ 704.490918][ T5907] usb 1-1: device descriptor read/64, error -71 [ 704.759816][ T5907] usb usb1-port1: attempt power cycle [ 704.865240][ T9803] qnx4: no qnx4 filesystem (no root dir). [ 704.875282][ T9803] ubi31: attaching mtd0 [ 704.882118][ T9803] ubi31: scanning is finished [ 704.886820][ T9803] ubi31: empty MTD device detected [ 705.009664][ T9803] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 705.017300][ T9803] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 705.024779][ T9803] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 705.031918][ T9803] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 705.039520][ T9803] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 705.046372][ T9803] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 705.054512][ T9803] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1322126646 [ 705.064731][ T9803] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 705.079526][ T9808] ubi31: background thread "ubi_bgt31d" started, PID 9808 [ 705.155034][ T9809] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 706.009965][ T9818] netlink: 'syz.1.1084': attribute type 8 has an invalid length. [ 706.018044][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 706.027620][ T9818] bridge0: entered allmulticast mode [ 706.172279][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 706.186166][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 706.203706][ T9820] xfrm1: entered promiscuous mode [ 706.238345][ T9822] Lens B: ================= START STATUS ================= [ 706.245939][ T9822] Lens B: Focus, Absolute: 0 [ 706.250711][ T9822] Lens B: ================== END STATUS ================== [ 706.331045][ T9820] xfrm1: entered allmulticast mode [ 706.419637][ T9823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.021859][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 707.492540][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 707.492559][ T30] audit: type=1326 audit(2000000863.559:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 707.547205][ T30] audit: type=1326 audit(2000000863.559:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 707.576463][ T30] audit: type=1326 audit(2000000863.609:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.050789][ T30] audit: type=1326 audit(2000000863.609:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.072798][ T30] audit: type=1326 audit(2000000863.609:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.095213][ T30] audit: type=1326 audit(2000000863.609:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.187213][ T30] audit: type=1326 audit(2000000863.609:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.214421][ T30] audit: type=1326 audit(2000000863.609:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.256818][ T30] audit: type=1326 audit(2000000863.609:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.288322][ T30] audit: type=1326 audit(2000000863.609:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9835 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x7ffc0000 [ 708.310366][ T5907] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 708.559213][ T5907] usb 5-1: device descriptor read/64, error -71 [ 709.379175][ T120] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 709.406305][ T5907] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 709.550607][ T5907] usb 5-1: device descriptor read/64, error -71 [ 709.586563][ T120] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.620082][ T120] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 709.654619][ T120] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 709.865786][ T5907] usb usb5-port1: attempt power cycle [ 709.886588][ T9865] Lens B: ================= START STATUS ================= [ 709.894716][ T9865] Lens B: Focus, Absolute: 0 [ 709.899422][ T9865] Lens B: ================== END STATUS ================== [ 709.909200][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.259874][ T9855] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 710.287225][ T120] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.334322][ T9866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.605096][ T5907] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 710.753403][ T120] usb 3-1: USB disconnect, device number 45 [ 710.851668][ T5907] usb 5-1: device not accepting address 47, error -71 [ 710.979664][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1102'. [ 711.875769][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 712.837543][ T9895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1107'. [ 714.255186][ T9911] Lens B: ================= START STATUS ================= [ 714.263031][ T9911] Lens B: Focus, Absolute: 0 [ 714.267834][ T9911] Lens B: ================== END STATUS ================== [ 714.283327][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 714.283346][ T30] audit: type=1326 audit(2000000870.349:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 714.329331][ T30] audit: type=1326 audit(2000000870.349:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 714.351426][ T30] audit: type=1326 audit(2000000870.349:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.179631][ T9716] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 715.382570][ T9917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.404455][ T30] audit: type=1326 audit(2000000870.349:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.429988][ T30] audit: type=1326 audit(2000000870.349:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.539249][ T9716] usb 4-1: device descriptor read/64, error -71 [ 715.720427][ T30] audit: type=1326 audit(2000000870.349:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.761954][ T30] audit: type=1326 audit(2000000870.349:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.791130][ T30] audit: type=1326 audit(2000000870.349:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.819677][ T30] audit: type=1326 audit(2000000870.349:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.845944][ T9716] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 715.862687][ T30] audit: type=1326 audit(2000000870.349:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9912 comm="syz.3.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 715.989661][ T9716] usb 4-1: device descriptor read/64, error -71 [ 716.003823][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1115'. [ 716.014560][ T9924] net_ratelimit: 46 callbacks suppressed [ 716.014577][ T9924] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 716.100222][ T9716] usb usb4-port1: attempt power cycle [ 716.199697][ T5907] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 716.264815][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 716.339158][ T5907] usb 3-1: device descriptor read/64, error -71 [ 716.990425][ T9716] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 717.030893][ T9716] usb 4-1: device descriptor read/8, error -71 [ 717.049440][ T5907] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 717.133336][ T9936] FAULT_INJECTION: forcing a failure. [ 717.133336][ T9936] name failslab, interval 1, probability 0, space 0, times 0 [ 717.146411][ T9936] CPU: 1 UID: 0 PID: 9936 Comm: syz.0.1118 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 717.146440][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 717.146453][ T9936] Call Trace: [ 717.146461][ T9936] [ 717.146470][ T9936] dump_stack_lvl+0x189/0x250 [ 717.146506][ T9936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.146534][ T9936] ? __pfx__printk+0x10/0x10 [ 717.146568][ T9936] ? __pfx___might_resched+0x10/0x10 [ 717.146599][ T9936] ? fs_reclaim_acquire+0x7d/0x100 [ 717.146626][ T9936] should_fail_ex+0x414/0x560 [ 717.146653][ T9936] should_failslab+0xa8/0x100 [ 717.146673][ T9936] __kmalloc_noprof+0xcb/0x4f0 [ 717.146703][ T9936] ? tomoyo_encode+0x28b/0x550 [ 717.146734][ T9936] tomoyo_encode+0x28b/0x550 [ 717.146767][ T9936] tomoyo_realpath_from_path+0x58d/0x5d0 [ 717.146806][ T9936] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 717.146829][ T9936] tomoyo_path_number_perm+0x1e8/0x5a0 [ 717.146854][ T9936] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 717.146896][ T9936] ? __lock_acquire+0xaac/0xd20 [ 717.146943][ T9936] ? __fget_files+0x2a/0x420 [ 717.146968][ T9936] ? __fget_files+0x3a0/0x420 [ 717.146984][ T9936] ? __fget_files+0x2a/0x420 [ 717.147007][ T9936] security_file_ioctl+0xcb/0x2d0 [ 717.147034][ T9936] __se_sys_ioctl+0x47/0x170 [ 717.147061][ T9936] do_syscall_64+0xf6/0x210 [ 717.147089][ T9936] ? clear_bhb_loop+0x60/0xb0 [ 717.147113][ T9936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.147139][ T9936] RIP: 0033:0x7fb51f18e969 [ 717.147158][ T9936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.147175][ T9936] RSP: 002b:00007fb52001f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.147195][ T9936] RAX: ffffffffffffffda RBX: 00007fb51f3b6080 RCX: 00007fb51f18e969 [ 717.147209][ T9936] RDX: 0000200000000180 RSI: 0000000040045109 RDI: 0000000000000006 [ 717.147222][ T9936] RBP: 00007fb52001f090 R08: 0000000000000000 R09: 0000000000000000 [ 717.147235][ T9936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.147246][ T9936] R13: 0000000000000000 R14: 00007fb51f3b6080 R15: 00007ffd8fcde058 [ 717.147279][ T9936] [ 717.589986][ T5907] usb 3-1: device descriptor read/64, error -71 [ 717.632241][ T9936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 717.651626][ T9716] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 717.700242][ T5907] usb usb3-port1: attempt power cycle [ 717.891220][ T9716] usb 4-1: device not accepting address 47, error -71 [ 717.899447][ T9716] usb usb4-port1: unable to enumerate USB device [ 717.960089][ T9941] netlink: 'syz.4.1119': attribute type 3 has an invalid length. [ 718.159043][ T5907] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 718.199955][ T5907] usb 3-1: device descriptor read/8, error -71 [ 718.239216][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 718.409118][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 718.437769][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 718.454877][ T5907] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 718.479250][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.498536][ T10] usb 1-1: Product: syz [ 718.508757][ T10] usb 1-1: Manufacturer: syz [ 718.514754][ T5907] usb 3-1: device descriptor read/8, error -71 [ 718.529177][ T10] usb 1-1: SerialNumber: syz [ 718.544595][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 718.554675][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 718.639259][ T5907] usb usb3-port1: unable to enumerate USB device [ 719.819300][ T120] r8152-cfgselector 1-1: USB disconnect, device number 37 [ 720.239188][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 720.398997][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 720.412293][ T10] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 720.421367][ T10] usb 5-1: config 0 has no interface number 0 [ 720.429144][ T9716] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 720.441230][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 720.451680][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.460901][ T10] usb 5-1: Product: syz [ 720.465235][ T10] usb 5-1: Manufacturer: syz [ 720.470007][ T10] usb 5-1: SerialNumber: syz [ 720.477900][ T10] usb 5-1: config 0 descriptor?? [ 720.487543][ T10] hub 5-1:0.145: bad descriptor, ignoring hub [ 720.493977][ T10] hub 5-1:0.145: probe with driver hub failed with error -5 [ 720.507479][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input12 [ 720.609314][ T9716] usb 3-1: Using ep0 maxpacket: 16 [ 720.676663][ T9716] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 720.711419][ T9716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.733876][ T9716] usb 3-1: