last executing test programs: 7m24.189366262s ago: executing program 4 (id=60): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) bind$qrtr(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x2, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7m22.988254463s ago: executing program 4 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x0, 0x0, 0x0, 0x5}}, @TCA_CT_ACTION={0x6, 0x3, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000530401003cbd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x4004004) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f00000000c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, "1415a562"}, 0xfffff800, 0x2, {}, 0xfffffffc}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0xa, 0x0, @val=@netfilter={0x2, 0x0, 0x82b}}, 0x20) r8 = socket(0x840000000002, 0x3, 0xf8) r9 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', "0200", "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\x00 \x00', "2c09000000ffd8ffffff02ff"]}) connect$inet(r8, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000100)=""/166, 0xa6, 0x42, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x2}) 7m21.200416244s ago: executing program 4 (id=64): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0xf, "4372071e845c1497c8553830000000"}}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x1}) unshare(0x8060600) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x4, 0x193, 0x1, 0x3, 0x4, 0x4, 0x2, 0x8895, 0xc, 0xb, 0x722, 0x2800, 0x7, 0x7f, 0x8, 0x20, {0x4}, 0x8, 0x5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 7m20.042832172s ago: executing program 4 (id=65): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "6fd9657a47a5cc7d", "bba6086efd060006000000000004008f", "e97b0a10", "d53dddd88451237a"}, 0xffffffffffffff65) 7m19.167540942s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x400000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01f6"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 7m17.029357997s ago: executing program 4 (id=71): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x47f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r2, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, 0x0, 0x0, 0x700, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m1.736434368s ago: executing program 32 (id=71): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x47f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r2, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, 0x0, 0x0, 0x700, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m34.465596493s ago: executing program 3 (id=278): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) bind$qrtr(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m26.86540839s ago: executing program 3 (id=295): fanotify_init(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x131) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 5m25.80076195s ago: executing program 3 (id=299): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x3, 0x4, 0x0, 0x3e}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x2, 0xc, 0xfffffffffffffffe, 0x3, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) close(r4) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000000580)=""/102400, 0x19000) 5m21.637033561s ago: executing program 3 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f00000003c0)=0x14) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r8}, 0xc) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000340)={0x2, 0x1, 0x0, r8, 0xfffffffd}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x3ac, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8, 0xd1, 0xf9, 0x5}, {0x6, 0x2, 0x1, 0x7f}, {0xd, 0x4a, 0xae, 0x3}, {0x5, 0x4, 0x40, 0x2}, {0xfff0, 0x3, 0xec, 0x2}, {0x9, 0x5, 0x9, 0x100}, {0x7, 0x0, 0x7, 0xe}, {0xffff, 0x5, 0x7, 0x10000}, {0x1, 0x3, 0x1, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7851}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}]}}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x90000004}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x20008850) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000000, 0x0, &(0x7f0000000240)={0xa1, 0x8, 0x0, 0x200}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000480003804400008008000340000097"], 0xf8}}, 0x0) 5m19.952057217s ago: executing program 3 (id=309): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x93}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x80000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000f69400000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xa0002000}) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="14", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @mcast1, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x20000098) shutdown(r0, 