Product: syz [ 720.743258][ T9958] Lens B: ================= START STATUS ================= [ 720.751756][ T9958] Lens B: Focus, Absolute: 0 [ 720.756388][ T9958] Lens B: ================== END STATUS ================== [ 720.776431][ T9716] usb 3-1: Manufacturer: syz [ 720.785854][ T9716] usb 3-1: SerialNumber: syz [ 720.799296][ T9716] r8152-cfgselector 3-1: Unknown version 0x0000 [ 720.858341][ T9716] r8152-cfgselector 3-1: config 0 descriptor?? [ 720.874040][ T9961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.215305][ T10] usb 5-1: USB disconnect, device number 49 [ 722.280353][ T10] r8152-cfgselector 3-1: USB disconnect, device number 50 [ 722.302943][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 722.302957][ T30] audit: type=1326 audit(2000000878.369:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 722.340527][ T30] audit: type=1326 audit(2000000878.369:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 722.362452][ T30] audit: type=1326 audit(2000000878.399:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 722.835968][ T30] audit: type=1326 audit(2000000878.399:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 722.857989][ T30] audit: type=1326 audit(2000000878.399:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 722.881451][ T30] audit: type=1326 audit(2000000878.399:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 722.907132][ T30] audit: type=1326 audit(2000000878.399:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 722.931980][ T30] audit: type=1326 audit(2000000878.399:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 723.142482][ T9976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.694315][ T30] audit: type=1326 audit(2000000878.399:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 724.767953][ T30] audit: type=1326 audit(2000000878.399:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9969 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51f18e969 code=0x7ffc0000 [ 724.899843][ T5937] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 725.269310][ T10] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 725.811992][ T10] usb 3-1: device descriptor read/64, error -71 [ 726.539125][ T10] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 726.749174][ T10] usb 3-1: device descriptor read/64, error -71 [ 727.199928][ T10] usb usb3-port1: attempt power cycle [ 727.283741][ T9995] binder: 9986:9995 ioctl 4018620d 0 returned -22 [ 727.630094][ T9996] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 727.859321][ T10] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 728.562120][T10002] Lens B: ================= START STATUS ================= [ 728.569739][T10002] Lens B: Focus, Absolute: 0 [ 728.574342][T10002] Lens B: ================== END STATUS ================== [ 728.582117][ T10] usb 3-1: device descriptor read/8, error -71 [ 728.611617][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 728.621190][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 728.653211][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 728.665891][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 728.674236][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 728.723024][T10007] FAULT_INJECTION: forcing a failure. [ 728.723024][T10007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.754605][T10009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.774222][T10007] CPU: 0 UID: 0 PID: 10007 Comm: syz.2.1140 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 728.774250][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 728.774262][T10007] Call Trace: [ 728.774270][T10007] [ 728.774285][T10007] dump_stack_lvl+0x189/0x250 [ 728.774319][T10007] ? __lock_acquire+0xaac/0xd20 [ 728.774349][T10007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.774375][T10007] ? __pfx__printk+0x10/0x10 [ 728.774405][T10007] ? __might_fault+0xb0/0x130 [ 728.774448][T10007] should_fail_ex+0x414/0x560 [ 728.774474][T10007] _copy_from_user+0x2d/0xb0 [ 728.774504][T10007] video_usercopy+0x354/0x14f0 [ 728.774538][T10007] ? smk_tskacc+0x2fc/0x370 [ 728.774569][T10007] ? __pfx___video_do_ioctl+0x10/0x10 [ 728.774598][T10007] ? __pfx_video_usercopy+0x10/0x10 [ 728.774622][T10007] ? smack_file_ioctl+0x2a9/0x340 [ 728.774652][T10007] ? __fget_files+0x3a0/0x420 [ 728.774672][T10007] v4l2_ioctl+0x18d/0x1e0 [ 728.774696][T10007] ? __pfx_v4l2_ioctl+0x10/0x10 [ 728.774718][T10007] __se_sys_ioctl+0xf9/0x170 [ 728.774741][T10007] do_syscall_64+0xf6/0x210 [ 728.774764][T10007] ? clear_bhb_loop+0x60/0xb0 [ 728.774795][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.774808][T10007] RIP: 0033:0x7f63d618e969 [ 728.774821][T10007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.774852][T10007] RSP: 002b:00007f63d709b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.774868][T10007] RAX: ffffffffffffffda RBX: 00007f63d63b5fa0 RCX: 00007f63d618e969 [ 728.774879][T10007] RDX: 00002000000020c0 RSI: 00000000c0485619 RDI: 0000000000000003 [ 728.774888][T10007] RBP: 00007f63d709b090 R08: 0000000000000000 R09: 0000000000000000 [ 728.774898][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.774906][T10007] R13: 0000000000000000 R14: 00007f63d63b5fa0 R15: 00007fffa2452188 [ 728.774930][T10007] [ 729.112077][T10001] lo speed is unknown, defaulting to 1000 [ 729.290688][ T5907] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 729.480896][ T5907] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 729.518481][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.555733][T10001] chnl_net:caif_netlink_parms(): no params data found [ 729.566894][ T5907] gspca_main: mars-2.14.0 probing 093a:050f [ 730.507058][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 730.845914][ T5872] Bluetooth: hci5: command tx timeout [ 731.466666][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.491883][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.544001][T10001] bridge_slave_0: entered allmulticast mode [ 731.566011][T10001] bridge_slave_0: entered promiscuous mode [ 731.576720][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.586910][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.596137][T10001] bridge_slave_1: entered allmulticast mode [ 731.608196][T10001] bridge_slave_1: entered promiscuous mode [ 731.725434][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.796709][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.015471][T10001] team0: Port device team_slave_0 added [ 732.029391][ T6903] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 732.075952][T10001] team0: Port device team_slave_1 added [ 732.141921][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.149932][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.176591][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.191696][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.198997][ T6903] usb 3-1: Using ep0 maxpacket: 8 [ 732.204329][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.242061][ T6903] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 732.258609][ T6903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.268530][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.280137][ T6903] usb 3-1: Product: syz [ 732.284577][ T6903] usb 3-1: Manufacturer: syz [ 732.292641][ T6903] usb 3-1: SerialNumber: syz [ 732.312032][ T6903] usb 3-1: config 0 descriptor?? [ 732.388686][T10001] hsr_slave_0: entered promiscuous mode [ 732.397924][T10001] hsr_slave_1: entered promiscuous mode [ 732.405398][T10001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.414510][T10001] Cannot create hsr debugfs directory [ 732.531217][ T6903] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 732.661101][ T5937] usb 5-1: USB disconnect, device number 50 [ 733.217202][ T5872] Bluetooth: hci5: command tx timeout [ 733.235121][T10037] netlink: 'syz.4.1148': attribute type 4 has an invalid length. [ 734.395019][T10037] netlink: 'syz.4.1148': attribute type 4 has an invalid length. [ 734.452308][T10047] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1150'. [ 734.507357][T10037] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1148'. [ 734.540338][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 734.745385][T10001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 734.771805][T10053] Lens B: ================= START STATUS ================= [ 734.780220][T10053] Lens B: Focus, Absolute: 0 [ 734.784832][T10053] Lens B: ================== END STATUS ================== [ 735.155975][T10001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.227181][T10001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 735.240874][T10001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 735.259524][ T5872] Bluetooth: hci5: command tx timeout [ 735.285527][T10053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.447566][ T6903] usb write operation failed. (-71) [ 735.468708][ T6903] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 735.507775][ T6903] dvbdev: DVB: registering new adapter (Terratec H7) [ 735.530386][ T6903] usb 3-1: media controller created [ 735.546276][ T6903] usb read operation failed. (-71) [ 735.558232][ T6903] usb write operation failed. (-71) [ 735.583479][ T6903] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 735.604802][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.612720][ T6903] usb 3-1: USB disconnect, device number 55 [ 735.663441][T10001] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.685690][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.692884][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.711273][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.718458][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.801200][ T5937] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 735.973105][ T5937] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 735.990428][ T5937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.008986][ T5937] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 736.041983][ T5937] usb 1-1: config 1 has no interface number 1 [ 736.048172][ T5937] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 736.090774][ T5937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.112127][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.129001][ T5937] usb 1-1: Product: syz [ 736.133195][ T5937] usb 1-1: Manufacturer: syz [ 736.137803][ T5937] usb 1-1: SerialNumber: syz [ 736.228036][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.987172][ T5937] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 737.022902][ T5937] usb 1-1: MIDIStreaming interface descriptor not found [ 737.092666][ T5937] usb 1-1: USB disconnect, device number 39 [ 737.367150][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1160'. [ 737.389521][ T5872] Bluetooth: hci5: command tx timeout [ 737.442031][T10091] binder: BINDER_SET_CONTEXT_MGR already set [ 737.448325][T10091] binder: 10088:10091 ioctl 4018620d 200000000040 returned -16 [ 737.545228][T10001] veth0_vlan: entered promiscuous mode [ 737.922147][T10001] veth1_vlan: entered promiscuous mode [ 737.999370][T10001] veth0_macvtap: entered promiscuous mode [ 738.063481][T10001] veth1_macvtap: entered promiscuous mode [ 738.124430][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.257878][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1161'. [ 739.482598][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.497368][T10001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.506747][T10001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.515551][T10001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.525629][T10001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.657366][T10108] Lens B: ================= START STATUS ================= [ 739.664935][T10108] Lens B: Focus, Absolute: 0 [ 739.669701][T10108] Lens B: ================== END STATUS ================== [ 739.753261][T10111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.873890][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.889566][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.931977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.941355][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.507081][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 740.510363][ T3443] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 740.634054][T10124] kAFS: No cell specified [ 741.049133][ T3443] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 741.119077][ T3443] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 741.160584][ T3443] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 741.169942][ T3443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.165689][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 742.165708][ T30] audit: type=1326 audit(2000000898.169:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10130 comm="syz.4.1170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f122df8e969 code=0x0 [ 742.199018][T10132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.098236][T10142] binder: 10129:10142 ioctl 4018620d 0 returned -22 [ 747.664260][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.670719][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.338812][ C0] sched: DL replenish lagged too much [ 749.450845][ T9716] usb 1-1: USB disconnect, device number 40 [ 751.511268][ T30] audit: type=1326 audit(2000000907.579:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542458e969 code=0x7fc00000 [ 751.579477][T10164] veth1_to_team: entered promiscuous mode [ 752.199586][ T30] audit: type=1326 audit(2000000908.249:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f542458e969 code=0x7fc00000 [ 752.259899][ T30] audit: type=1326 audit(2000000908.249:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542458e969 code=0x7fc00000 [ 753.433835][T10161] veth1_to_team: left promiscuous mode [ 753.448278][T10171] cgroup: Unknown subsys name 'noxattr' [ 755.641142][ T48] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 755.852324][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 755.882057][ T48] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 755.928995][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.972431][ T48] usb 1-1: config 0 has no interface number 0 [ 756.017723][ T48] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 756.199163][ T48] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 756.213832][ T48] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 756.225073][ T48] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 756.652895][ T48] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 757.539172][ T48] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 757.549252][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.584158][ T48] usb 1-1: config 0 descriptor?? [ 757.620145][T10190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 757.657152][T10204] Bluetooth: MGMT ver 1.23 [ 757.664641][T10190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 757.956267][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.695217][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.706663][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.716333][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.741564][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.755687][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.800249][T10223] FAULT_INJECTION: forcing a failure. [ 759.800249][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 759.800891][ T48] usb 1-1: USB disconnect, device number 41 [ 759.848169][T10223] CPU: 1 UID: 0 PID: 10223 Comm: syz.4.1192 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 759.848210][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.848223][T10223] Call Trace: [ 759.848233][T10223] [ 759.848242][T10223] dump_stack_lvl+0x189/0x250 [ 759.848270][T10223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.848289][T10223] ? __pfx__printk+0x10/0x10 [ 759.848313][T10223] ? __pfx___might_resched+0x10/0x10 [ 759.848340][T10223] ? fs_reclaim_acquire+0x7d/0x100 [ 759.848359][T10223] should_fail_ex+0x414/0x560 [ 759.848377][T10223] ? page_pool_create_percpu+0x2e5/0xba0 [ 759.848397][T10223] should_failslab+0xa8/0x100 [ 759.848412][T10223] __kvmalloc_node_noprof+0x168/0x5e0 [ 759.848426][T10223] ? page_pool_create_percpu+0x2e5/0xba0 [ 759.848450][T10223] page_pool_create_percpu+0x2e5/0xba0 [ 759.848470][T10223] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 759.848491][T10223] bpf_test_run_xdp_live+0x1cd/0x1aa0 [ 759.848515][T10223] ? stack_trace_save+0x9c/0xe0 [ 759.848539][T10223] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 759.848554][T10223] ? kasan_save_track+0x4f/0x80 [ 759.848572][T10223] ? kasan_save_track+0x3e/0x80 [ 759.848591][T10223] ? __kasan_kmalloc+0x93/0xb0 [ 759.848609][T10223] ? __kmalloc_noprof+0x27a/0x4f0 [ 759.848628][T10223] ? bpf_test_init+0xc2/0x170 [ 759.848661][T10223] ? __lock_acquire+0xaac/0xd20 [ 759.848687][T10223] ? __might_fault+0xb0/0x130 [ 759.848714][T10223] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 759.848739][T10223] ? _copy_from_user+0x94/0xb0 [ 759.848769][T10223] ? bpf_test_init+0x133/0x170 [ 759.848787][T10223] ? xdp_convert_md_to_buff+0x5b/0x330 [ 759.848812][T10223] bpf_prog_test_run_xdp+0x713/0xf90 [ 759.848852][T10223] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 759.848880][T10223] ? __fget_files+0x2a/0x420 [ 759.848914][T10223] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 759.848936][T10223] bpf_prog_test_run+0x2ac/0x340 [ 759.848963][T10223] __sys_bpf+0x4a4/0x860 [ 759.848987][T10223] ? __pfx___sys_bpf+0x10/0x10 [ 759.849039][T10223] ? ksys_write+0x1f0/0x250 [ 759.849064][T10223] ? rcu_is_watching+0x15/0xb0 [ 759.849103][T10223] __x64_sys_bpf+0x7c/0x90 [ 759.849122][T10223] do_syscall_64+0xf6/0x210 [ 759.849148][T10223] ? clear_bhb_loop+0x60/0xb0 [ 759.849173][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.849192][T10223] RIP: 0033:0x7f122df8e969 [ 759.849228][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.849246][T10223] RSP: 002b:00007f122ed6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.849266][T10223] RAX: ffffffffffffffda RBX: 00007f122e1b5fa0 RCX: 00007f122df8e969 [ 759.849281][T10223] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 759.849294][T10223] RBP: 00007f122ed6b090 R08: 0000000000000000 R09: 0000000000000000 [ 759.849306][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.849317][T10223] R13: 0000000000000000 R14: 00007f122e1b5fa0 R15: 00007fffc7c52858 [ 759.849367][T10223] [ 760.164655][T10223] page_pool_create_percpu() gave up with errno -12 [ 760.315371][T10219] lo speed is unknown, defaulting to 1000 [ 760.559214][T10219] chnl_net:caif_netlink_parms(): no params data found [ 760.794448][T10232] fuse: Bad value for 'group_id' [ 760.799601][T10232] fuse: Bad value for 'group_id' [ 761.821959][ T5857] Bluetooth: hci3: command tx timeout [ 762.617036][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.663402][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.743582][T10219] bridge_slave_0: entered allmulticast mode [ 762.773941][T10219] bridge_slave_0: entered promiscuous mode [ 762.793032][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.800701][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.829964][T10219] bridge_slave_1: entered allmulticast mode [ 762.835566][T10255] fuse: Unknown parameter 'rootmod000000040000' [ 763.023769][T10219] bridge_slave_1: entered promiscuous mode [ 763.831974][T10266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.974210][ T30] audit: type=1326 audit(2000000919.789:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10258 comm="syz.3.1202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x0 [ 764.010019][ T5857] Bluetooth: hci3: command tx timeout [ 765.060902][T10219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.122342][T10219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.219348][T10278] xt_hashlimit: size too large, truncated to 1048576 [ 765.475231][T10283] fuse: Bad value for 'group_id' [ 765.480412][T10283] fuse: Bad value for 'group_id' [ 765.770335][T10219] team0: Port device team_slave_0 added [ 765.829610][T10219] team0: Port device team_slave_1 added [ 766.069884][ T5857] Bluetooth: hci3: command tx timeout [ 766.104595][T10219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.232347][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.399105][T10219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.607534][T10219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.614701][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.158998][T10219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.486259][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 767.707483][T10219] hsr_slave_0: entered promiscuous mode [ 767.739171][ T5907] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 767.739261][T10219] hsr_slave_1: entered promiscuous mode [ 767.909111][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 767.916888][ T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 767.928174][T10219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 767.936533][T10219] Cannot create hsr debugfs directory [ 767.980296][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.327941][ T5857] Bluetooth: hci3: command tx timeout [ 768.336881][ T5907] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 768.365331][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.392237][ T5907] usb 1-1: config 0 descriptor?? [ 768.433677][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 768.470144][ T48] usb 6-1: config 0 has an invalid interface number: 25 but max is 0 [ 768.489024][ T48] usb 6-1: config 0 has no interface number 0 [ 768.498534][ T48] usb 6-1: config 0 interface 25 has no altsetting 0 [ 768.505705][ T48] usb 6-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=1d.e8 [ 768.515111][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.538702][ T48] usb 6-1: config 0 descriptor?? [ 768.565996][ T48] usb 6-1: can't set first interface for hiFace device. [ 768.588959][ T48] snd-usb-hiface 6-1:0.25: probe with driver snd-usb-hiface failed with error -5 [ 768.814465][ T979] usb 6-1: USB disconnect, device number 2 [ 769.029083][ T5907] usb 1-1: USB disconnect, device number 42 [ 770.051554][T10219] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 770.246004][ T30] audit: type=1326 audit(2000000926.289:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10319 comm="syz.3.1215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x0 [ 770.352540][T10219] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 770.617089][T10334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.849705][T10219] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 771.869668][T10219] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 772.182120][ T3443] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 772.689031][ T3443] usb 5-1: Using ep0 maxpacket: 8 [ 772.782814][ T3443] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 772.798068][ T3443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.807999][ T3443] usb 5-1: Product: syz [ 772.834928][ T3443] usb 5-1: Manufacturer: syz [ 772.853673][ T3443] usb 5-1: SerialNumber: syz [ 772.898360][ T3443] usb 5-1: config 0 descriptor?? [ 773.050151][ T979] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 773.091569][T10219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.127830][T10348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1221'. [ 773.139546][T10348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1221'. [ 773.171013][T10219] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.173200][ T3443] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 773.219782][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 773.232253][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.239495][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.273254][ T979] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 773.293508][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.302829][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.310145][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.324394][ T979] usb 1-1: Product: syz [ 773.328594][ T979] usb 1-1: Manufacturer: syz [ 773.344384][ T979] usb 1-1: SerialNumber: syz [ 773.349012][ T5937] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 773.422323][ T979] usb 1-1: config 0 descriptor?? [ 773.706595][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.706629][ T30] audit: type=1326 audit(2000000929.649:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10351 comm="syz.3.