0x1) 5m14.955363944s ago: executing program 3 (id=323): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf253500000008000300", @ANYRES32=r8, @ANYBLOB="0a0034000101010101010000"], 0x44}, 0x1, 0x0, 0x0, 0x44840}, 0x4040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) recvmmsg(r0, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/204, 0xcc}], 0x8, &(0x7f0000001500)=""/6, 0x6}, 0x800}, {{&(0x7f0000001540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/223, 0xdf}, {&(0x7f00000017c0)=""/172, 0xac}], 0x4, &(0x7f00000018c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000001900)=@phonet, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/63, 0x3f}, {&(0x7f00000019c0)=""/146, 0x92}, {&(0x7f0000001a80)=""/26, 0x1a}], 0x3, &(0x7f0000001b00)=""/30, 0x1e}, 0x8000000}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001b40)=""/148, 0x94}, {&(0x7f0000001c00)=""/146, 0x92}, {&(0x7f0000001cc0)=""/222, 0xde}, {&(0x7f0000001dc0)=""/133, 0x85}], 0x4, &(0x7f0000001ec0)=""/108, 0x6c}, 0x6760af3c}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000001f40)=""/52, 0x34}, {&(0x7f0000001f80)=""/217, 0xd9}, {&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/148, 0x94}, {&(0x7f0000002200)=""/179, 0xb3}, {&(0x7f00000022c0)=""/67, 0x43}, {&(0x7f0000002340)=""/138, 0x8a}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/96, 0x60}], 0xa, &(0x7f0000003540)=""/211, 0xd3}, 0x1c0000}, {{&(0x7f0000003640)=@tipc=@name, 0x80, &(0x7f0000005c00)=[{&(0x7f00000036c0)=""/239, 0xef}, {&(0x7f00000037c0)=""/135, 0x87}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/137, 0x89}, {&(0x7f0000004940)=""/77, 0x4d}, {&(0x7f00000049c0)=""/69, 0x45}, {&(0x7f0000004a40)=""/153, 0x99}, {&(0x7f0000004b00)=""/54, 0x36}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/168, 0xa8}], 0xa, &(0x7f0000005cc0)=""/235, 0xeb}, 0x9}, {{&(0x7f0000006180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000006700)=[{&(0x7f0000006200)=""/192, 0xc0}, {&(0x7f00000062c0)=""/76, 0x4c}, {&(0x7f0000006340)=""/235, 0xeb}, {&(0x7f0000006440)=""/31, 0x1f}, {&(0x7f0000006480)=""/169, 0xa9}, {&(0x7f0000006540)=""/205, 0xcd}, {&(0x7f0000006640)=""/146, 0x92}], 0x7, &(0x7f0000006780)=""/221, 0xdd}, 0x200fe0a0}, {{&(0x7f0000006880)=@sco={0x1f, @none}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006900)=""/118, 0x76}, {&(0x7f0000006980)=""/63, 0x3f}], 0x2, &(0x7f0000006a00)=""/4096, 0x1000}, 0x3800000}], 0x8, 0x42, &(0x7f0000007c40)) 5m12.948076289s ago: executing program 33 (id=323): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf253500000008000300", @ANYRES32=r8, @ANYBLOB="0a0034000101010101010000"], 0x44}, 0x1, 0x0, 0x0, 0x44840}, 0x4040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) recvmmsg(r0, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/204, 0xcc}], 0x8, &(0x7f0000001500)=""/6, 0x6}, 0x800}, {{&(0x7f0000001540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/223, 0xdf}, {&(0x7f00000017c0)=""/172, 0xac}], 0x4, &(0x7f00000018c0)=""/18, 0x12}, 0x9}, {{&(0x7f0000001900)=@phonet, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/63, 0x3f}, {&(0x7f00000019c0)=""/146, 0x92}, {&(0x7f0000001a80)=""/26, 0x1a}], 0x3, &(0x7f0000001b00)=""/30, 0x1e}, 0x8000000}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001b40)=""/148, 0x94}, {&(0x7f0000001c00)=""/146, 0x92}, {&(0x7f0000001cc0)=""/222, 0xde}, {&(0x7f0000001dc0)=""/133, 0x85}], 0x4, &(0x7f0000001ec0)=""/108, 0x6c}, 0x6760af3c}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000001f40)=""/52, 0x34}, {&(0x7f0000001f80)=""/217, 0xd9}, {&(0x7f0000002080)=""/106, 0x6a}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/148, 0x94}, {&(0x7f0000002200)=""/179, 0xb3}, {&(0x7f00000022c0)=""/67, 0x43}, {&(0x7f0000002340)=""/138, 0x8a}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/96, 0x60}], 0xa, &(0x7f0000003540)=""/211, 0xd3}, 0x1c0000}, {{&(0x7f0000003640)=@tipc=@name, 0x80, &(0x7f0000005c00)=[{&(0x7f00000036c0)=""/239, 0xef}, {&(0x7f00000037c0)=""/135, 0x87}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/137, 0x89}, {&(0x7f0000004940)=""/77, 0x4d}, {&(0x7f00000049c0)=""/69, 0x45}, {&(0x7f0000004a40)=""/153, 0x99}, {&(0x7f0000004b00)=""/54, 0x36}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/168, 0xa8}], 0xa, &(0x7f0000005cc0)=""/235, 0xeb}, 0x9}, {{&(0x7f0000006180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000006700)=[{&(0x7f0000006200)=""/192, 0xc0}, {&(0x7f00000062c0)=""/76, 0x4c}, {&(0x7f0000006340)=""/235, 0xeb}, {&(0x7f0000006440)=""/31, 0x1f}, {&(0x7f0000006480)=""/169, 0xa9}, {&(0x7f0000006540)=""/205, 0xcd}, {&(0x7f0000006640)=""/146, 0x92}], 0x7, &(0x7f0000006780)=""/221, 0xdd}, 0x200fe0a0}, {{&(0x7f0000006880)=@sco={0x1f, @none}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006900)=""/118, 0x76}, {&(0x7f0000006980)=""/63, 0x3f}], 0x2, &(0x7f0000006a00)=""/4096, 0x1000}, 0x3800000}], 0x8, 0x42, &(0x7f0000007c40)) 4m49.814307758s ago: executing program 5 (id=365): prctl$PR_SET_THP_DISABLE(0x42, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000040)=';', 0xff1d, 0x884, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) r6 = syz_clone(0x28000000, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001580)={r6, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000d40), 0xa042, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d80)='./cgroup/syz0\x00', 0x200002, 0x0) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000dc0), 0x4) r15 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_enter(r15, 0x47ba, 0x1000000, 0x0, 0x0, 0x0) r16 = socket$inet6(0xa, 0x3, 0x6) r17 = socket$phonet(0x23, 0x2, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)="719998ff5e984c6b319ae2af8940611d835ca831", 0x14}], 0x1, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0, 0x8805}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c42e6dde582d67558b3a98ca78f65b63e2c6163d4948a4b32f8cb1d6a9c8d1d9a07455", 0x23}], 0x1, &(0x7f0000000940)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x98, 0x24004000}}, {{&(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="7d71d01699c38c6ea43d49f0b2cded99c9c5d04c64ea70b8208ef8d68baf79527258d58188abc4de265548c347849866de36100d899edf4f6505959df06d0c6250741e9e53443423a0b42b13e85f4c0ad0fe64d5734cee1c16e7660375736f54ccf7a49b635a2aa9eb4d3fb4aedce3a5661cd14b51b0a8ba543a6a70fa395a37dd3843b5589304aa03ad94df07cf7d066648ba9d942810236b18551a6e378f9082455c6fbf91f16736d0ee0357e2b6771875b88be763b6f945429250b41aa562da", 0xc1}, {&(0x7f0000000b80)="a7cf6dcf909657581e0a160794dcc7a14036b8b26871cb551d8ce85637e2ead03cdd87534b2eb24f5e65437e826b3dedd8c0204d3a698d3df6460dd68e8176f61c9d6259dd77d47fbeaf97e4ac79f320f8c3c6450808badd85f7abf599a00c9e5881eab1f0c14b16f2445b09692ef4a82febd9cabe801af5033364ca1ff3369b88eb2f039479368a6373c3b332e18bbfe2a86a91d2785c16dcc78d0d44f7198c35330a083240fcab1b5d2aeb7401096832cf8a180916e0d174df37c0961118d40f4e144eff1b9d5b64c68e822c7b9be7950cb0e12a417c38b236e16faac7ec8de01c7177f9d101e387cc8851544e32d85a2e0cdfcc16cbb3", 0xf8}, {&(0x7f0000000c80)="a3e28fc44225a7a7fcd562a7a2", 0xd}], 0x3, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}, @rights={{0x20, 0x1, 0x1, [r11, r12, r13, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r14, 0xffffffffffffffff, r15, r16, r17]}}], 0x60, 0x40010}}], 0x3, 0x40081) 4m47.708848268s ago: executing program 5 (id=370): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000000), 0x2}, 0x20) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x3) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0xfe44, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r1, &(0x7f0000001300)="7f", &(0x7f0000001340)=""/3}, 0x20) sendto$llc(r0, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e543700e9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d5021d4ea91f67e263aefad4deb6a5c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dc6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d007c12e6c42021b43e2", 0xa1, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x8}, 0x10) 4m47.354277234s ago: executing program 5 (id=372): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$I2C(&(0x7f0000000b00), 0xbe87, 0x2000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 4m46.331242397s ago: executing program 5 (id=374): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendto$inet6(r0, 0x0, 0x0, 0xc0, &(0x7f0000000100)={0xa, 0x2, 0x40002, @loopback, 0x3}, 0x1c) (fail_nth: 2) 4m44.908958374s ago: executing program 5 (id=375): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x80000000, 0x4, {}, {0xffffffffffffffff}, 0x20, 0x9}) getegid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000002c0)='./file0\x00', r1, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x9917, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = msgget$private(0x0, 0xafb0e20fef6483ff) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r3, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 4m42.669792205s ago: executing program 5 (id=379): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) (async) r5 = creat(0x0, 0x166) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000200), 0x4) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000c43000/0x4000)=nil, 0x4000, 0x3800008, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc0405668, &(0x7f0000000300)={0x0, 0x0, 