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x0 [ 773.738401][ T5937] usb 6-1: config 0 has no interfaces? [ 773.761789][ T5937] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 773.766468][ T979] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 773.865597][T10356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.941676][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.138711][ T5937] usb 6-1: config 0 descriptor?? [ 775.392218][ T3443] usb write operation failed. (-71) [ 776.888413][ T9716] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 777.361904][ T9716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 777.549652][ T9716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 777.794060][ T9716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 777.850966][ T3443] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 778.049375][ T9716] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 780.243329][ T3443] dvbdev: DVB: registering new adapter (Terratec H7) [ 780.250576][ T3443] usb 5-1: media controller created [ 780.257429][ T3443] usb read operation failed. (-71) [ 780.269456][ T979] usb write operation failed. (-71) [ 780.276701][ T9716] usb 4-1: string descriptor 0 read error: -71 [ 780.312842][ T9716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.324186][ T3443] usb write operation failed. (-71) [ 780.326260][ T979] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 780.339578][ T24] usb 6-1: USB disconnect, device number 3 [ 780.341003][ T9716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 780.355448][ T979] dvbdev: DVB: registering new adapter (Terratec H7) [ 780.408102][ T979] usb 1-1: media controller created [ 780.423969][ T3443] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 780.426772][ T9716] usb 4-1: can't set config #1, error -71 [ 780.442434][ T979] usb read operation failed. (-71) [ 780.485054][ T979] usb write operation failed. (-71) [ 780.511952][ T3443] usb 5-1: USB disconnect, device number 51 [ 780.560542][ T979] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 780.599384][ T9716] usb 4-1: USB disconnect, device number 48 [ 780.629828][ T979] usb 1-1: USB disconnect, device number 43 [ 781.019499][ T979] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 781.285499][T10219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.351897][ T979] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 781.376203][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.448283][ T979] gspca_main: mars-2.14.0 probing 093a:050f [ 781.942960][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 782.334900][T10396] binder: 10393:10396 ioctl 4018620d 0 returned -22 [ 784.784183][ T30] audit: type=1326 audit(2000000938.409:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10393 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 784.989196][ T24] usb 1-1: USB disconnect, device number 44 [ 785.253654][ T30] audit: type=1326 audit(2000000938.409:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10393 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x7ffc0000 [ 785.639465][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 786.532759][T10404] kAFS: No cell specified [ 787.666557][T10413] sp0: Synchronizing with TNC [ 788.182821][T10219] veth0_vlan: entered promiscuous mode [ 788.266368][T10219] veth1_vlan: entered promiscuous mode [ 788.279592][ T5907] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 788.459004][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 788.494920][T10219] veth0_macvtap: entered promiscuous mode [ 788.512316][ T5907] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 788.537021][ T5907] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 788.552442][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 788.568164][ T5907] usb 1-1: config 1 has no interface number 0 [ 788.574984][ T5907] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.596942][ T5907] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 788.598447][T10219] veth1_macvtap: entered promiscuous mode [ 788.627068][ T5907] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 788.639053][ T9716] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 788.648468][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.685934][ T5907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 788.734412][T10219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.768321][T10219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.792449][ T9716] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 788.805925][T10219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.823574][ T9716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.835116][ T10] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 788.852065][T10219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.869484][T10219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.880259][ T9716] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 788.893613][ T9716] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 788.914021][ T9716] usb 4-1: Manufacturer: syz [ 788.932660][T10219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.934728][ T9716] usb 4-1: config 0 descriptor?? [ 788.960861][ T9716] igorplugusb 4-1:0.0: incorrect number of endpoints [ 789.017111][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.037880][ T5907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 789.051848][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.177495][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.207972][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.259643][ T10] usb 5-1: Product: syz [ 789.427789][ T10] usb 5-1: Manufacturer: syz [ 789.825564][ T10] usb 5-1: SerialNumber: syz [ 790.097554][ T979] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 790.185416][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.197323][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 790.197376][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.277360][ T5937] usb 4-1: USB disconnect, device number 49 [ 790.368660][ T24] usb 1-1: USB disconnect, device number 45 [ 790.399079][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.400691][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 790.406975][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.469094][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.498365][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.507954][ T10] usb 5-1: 0:2 : does not exist [ 790.529111][ T9716] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 790.691918][ T9716] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 790.707379][ T9716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.760558][ T9716] gspca_main: mars-2.14.0 probing 093a:050f [ 790.801738][T10437] fuse: Unknown parameter 'use00000000000000000000' [ 791.574610][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1242'. [ 792.662383][T10454] loop8: detected capacity change from 0 to 8 [ 792.687157][T10454] Dev loop8: unable to read RDB block 8 [ 792.714092][T10454] loop8: unable to read partition table [ 792.726028][ T10] usb 5-1: USB disconnect, device number 52 [ 792.856276][T10454] loop8: partition table beyond EOD, truncated [ 792.895360][T10454] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 792.927424][T10459] kAFS: No cell specified [ 793.407004][ T9716] usb 6-1: USB disconnect, device number 4 [ 795.363268][T10469] mkiss: ax0: crc mode is auto. [ 795.392080][T10477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.992714][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1251'. [ 801.628956][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 802.139256][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 802.159295][ T979] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 802.300161][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 802.322425][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.347212][ T10] usb 5-1: Product: syz [ 802.473303][ T10] usb 5-1: Manufacturer: syz [ 802.477957][ T10] usb 5-1: SerialNumber: syz [ 802.514088][ T979] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 802.540375][ T10] usb 5-1: config 0 descriptor?? [ 802.561702][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.595114][ T979] gspca_main: mars-2.14.0 probing 093a:050f [ 802.643499][T10502] kAFS: No cell specified [ 803.689564][ T10] airspy 5-1:0.0: usb_control_msg() failed -110 request 09 [ 803.698340][ T10] airspy 5-1:0.0: Could not detect board [ 803.716197][ T10] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 804.095537][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 804.794964][ T10] usb 5-1: USB disconnect, device number 53 [ 805.265032][T10518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.549180][ T10] usb 4-1: USB disconnect, device number 50 [ 808.039156][ T9716] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 808.310270][ T9716] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 808.346400][ T9716] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 808.565632][ T9716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.939059][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1268'. [ 808.991965][ T9716] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 809.105055][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.111805][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.729527][ T5907] usb 4-1: USB disconnect, device number 51 [ 811.496761][ T5872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 811.508152][ T5872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 811.519670][ T5872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 811.910895][ T5872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 811.920793][ T5872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 814.352855][ T5872] Bluetooth: hci6: command tx timeout [ 814.877114][ T5872] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 814.941251][T10592] netlink: 'syz.6.1280': attribute type 1 has an invalid length. [ 815.229121][T10597] kAFS: No cell specified [ 816.535488][ T5872] Bluetooth: hci6: command tx timeout [ 817.944402][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 818.619442][ T5872] Bluetooth: hci6: command tx timeout [ 820.699660][ T5872] Bluetooth: hci6: command tx timeout [ 823.578994][ T6903] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 824.243220][ T6903] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 824.257071][ T6903] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 824.268514][ T6903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.472226][ T5907] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 824.484661][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.617125][ T6903] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 824.858978][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.193443][ T5907] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 825.218938][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.245082][ T5907] usb 4-1: Product: syz [ 825.276014][ T10] usb 6-1: USB disconnect, device number 5 [ 825.308857][ T5907] usb 4-1: Manufacturer: syz [ 825.313518][ T5907] usb 4-1: SerialNumber: syz [ 825.402225][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.434904][ T5907] usb 4-1: config 0 descriptor?? [ 825.495283][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.038606][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.219699][ T5907] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 826.297452][ T5907] usb 4-1: USB disconnect, device number 52 [ 828.050168][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 828.059995][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 828.079441][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 828.091508][T10561] lo speed is unknown, defaulting to 1000 [ 828.134105][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 828.142841][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 828.158960][ T5907] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 828.293891][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.328925][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 828.390306][ T5907] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 828.429741][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.465917][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 828.491161][ T5907] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 828.509195][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.561175][ T5907] usb 4-1: Product: syz [ 828.579997][ T5907] usb 4-1: Manufacturer: syz [ 828.598409][T10637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 828.629596][ T5907] usb 4-1: SerialNumber: syz [ 828.929844][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1294'. [ 829.071580][ T5907] usb 4-1: 0:2 : does not exist [ 830.218997][ T5857] Bluetooth: hci0: command tx timeout [ 830.241078][ T5907] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 830.321127][ T5907] usb 4-1: USB disconnect, device number 53 [ 831.545532][ T48] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 831.879397][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 831.912193][ T48] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 831.953173][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.968814][ T48] usb 6-1: Product: syz [ 831.976450][ T48] usb 6-1: Manufacturer: syz [ 831.997878][ T48] usb 6-1: SerialNumber: syz [ 832.023783][ T48] usb 6-1: config 0 descriptor?? [ 832.066799][T10676] 9pnet_fd: Insufficient options for proto=fd [ 832.249070][ T48] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 832.299577][ T5857] Bluetooth: hci0: command tx timeout [ 832.560521][T10681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.471103][ T13] bond0 (unregistering): Released all slaves [ 833.565846][ T13] bond1 (unregistering): Released all slaves [ 833.651875][T10650] lo speed is unknown, defaulting to 1000 [ 833.807745][ T48] usb write operation failed. (-71) [ 833.857035][ T48] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 833.906016][ T48] dvbdev: DVB: registering new adapter (Terratec H7) [ 833.949028][ T48] usb 6-1: media controller created [ 833.954729][ T48] usb read operation failed. (-71) [ 833.968860][ T120] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 833.979500][ T48] usb write operation failed. (-71) [ 833.987722][ T48] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 834.020965][ T48] usb 6-1: USB disconnect, device number 6 [ 834.050322][ T13] tipc: Disabling bearer [ 834.077319][ T13] tipc: Left network mode [ 834.149314][ T120] usb 7-1: Using ep0 maxpacket: 32 [ 834.163179][ T120] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 834.183428][ T120] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.201113][ T120] usb 7-1: config 0 descriptor?? [ 834.224448][ T120] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 834.378954][ T5857] Bluetooth: hci0: command tx timeout [ 834.996235][ T120] gspca_nw80x: reg_r err -110 [ 835.059119][ T120] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 835.351779][ T10] usb 7-1: USB disconnect, device number 2 [ 835.479032][ T120] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 835.602843][T10713] Lens B: ================= START STATUS ================= [ 835.610621][T10713] Lens B: Focus, Absolute: 0 [ 835.615408][T10713] Lens B: ================== END STATUS ================== [ 835.834747][ T120] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 835.990777][ T120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.023072][T10713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.458854][ T5857] Bluetooth: hci0: command tx timeout [ 837.579619][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1310'. [ 838.268820][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1307'. [ 838.649382][ T120] gspca_main: mars-2.14.0 probing 093a:050f [ 838.797478][ T13] hsr_slave_0: left promiscuous mode [ 838.803598][ T13] hsr_slave_1: left promiscuous mode [ 838.925508][ T48] usb 6-1: USB disconnect, device number 7 [ 838.955241][ T13] veth1_macvtap: left promiscuous mode [ 839.009140][ T13] veth0_macvtap: left promiscuous mode [ 839.030665][ T13] veth1_vlan: left promiscuous mode [ 839.036220][ T13] veth0_vlan: left promiscuous mode [ 839.143584][T10728] Lens B: ================= START STATUS ================= [ 839.151733][T10728] Lens B: Focus, Absolute: 0 [ 839.158372][T10728] Lens B: ================== END STATUS ================== [ 839.747876][T10735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.039967][T10742] netlink: 'syz.5.1313': attribute type 10 has an invalid length. [ 841.047984][T10742] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1313'. [ 842.593255][T10737] CUSE: unknown device info "" [ 842.598262][T10737] CUSE: zero length info key specified [ 842.617682][T10737] netlink: 'syz.5.1313': attribute type 1 has an invalid length. [ 842.819349][ T13] pimreg (unregistering): left allmulticast mode [ 845.524678][T10733] pim6reg: entered allmulticast mode [ 845.539872][T10561] chnl_net:caif_netlink_parms(): no params data found [ 847.329733][ T6903] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 847.365741][T10650] chnl_net:caif_netlink_parms(): no params data found [ 847.614805][ T6903] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 847.667708][ T6903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.681993][ T30] audit: type=1326 audit(2000001003.749:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10762 comm="syz.5.1319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f542458e969 code=0x0 [ 847.758064][ T6903] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 847.785040][T10767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.808949][ T6903] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 847.816983][ T6903] usb 4-1: Manufacturer: syz [ 847.879158][ T6903] usb 4-1: config 0 descriptor?? [ 847.896021][ T6903] igorplugusb 4-1:0.0: incorrect number of endpoints [ 847.924318][T10561] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.955885][T10561] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.002620][T10561] bridge_slave_0: entered allmulticast mode [ 848.035591][T10561] bridge_slave_0: entered promiscuous mode [ 848.107499][T10561] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.136640][T10561] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.158229][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 848.181605][T10561] bridge_slave_1: entered allmulticast mode [ 848.231390][T10561] bridge_slave_1: entered promiscuous mode [ 848.419158][ T13] IPVS: stop unused estimator thread 0... [ 848.680960][T10561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.759256][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 848.760272][T10561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.911358][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 848.938272][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.028805][ T120] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 849.073949][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 849.104000][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 849.123763][ T10] usb 7-1: Manufacturer: syz [ 849.136537][ T10] usb 7-1: config 0 descriptor?? [ 849.151225][ T10] igorplugusb 7-1:0.0: incorrect number of endpoints [ 849.245095][ T120] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 849.250079][T10561] team0: Port device team_slave_0 added [ 849.277762][ T120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.316621][ T6903] usb 4-1: USB disconnect, device number 54 [ 849.335180][ T120] gspca_main: mars-2.14.0 probing 093a:050f [ 849.351914][T10561] team0: Port device team_slave_1 added [ 849.483586][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1320'. [ 849.948658][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1321'. [ 850.026035][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.223335][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.232068][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.391927][ T6903] usb 6-1: USB disconnect, device number 8 [ 850.561548][T10561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.898859][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.145538][T10561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.267408][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.424511][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1324'. [ 851.487272][T10650] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.498087][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.531156][T10650] bridge_slave_0: entered allmulticast mode [ 851.612081][ T24] usb 7-1: USB disconnect, device number 3 [ 851.635758][T10650] bridge_slave_0: entered promiscuous mode [ 851.663305][T10650] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.670817][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 851.697072][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.714640][T10650] bridge_slave_1: entered allmulticast mode [ 851.746716][T10650] bridge_slave_1: entered promiscuous mode [ 851.776730][T10561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.842247][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 851.929462][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.968278][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.147830][T10798] Bluetooth: MGMT ver 1.23 [ 852.158902][ T5857] Bluetooth: hci5: command 0x0406 tx timeout [ 852.183957][T10561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.188898][ T5907] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 852.220263][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 852.232760][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.245275][ T10] usb 6-1: config 0 descriptor?? [ 852.275928][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.391060][ T5907] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 852.422092][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.436055][ T5907] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 852.445872][ T5907] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 852.460928][T10650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.510704][ T5907] usb 4-1: Manufacturer: syz [ 852.521940][ T5907] usb 4-1: config 0 descriptor?? [ 852.530734][ T5907] igorplugusb 4-1:0.0: incorrect number of endpoints [ 852.790739][T10561] hsr_slave_0: entered promiscuous mode [ 852.817135][T10561] hsr_slave_1: entered promiscuous mode [ 852.842597][T10561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.860953][T10561] Cannot create hsr debugfs directory [ 852.864826][ T6903] usb 6-1: USB disconnect, device number 9 [ 852.869442][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 852.961838][T10650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.027373][T10650] team0: Port