0x1, {0x0, 0x4}}) (async, rerun: 64) r8 = userfaultfd(0x801) (rerun: 64) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x5) (async, rerun: 32) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async, rerun: 32) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0xffffffffffffff83, &(0x7f0000000040)=[{&(0x7f0000000400)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e21", 0x20}], 0x1}}], 0x1, 0x20008000) (async) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) (async) socket$inet6(0x10, 0x3, 0x0) 4m27.118649019s ago: executing program 34 (id=379): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) (async) r5 = creat(0x0, 0x166) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000200), 0x4) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000c43000/0x4000)=nil, 0x4000, 0x3800008, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc0405668, &(0x7f0000000300)={0x0, 0x0, 0x1, {0x0, 0x4}}) (async, rerun: 64) r8 = userfaultfd(0x801) (rerun: 64) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x5) (async, rerun: 32) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async, rerun: 32) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0xffffffffffffff83, &(0x7f0000000040)=[{&(0x7f0000000400)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e21", 0x20}], 0x1}}], 0x1, 0x20008000) (async) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) (async) socket$inet6(0x10, 0x3, 0x0) 1m45.340658388s ago: executing program 6 (id=771): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r3, &(0x7f00000003c0)="e1d7", 0x2) read(r3, 0x0, 0x5d) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x4000000000, 0x94b382) sendfile(r4, r4, 0x0, 0x24002de8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 1m44.054412134s ago: executing program 6 (id=776): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r4, 0x0, 0x1a, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc7, 0x58, 0xf8, 0x40, 0x93a, 0x10f, 0xc663, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0x93, 0xe7, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x1, 0x9, 0xfc}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x27, 0x7f, 0x4, [@generic={0x7, 0x5, "544dbdde2c"}]}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x82, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x56, 0x18, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "101c3b44e53e"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x5d72, 0x7f}, [@obex={0x5, 0x24, 0x15, 0x40}, @dmm={0x7, 0x24, 0x14, 0xffff, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x4}, @acm={0x4, 0x24, 0x2, 0x18}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xdb2, 0x0, 0x3, 0x39, 0x3, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0xa0ac2e7661ce7a45, 0x9, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xaf, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7, 0x0, 0x9, 0x40, 0x5}, 0x5e, &(0x7f0000000280)={0x5, 0xf, 0x5e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xfb, 0x2, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x6, 0xfff}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "9902a0bf4738f31622ed3a18cf1e1271"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7fffffc, 0x0, 0x10, [0x30, 0xff0000, 0x3ff0, 0x0, 0x5ff0, 0xc000]}, @generic={0xd, 0x10, 0x2, "029ebe931bb7dda2d683"}]}, 0x4, [{0x8f, &(0x7f0000000540)=@string={0x8f, 0x3, "7a98fe539129c056fcca3737d5bb2666224a5207715d5a1fd2719a721a29c83e4f835e8b99b2670f76ac941d341ce6a361285ea3254fec4d671a79f3eb5c7810ee6033e0fcc92fbcbf48485f6ab78fae811830e1ba36a275b289bc482f53f860e3308c869177cfe745bb112ac3d2cfa57c90267e383ee1d72f76dcea489662845e3e3078fd3fd0f0dcc3981ca4"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x101, &(0x7f00000006c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x421}}]}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'macvlan1\x00', {0x2, 0x4e23, @empty}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) listen(r5, 0x304b) 1m38.578682484s ago: executing program 6 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="34000000000000d330dd0000f8f34a3a8ca3d62b9b03f1c10c4d616c5cc088d48481b21161bbb0", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r3, r3) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) 1m37.074697314s ago: executing program 6 (id=792): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) io_setup(0xb7d7, &(0x7f0000000080)=0x0) r2 = eventfd2(0xb, 0x80001) r3 = eventfd(0x2) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f00000000c0)="a65ed7e7c4b397379bcae84b41cda0e1f20b2831e1aeabdd5b8c79e5fbda744a489665aa7ae779d1231e7ef14219bac9435e810fe1b71236fd", 0x39, 0x7, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f00000001c0)="4fdabcc79aec44a7207604ff7a90cc6f37314cc24e947936f70224cbd0b1a04caeeb60ba91bc1204f1ffa049238129fc9c8431f9e09f7b8c5880f764286703314049ba5f8e3265d40e95e1ef8a40813904942071d1802fb3e14ff9d35ddcb3beb0fdb130daaab4cfbeecbaf990c3a772c57f1a6d1127d4a724258ea4253059c12085e3dfbfc569f6e7b3ccd77fdeda1e7e604892ea34e2b37212748dc9fe38f67d8c035e266d", 0xa6, 0xffffffffffffffff, 0x0, 0x2, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xf607, r0, &(0x7f00000002c0)="5b719db26cc7b502e7c2f7e86d24b9a915138a84a324b8d9", 0x18, 0x8}]) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x0) 1m35.944879605s ago: executing program 6 (id=798): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_names\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000001}]}, 0x3c}}, 0x8006) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x284100) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b819230020ac654d921c9f0000d74000000000000000000000000000aafc0000000000000000000000000000008903000000000000071000000000020719000200000000"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x40}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="1100000000000000034d564b0000000001"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000002000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000084c0000000c0a010100000000000000000700000a0900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180fffffffb1400"], 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x7, 0x61, 0x11, 0xb9}, [@call]}, &(0x7f0000000380)='GPL\x00', 0x20000005, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 1m34.258197423s ago: executing program 6 (id=801): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd92d, 0x10100, 0x18000003, 0x2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1m18.842050543s ago: executing program 35 (id=801): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd92d, 0x10100, 0x18000003, 0x2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 23.475997935s ago: executing program 1 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="34000000000000d330dd0000f8f34a3a8ca3d62b9b03f1c10c4d616c5cc088d48481b21161bbb072cfd50a4453b7fd3f897d3cf2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r3, r3) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) 22.668395117s ago: executing program 1 (id=996): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x3) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0xfe44, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r1, 0x0, &(0x7f0000001340)=""/3}, 0x20) sendto$llc(r0, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e543700e9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d5021d4ea91f67e263aefad4deb6a5c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dc6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d007c12e6c42021b43e2", 0xa1, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x8}, 0x10) 22.540941308s ago: executing program 1 (id=999): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000240)={0x400, 0x8, 0x6, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="41000000010001", 0x7) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, 0x0, 0x0) close(r0) syz_io_uring_setup(0x7bb9, &(0x7f00000001c0)={0x0, 0x6716, 0x14000, 0x0, 0x1c6}, &(0x7f0000000240), &(0x7f00000002c0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x2, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") 21.949158194s ago: executing program 0 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x68}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.595103203s ago: executing program 1 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='selinuxfs\x00', 0x4040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r1, 0x20049549e2a2d659) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x8001, 0x40000000, 0x9b26, 0x7f, 0xf86, 0x2, 0x0, 0x0, 0x10, 0x80000000}}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x161081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd80000021e4cebb462906d0700040100"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x1, 0x3, '1fy', 0x3, 0x3}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x69a201, 0x0, 0x6}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) 21.27897257s ago: executing program 0 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf70}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (fail_nth: 10) 20.742095628s ago: executing program 0 (id=1004): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x8c}, {0x0, 0x3c}], 