device team_slave_0 added [ 854.062332][T10650] team0: Port device team_slave_1 added [ 854.548829][ T6903] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 854.711957][ T6903] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 854.727127][ T6903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.755722][ T6903] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 854.764908][ T6903] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 854.831786][ T6903] usb 6-1: Manufacturer: syz [ 854.854374][ T6903] usb 6-1: config 0 descriptor?? [ 854.881902][ T6903] igorplugusb 6-1:0.0: incorrect number of endpoints [ 855.060311][ T6903] usb 4-1: USB disconnect, device number 55 [ 855.160589][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'. [ 855.196533][T10650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.228369][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.563527][T10650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.079592][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 856.114355][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.122207][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.177229][T10650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.215442][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.304391][ T10] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 856.338684][T10650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.357371][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.388840][ T3443] usb 6-1: USB disconnect, device number 10 [ 856.397044][ T10] gspca_main: mars-2.14.0 probing 093a:050f [ 857.372936][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1332'. [ 857.692661][ T24] usb 7-1: USB disconnect, device number 4 [ 857.991998][T10650] hsr_slave_0: entered promiscuous mode [ 858.060821][T10650] hsr_slave_1: entered promiscuous mode [ 858.070944][T10650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.078527][T10650] Cannot create hsr debugfs directory [ 858.080143][ T6903] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 858.428905][ T6903] usb 6-1: Using ep0 maxpacket: 8 [ 858.446248][ T6903] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 858.457971][ T6903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.473689][ T6903] usb 6-1: Product: syz [ 858.484620][ T6903] usb 6-1: Manufacturer: syz [ 858.491685][ T6903] usb 6-1: SerialNumber: syz [ 858.516671][ T6903] usb 6-1: config 0 descriptor?? [ 858.530232][ T13] bridge_slave_1: left allmulticast mode [ 858.540256][ T13] bridge_slave_1: left promiscuous mode [ 858.550077][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.586917][ T13] bridge_slave_0: left allmulticast mode [ 858.631486][ T13] bridge_slave_0: left promiscuous mode [ 858.637381][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.829001][ T6903] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 860.105368][ T5907] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 860.129986][ T6903] usb write operation failed. (-71) [ 860.170567][ T6903] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 860.212208][ T6903] dvbdev: DVB: registering new adapter (Terratec H7) [ 860.243865][ T6903] usb 6-1: media controller created [ 860.287736][ T6903] usb read operation failed. (-71) [ 860.303526][ T6903] usb write operation failed. (-71) [ 860.319177][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 860.328597][ T5907] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 860.356642][ T6903] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 860.358259][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.416805][ T6903] usb 6-1: USB disconnect, device number 11 [ 860.418784][ T5907] usb 4-1: Product: syz [ 860.448087][ T5907] usb 4-1: Manufacturer: syz [ 860.458499][ T5907] usb 4-1: SerialNumber: syz [ 860.498498][ T5907] usb 4-1: config 0 descriptor?? [ 860.738947][ T5907] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 861.189095][ T6903] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 861.353247][ T6903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.384298][ T6903] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 861.416380][ T6903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 861.448448][ T6903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 861.459184][ T6903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 861.502772][ T6903] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 861.519468][ T6903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 861.533007][ T6903] usb 6-1: Product: syz [ 861.537814][ T6903] usb 6-1: Manufacturer: syz [ 861.543120][ T6903] usb 6-1: SerialNumber: syz [ 861.589020][ T6903] usb 6-1: config 0 descriptor?? [ 861.767585][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.788325][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.815983][ T6903] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 861.820202][ T13] bond0 (unregistering): Released all slaves [ 861.871902][ T6903] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 861.937997][ T5937] syz0: Port: 1 Link DOWN [ 862.001076][ T5907] usb write operation failed. (-71) [ 862.016372][ T5907] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 862.037791][ T6903] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 862.076954][ T5907] dvbdev: DVB: registering new adapter (Terratec H7) [ 862.078793][ T6903] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 862.084225][ T5907] usb 4-1: media controller created [ 862.109203][ T5907] usb read operation failed. (-71) [ 862.131685][ T5907] usb write operation failed. (-71) [ 862.173672][ T5907] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 862.187000][ T6903] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 862.200167][ T5907] usb 4-1: USB disconnect, device number 56 [ 862.364739][ T6903] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 863.029115][T10561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 863.089982][T10561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 863.524578][ T6903] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 863.563764][ T6903] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 863.868395][ T6903] usb 6-1: USB disconnect, device number 12 [ 864.040514][T10561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 864.484803][T10561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 865.739010][ T13] hsr_slave_0: left promiscuous mode [ 865.914113][ T13] hsr_slave_1: left promiscuous mode [ 865.975907][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.254139][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.258092][T10866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.262306][ T30] audit: type=1326 audit(2000001022.319:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10865 comm="syz.3.1346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327cf8e969 code=0x0 [ 866.307184][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.342487][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.379181][ T30] audit: type=1326 audit(2000001022.439:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10871 comm="syz.5.1347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f542458e969 code=0x0 [ 866.469357][ T13] veth1_macvtap: left promiscuous mode [ 866.489035][T10875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.528203][ T13] veth0_macvtap: left promiscuous mode [ 866.575854][ T13] veth1_vlan: left promiscuous mode [ 866.610951][ T13] veth0_vlan: left promiscuous mode [ 867.565312][ T13] pimreg (unregistering): left allmulticast mode [ 869.092330][ T6078] smc: removing ib device syz0 [ 869.248962][ T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 869.432022][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.457258][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 869.495678][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 869.504991][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.532876][ T24] usb 7-1: Product: syz [ 869.538373][ T24] usb 7-1: Manufacturer: syz [ 869.543664][ T24] usb 7-1: SerialNumber: syz [ 869.790841][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.813920][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.049673][ T24] usb 7-1: 0:2 : does not exist [ 870.352858][T10894] fuse: Unknown parameter 'user_id00000000000000000000' [ 870.545799][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.552285][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.630480][T10650] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 870.649538][ T6903] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 870.752207][T10650] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 870.852599][T10650] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 870.869330][ T6903] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 870.923737][ T6903] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 870.985731][ T6903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.018835][T10650] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 871.494585][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 871.504498][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 871.529156][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 871.548130][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 871.559742][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 871.803477][T10899] lo speed is unknown, defaulting to 1000 [ 871.882740][T10650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.172180][ T24] usb 7-1: USB disconnect, device number 5 [ 872.259196][ T6903] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 872.315289][T10650] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.369093][ T6903] usb 4-1: USB disconnect, device number 57 [ 872.382889][T10322] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.390043][T10322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.620336][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.627500][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.808685][ T5857] Bluetooth: hci2: command tx timeout [ 874.014723][T10919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 874.458312][T10650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.512758][T10650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 875.108881][ T5907] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 875.236712][T10899] chnl_net:caif_netlink_parms(): no params data found [ 875.396309][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 875.426741][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 875.500799][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 2304, setting to 64 [ 875.514764][ T13] IPVS: stop unused estimator thread 0... [ 875.598795][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 875.632981][ T5907] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 875.660056][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.668155][ T5907] usb 4-1: Product: syz [ 875.675064][ T5907] usb 4-1: Manufacturer: syz [ 875.680673][ T5907] usb 4-1: SerialNumber: syz [ 875.688137][ T5907] usb 4-1: config 0 descriptor?? [ 875.694010][T10926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 875.726749][ T5907] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 875.838846][ T5857] Bluetooth: hci2: command tx timeout [ 875.883190][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.900632][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.907963][T10899] bridge_slave_0: entered allmulticast mode [ 875.917198][T10899] bridge_slave_0: entered promiscuous mode [ 875.933641][ T5907] usb 4-1: USB disconnect, device number 58 [ 876.208966][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.216129][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.230933][T10899] bridge_slave_1: entered allmulticast mode [ 876.239071][T10899] bridge_slave_1: entered promiscuous mode [ 877.334018][T10650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.356967][T10947] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 877.570039][T10899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.592741][T10899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.327955][ T5857] Bluetooth: hci2: command tx timeout [ 878.819465][T10964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.260368][T10899] team0: Port device team_slave_0 added [ 879.622807][T10899] team0: Port device team_slave_1 added [ 880.379252][ T5857] Bluetooth: hci2: command tx timeout [ 880.686518][T10899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.708580][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.808870][T10899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.069585][T10982] overlayfs: missing 'workdir' [ 881.682285][T10899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.689949][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.881824][T10899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.873065][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 883.264514][T10899] hsr_slave_0: entered promiscuous mode [ 883.316603][T10899] hsr_slave_1: entered promiscuous mode [ 883.323725][T10899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.336133][T10899] Cannot create hsr debugfs directory [ 883.535710][T10995] Lens B: ================= START STATUS ================= [ 883.543242][T10995] Lens B: Focus, Absolute: 0 [ 883.548012][T10995] Lens B: ================== END STATUS ================== [ 884.090208][T11001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.487569][T10995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.511002][T10997] pimreg: entered allmulticast mode [ 886.496160][T10128] syz.2.1168: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 887.231403][T10128] CPU: 0 UID: 0 PID: 10128 Comm: syz.2.1168 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 887.231453][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 887.231464][T10128] Call Trace: [ 887.231470][T10128] [ 887.231477][T10128] dump_stack_lvl+0x189/0x250 [ 887.231506][T10128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.231528][T10128] ? __pfx__printk+0x10/0x10 [ 887.231552][T10128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 887.231578][T10128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 887.231604][T10128] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 887.231631][T10128] warn_alloc+0x214/0x310 [ 887.231652][T10128] ? __pfx_warn_alloc+0x10/0x10 [ 887.231676][T10128] ? __get_vm_area_node+0x28f/0x300 [ 887.231696][T10128] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 887.231713][T10128] ? __asan_memset+0x22/0x50 [ 887.231752][T10128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 887.231767][T10128] ? __kasan_kmalloc_large+0x1a/0xa0 [ 887.231792][T10128] ? rcu_is_watching+0x15/0xb0 [ 887.231815][T10128] ? relay_open_buf+0x217/0xd40 [ 887.231828][T10128] ? relay_open_buf+0x217/0xd40 [ 887.231840][T10128] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 887.231854][T10128] ? relay_open_buf+0x217/0xd40 [ 887.231866][T10128] ? trace_kmalloc+0x1f/0xd0 [ 887.231888][T10128] ? relay_open_buf+0x17c/0xd40 [ 887.231904][T10128] relay_open_buf+0x217/0xd40 [ 887.231926][T10128] relay_open+0x427/0x920 [ 887.231945][T10128] do_blk_trace_setup+0x591/0x9d0 [ 887.231972][T10128] blk_trace_setup+0x116/0x1f0 [ 887.231995][T10128] ? __pfx_blk_trace_setup+0x10/0x10 [ 887.232011][T10128] ? smack_log+0xef/0x3f0 [ 887.232039][T10128] ? smk_access+0x14c/0x4e0 [ 887.232076][T10128] sg_ioctl+0xaf3/0x2230 [ 887.232095][T10128] ? smack_file_ioctl+0x2a9/0x340 [ 887.232112][T10128] ? __pfx_sg_ioctl+0x10/0x10 [ 887.232135][T10128] ? __fget_files+0x3a0/0x420 [ 887.232149][T10128] ? __fget_files+0x2a/0x420 [ 887.232166][T10128] ? bpf_lsm_file_ioctl+0x9/0x20 [ 887.232185][T10128] ? __pfx_sg_ioctl+0x10/0x10 [ 887.232199][T10128] __se_sys_ioctl+0xf9/0x170 [ 887.232221][T10128] do_syscall_64+0xf6/0x210 [ 887.232242][T10128] ? clear_bhb_loop+0x60/0xb0 [ 887.232261][T10128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.232276][T10128] RIP: 0033:0x7f63d618e969 [ 887.232290][T10128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.232304][T10128] RSP: 002b:00007f63d7059038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.232320][T10128] RAX: ffffffffffffffda RBX: 00007f63d63b6160 RCX: 00007f63d618e969 [ 887.232332][T10128] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000009 [ 887.232341][T10128] RBP: 00007f63d6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 887.232351][T10128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.232359][T10128] R13: 0000000000000000 R14: 00007f63d63b6160 R15: 00007fffa2452188 [ 887.232383][T10128] [ 887.232396][T10128] Mem-Info: [ 887.635298][T10128] active_anon:81 inactive_anon:3923 isolated_anon:0 [ 887.635298][T10128] active_file:1996 inactive_file:1457 isolated_file:0 [ 887.635298][T10128] unevictable:768 dirty:184 writeback:0 [ 887.635298][T10128] slab_reclaimable:5798 slab_unreclaimable:108423 [ 887.635298][T10128] mapped:35403 shmem:3640 pagetables:901 [ 887.635298][T10128] sec_pagetables:0 bounce:0 [ 887.635298][T10128] kernel_misc_reclaimable:0 [ 887.635298][T10128] free:467766 free_pcp:4888 free_cma:0 [ 887.640248][ T13] bridge_slave_1: left allmulticast mode [ 887.778824][ T13] bridge_slave_1: left promiscuous mode [ 887.784629][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.851045][ T13] bridge_slave_0: left allmulticast mode [ 887.856739][ T13] bridge_slave_0: left promiscuous mode [ 888.029030][T10128] Node 0 active_anon:60kB inactive_anon:4424kB active_file:244kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102224kB dirty:36kB writeback:0kB shmem:5496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10984kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 888.076596][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.158910][T10128] Node 1 active_anon:264kB inactive_anon:22768kB active_file:7740kB inactive_file:5632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:50788kB dirty:700kB writeback:0kB shmem:20464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:460kB pagetables:544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 888.281860][T10128] Node 0 DMA free:10224kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:124kB free_cma:0kB [ 888.392308][T10128] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 888.434104][T10128] Node 0 DMA32 free:43488kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:6144KB active_anon:60kB inactive_anon:4620kB active_file:244kB inactive_file:196kB unevictable:1536kB writepending:36kB present:3129332kB managed:2564568kB mlocked:0kB bounce:0kB free_pcp:14920kB local_pcp:13676kB free_cma:0kB [ 888.546966][T10128] lowmem_reserve[]: 0 0 0 0 0 [ 888.566412][T10128] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 888.619687][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.654046][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 888.663164][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 888.671095][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 888.694631][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.746926][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.105452][T10128] lowmem_reserve[]: 0 0 0 0 0 [ 889.110282][T10128] Node 1 Normal free:1823620kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:7612kB inactive_anon:15548kB active_file:7760kB inactive_file:5616kB unevictable:1536kB writepending:732kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1396kB local_pcp:1268kB free_cma:0kB [ 889.175088][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.186162][ T13] bond0 (unregistering): Released all slaves [ 889.209101][T10128] lowmem_reserve[]: 0 0 0 0 0 [ 889.213980][T10128] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10224kB [ 889.280592][T10128] Node 0 DMA32: 114*4kB (UEH) 67*8kB (UEH) 161*16kB (UMEH) 161*32kB (UMEH) 140*64kB (UMEH) 79*128kB (UMEH) 42*256kB (UME) 19*512kB (UM) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 51344kB [ 889.329169][T10128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 889.388077][T10128] Node 1 Normal: 163*4kB (UME) 95*8kB (UME) 67*16kB (UME) 85*32kB (UME) 56*64kB (UME) 29*128kB (UME) 20*256kB (UME) 7*512kB (UM) 12*1024kB (UME) 5*2048kB (UME) 437*4096kB (M) = 1833684kB [ 889.549604][T11019] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 889.582302][T10128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.854518][T10128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 890.109065][T10128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.508639][T10128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 890.537751][T10128] 4784 total pagecache pages [ 890.579763][T10128] 483 pages in swap cache [ 890.584118][T10128] Free swap = 102600kB [ 890.605114][T10128] Total swap = 124996kB [ 890.621662][T10128] 2097051 pages RAM [ 890.649463][T10128] 0 pages HighMem/MovableOnly [ 890.654158][T10128] 424250 pages reserved [ 890.681633][T10128] 0 pages cma reserved [ 890.736651][ T13] hsr_slave_0: left promiscuous mode [ 890.773745][ T13] hsr_slave_1: left promiscuous mode [ 890.780191][ T5872] Bluetooth: hci0: command tx timeout [ 890.797466][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.855931][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.364009][T11041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.425049][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 891.721976][T11046] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1385'. [ 891.826409][ T13] team0 (unregistering): Port device team_slave_1 removed [ 891.902149][ T13] team0 (unregistering): Port device team_slave_0 removed [ 892.612721][T11020] lo speed is unknown, defaulting to 1000 [ 892.859023][ T5872] Bluetooth: hci0: command tx timeout [ 892.998892][ T48] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 893.180977][ T48] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 893.257267][ T48] usb 7-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 893.308884][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.411818][ T48] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 893.459075][ T10] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 893.697350][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.737392][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.901494][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.914923][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.966038][ T10] usb 4-1: Product: syz [ 893.977307][ T10] usb 4-1: Manufacturer: syz [ 894.007350][ T10] usb 4-1: SerialNumber: syz [ 894.240602][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.297350][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.365038][T11020] chnl_net:caif_netlink_parms(): no params data found [ 894.407487][ T120] usb 7-1: USB disconnect, device number 6 [ 894.563829][ T10] usb 4-1: 0:2 : does not exist [ 894.882222][T11067] fuse: Unknown parameter '0x000000000000000d' [ 894.939075][ T5872] Bluetooth: hci0: command tx timeout [ 894.967625][T10899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 895.058857][T10899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 895.123137][T10899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 895.764861][T10899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 895.826557][T11020] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.839624][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.904358][T11020] bridge_slave_0: entered allmulticast mode [ 895.937046][T11020] bridge_slave_0: entered promiscuous mode [ 896.049250][T11020] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.099189][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.158156][T11020] bridge_slave_1: entered allmulticast mode [ 896.198089][T11020] bridge_slave_1: entered promiscuous mode [ 896.310909][ T10] usb 4-1: USB disconnect, device number 59 [ 896.984804][T11078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.018951][ T5872] Bluetooth: hci0: command tx timeout [ 897.188981][T11076] mkiss: ax0: crc mode is auto. [ 899.070705][T11020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.079920][ T6903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 899.103526][ T13] bridge_slave_1: left allmulticast mode [ 899.112427][ T13] bridge_slave_1: left promiscuous mode [ 899.118278][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.160987][ T13] bridge_slave_0: left allmulticast mode [ 899.184509][ T13] bridge_slave_0: left promiscuous mode [ 899.198344][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.260104][ T6903] usb 7-1: Using ep0 maxpacket: 32 [ 899.278414][ T6903] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 899.304277][ T6903] usb 7-1: config 0 has no interface number 0 [ 899.326952][ T6903] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 899.366554][ T6903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.378764][ T6903] usb 7-1: Product: syz [ 899.384874][ T6903] usb 7-1: Manufacturer: syz [ 899.395001][ T6903] usb 7-1: SerialNumber: syz [ 899.399727][ T3443] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 899.430475][ T6903] usb 7-1: config 0 descriptor?? [ 899.569313][ T3443] usb 4-1: Using ep0 maxpacket: 32 [ 899.580734][ T3443] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 899.589551][ T3443] usb 4-1: config 0 has no interface number 0 [ 899.601899][ T3443] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 899.628727][ T3443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.638429][ T3443] usb 4-1: Product: syz [ 899.647053][ T6903] radio-si470x 7-1:0.35: this is not a si470x device. [ 899.657195][ T3443] usb 4-1: Manufacturer: syz [ 899.668133][ T3443] usb 4-1: SerialNumber: syz [ 899.683413][ T3443] usb 4-1: config 0 descriptor?? [ 899.854280][ T6903] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 899.872026][ T6903] usb 7-1: USB disconnect, device number 7 [ 899.923099][ T3443] radio-si470x 4-1:0.35: this is not a si470x device. [ 899.979029][ T31] INFO: task syz.2.1168:10134 blocked for more than 144 seconds. [ 899.990467][ T31] Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 [ 900.013408][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 900.050084][ T31] task:syz.2.1168 state:D stack:28512 pid:10134 tgid:10121 ppid:5868 task_flags:0x400040 flags:0x00000004 [ 900.098872][ T31] Call Trace: [ 900.102201][ T31] [ 900.105149][ T31] __schedule+0x168f/0x4c70 [ 900.198869][ T31] ? schedule+0x165/0x360 [ 900.233195][ T31] ? __pfx___schedule+0x10/0x10 [ 900.277524][ T31] ? schedule+0x91/0x360 [ 900.292558][ T31] schedule+0x165/0x360 [ 900.308529][ T31] schedule_preempt_disabled+0x13/0x30 [ 900.341368][ T31] __mutex_lock+0x724/0xe80 [ 900.345973][ T31] ? __mutex_lock+0x51b/0xe80 [ 900.379002][ T31] ? blk_trace_remove+0x20/0x40 [ 900.398835][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 900.414267][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 900.448766][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 900.454198][ T31] blk_trace_remove+0x20/0x40 [ 900.519231][ T31] sg_ioctl+0x47b/0x2230 [ 900.523583][ T31] ? smack_file_ioctl+0x24a/0x340 [ 900.528671][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 900.536462][ T3443] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 900.549342][ T31] ? __fget_files+0x3a0/0x420 [ 900.554048][ T31] ? __fget_files+0x2a/0x420 [ 900.568783][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 900.573776][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 900.578482][ T31] __se_sys_ioctl+0xf9/0x170 [ 900.648822][ T31] do_syscall_64+0xf6/0x210 [ 900.653368][ T31] ? clear_bhb_loop+0x60/0xb0 [ 900.658045][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.688857][ T31] RIP: 0033:0x7f63d618e969 [ 900.695347][ T31] RSP: 002b:00007f63d7038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.710639][ T31] RAX: ffffffffffffffda RBX: 00007f63d63b6240 RCX: 00007f63d618e969 [ 900.718634][ T31] RDX: 0000000020000000 RSI: 0000000000001276 RDI: 0000000000000009 [ 900.726789][ T31] RBP: 00007f63d6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 900.734940][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.749068][ T31] R13: 0000000000000001 R14: 00007f63d63b6240 R15: 00007fffa2452188 [ 900.758815][ T31] [ 900.761918][ T31] [ 900.761918][ T31] Showing all locks held in the system: [ 900.791532][ T31] 4 locks held by kworker/u8:1/13: [ 900.796663][ T31] 1 lock held by khungtaskd/31: [ 900.898890][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 900.918761][ T31] 3 locks held by kworker/u8:2/36: [ 900.923925][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 900.968844][ T31] #1: ffffc90000ad7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 901.009242][ T31] #2: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 901.018307][ T31] 3 locks held by kworker/1:1/48: [ 901.049176][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 901.068741][ T31] #1: ffffc90000b97c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 901.108738][ T31] #2: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 901.138786][ T31] 2 locks held by getty/5586: [ 901.143513][ T31] #0: ffff8880301140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 901.183470][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 901.218798][ T31] 3 locks held by kworker/u8:9/5984: [ 901.224132][ T31] #0: ffff88814d5d6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 901.288774][ T31] #1: ffffc90004d0fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 901.328758][ T31] #2: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 901.338332][ T31] 3 locks held by syz.2.1168/10128: [ 901.374213][ T31] 1 lock held by syz.2.1168/10134: [ 901.380676][ T31] #0: ffff8880247ff458 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 901.399771][ T31] 1 lock held by syz-executor/10899: [ 901.415524][ T31] #0: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 901.424955][ T31] 1 lock held by syz-executor/11020: [ 901.437779][ T31] #0: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 901.446958][ T31] 2 locks held by syz.5.1391/11074: [ 901.454484][ T31] #0: ffff88814e0650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x110/0x200 [ 901.468913][ T31] #1: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 901.478854][ T31] 5 locks held by syz.6.1394/11084: [ 901.488916][ T31] #0: ffff88805c1ccd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 901.508858][ T31] #1: ffff88805c1cc078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 901.519470][ T31] #2: ffffffff8f44dfc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 901.529601][ T31] #3: ffff88807f144b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 901.548941][ T31] #4: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 901.560037][ T31] 1 lock held by syz.3.1395/11087: [ 901.569000][ T31] #0: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 901.578833][ T31] [ 901.581196][ T31] ============================================= [ 901.581196][ T31] [ 901.590345][ T31] NMI backtrace for cpu 1 [ 901.590360][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 901.590379][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.590390][ T31] Call Trace: [ 901.590397][ T31] [ 901.590404][ T31] dump_stack_lvl+0x189/0x250 [ 901.590429][ T31] ? __wake_up_klogd+0xd9/0x110 [ 901.590451][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.590474][ T31] ? __pfx__printk+0x10/0x10 [ 901.590510][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 901.590532][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 901.590547][ T31] ? _printk+0xcf/0x120 [ 901.590576][ T31] ? __pfx__printk+0x10/0x10 [ 901.590611][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.590630][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 901.590650][ T31] watchdog+0xfee/0x1030 [ 901.590673][ T31] ? watchdog+0x1de/0x1030 [ 901.590700][ T31] kthread+0x711/0x8a0 [ 901.590723][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.590742][ T31] ? __pfx_kthread+0x10/0x10 [ 901.590762][ T31] ? __pfx_kthread+0x10/0x10 [ 901.590780][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 901.590799][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.590820][ T31] ? __pfx_kthread+0x10/0x10 [ 901.590837][ T31] ret_from_fork+0x4b/0x80 [ 901.590853][ T31] ? __pfx_kthread+0x10/0x10 [ 901.590872][ T31] ret_from_fork_asm+0x1a/0x30 [ 901.590929][ T31] [ 901.590935][ T31] Sending NMI from CPU 1 to CPUs 0: [ 901.739626][ C0] NMI backtrace for cpu 0 [ 901.739640][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 901.739659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.739669][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 901.739693][ C0] Code: 43 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 9f 18 00 f3 0f 1e fa fb f4 18 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 901.739707][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 901.739721][ C0] RAX: 1f98df4670b7e000 RBX: ffffffff81977028 RCX: 1f98df4670b7e000 [ 901.739733][ C0] RDX: 0000000000000001 RSI: ffffffff8d73ac7a RDI: ffffffff8bc120c0 [ 901.739745][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 901.739756][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7e0970 [ 901.739767][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 901.739777][ C0] FS: 0000000000000000(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 901.739790][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.739800][ C0] CR2: 000055be3b9597a0 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 901.739814][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 901.739823][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 901.739833][ C0] Call Trace: [ 901.739847][ C0] [ 901.739853][ C0] default_idle+0x13/0x20 [ 901.739874][ C0] default_idle_call+0x74/0xb0 [ 901.739896][ C0] do_idle+0x1e8/0x510 [ 901.739922][ C0] ? __pfx_do_idle+0x10/0x10 [ 901.739953][ C0] cpu_startup_entry+0x44/0x60 [ 901.739976][ C0] rest_init+0x2de/0x300 [ 901.739998][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 901.740022][ C0] start_kernel+0x470/0x4f0 [ 901.740040][ C0] x86_64_start_reservations+0x2a/0x30 [ 901.740062][ C0] x86_64_start_kernel+0x66/0x70 [ 901.740083][ C0] common_startup_64+0x13e/0x147 [ 901.740111][ C0] [ 901.947613][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 901.954486][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 901.966291][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.976345][ T31] Call Trace: [ 901.979620][ T31] [ 901.982547][ T31] dump_stack_lvl+0x99/0x250 [ 901.987143][ T31] ? __asan_memcpy+0x40/0x70 [ 901.991736][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.996941][ T31] ? __pfx__printk+0x10/0x10 [ 902.001563][ T31] panic+0x2db/0x790 [ 902.005493][ T31] ? __pfx_panic+0x10/0x10 [ 902.009909][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 902.015291][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 902.020666][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 902.026831][ T31] watchdog+0x102d/0x1030 [ 902.031175][ T31] ? watchdog+0x1de/0x1030 [ 902.035592][ T31] kthread+0x711/0x8a0 [ 902.039666][ T31] ? __pfx_watchdog+0x10/0x10 [ 902.044351][ T31] ? __pfx_kthread+0x10/0x10 [ 902.048950][ T31] ? __pfx_kthread+0x10/0x10 [ 902.053544][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 902.058748][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 902.063959][ T31] ? __pfx_kthread+0x10/0x10 [ 902.068548][ T31] ret_from_fork+0x4b/0x80 [ 902.072958][ T31] ? __pfx_kthread+0x10/0x10 [ 902.077551][ T31] ret_from_fork_asm+0x1a/0x30 [ 902.082333][ T31] [ 902.085732][ T31] Kernel Offset: disabled [ 902.090063][ T31] Rebooting in 86400 seconds..