0x2) tkill(r0, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x480841, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb9ff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000003c0)=""/248) sendmsg$NFT_BATCH(r5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)="6c630580cce908b32c5a2be48b93adeef9a3c601b828b97ebdb07c5e4393ef38b2b0353775c574075e10a44de828e7f87eb8287528d070dc4b283e42254b3769306b834277ae2ecec341bd70e5ca7619debe2399511c2f5489432a82a5ae25b373b4a06383b4dd74f4dcadc2bdfaac763f59be2aa082a18c6f9c37d1111b9af9a84cb9e15e72b1ab4b47276b8572b146531a9327036f1a3db008395b99237148f041aa26a8c4a8520a17cec6baf9029e1af307a28744c7ab95ff51", 0xbb) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) 20.650791392s ago: executing program 2 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="34000000000000d330dd0000f8f34a3a8ca3d62b9b03f1c10c4d616c5cc088d48481b21161bbb072cfd50a4453b7fd3f897d3cf2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r3, r3) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) 19.767835235s ago: executing program 1 (id=1006): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0) 19.74989798s ago: executing program 7 (id=1007): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff03, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @loopback, 0x4}, 0x1c) migrate_pages(0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x13e) 19.749190924s ago: executing program 2 (id=1008): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 19.667788013s ago: executing program 1 (id=1009): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) lseek(r0, 0x0, 0x3) fanotify_init(0x0, 0x0) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, 0x0, 0x0) write$nbd(r2, 0x0, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x882) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x4, 0xfd, @tick=0xfd, {0x0, 0xfe}, {}, @raw32={[0x0, 0x1, 0xd4]}}], 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x1) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24ff", 0xdc}, {&(0x7f0000000740)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24ba", 0x195}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6ffee04bb1106c7e", 0x8b}], 0x3}}], 0x2, 0xc0) 19.585196842s ago: executing program 7 (id=1010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x8c, 0x3, 0x6, '\x00', 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) 19.577592729s ago: executing program 2 (id=1011): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x40040) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x7ffffffe, 0x0, 0xe00) r5 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000004) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000340)={0xf000000, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 19.480537356s ago: executing program 2 (id=1012): ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 19.372854096s ago: executing program 7 (id=1013): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x8, 0x0, 0x69) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYRES64=r1], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, 0x0, 0x810) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="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"], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34010000000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001400128008000100677265000800028004001200"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0xffffff00, 0x8, {{0x25, 0x4, 0x3, 0x21, 0x94, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0xa, 0x0, [{0x6, 0x4, "eb22"}]}, @timestamp={0x44, 0x24, 0x7c, 0x0, 0x7, [0x7, 0x2, 0x0, 0xffff84e3, 0x2, 0x8, 0x29, 0x40000000]}, @rr={0x7, 0x1b, 0x72, [@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010101, @empty, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x42, 0x3, 0x2, [{@broadcast, 0x70}, {@local, 0x6}, {@multicast1, 0x10001}, {@private=0xa010101, 0xffff0001}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x9, [{@local, 0x7}]}]}}}}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @multicast1}, &(0x7f0000000600)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0xc227f47ee4c59c55, &(0x7f0000000640)={@initdev, 0x0}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50030000", @ANYRES16=r3, @ANYBLOB="00032abd7000ffdbdf250c00000018000180140002007369743000000000000000000000000058000380540003804000018005000200000000000400030008000100080000000400030008000100000000e00b0002002e272d2b2f2600000400030008000100ff7b000004000300100001800400030008000100090000006c010380080002000300000004000100e3000500778990d0e40321a0888377dd32999630093800b1d7e6f229849872090eda91486960b302e32b420b2533942f4338b5565497003b0427e9219ad901c1012bbb2ac37980caea2bb1e7724d74400c6a93c7918df91e46c20726419b0bb8401def6b4682481f76342ad708844015753b8e1c265521816cbbd39488cd707f7be0d2206021d46d85f7d7dbb3cab43b6421ac44d8077be4a4afd83a48f2b3b625cbb0b3c10f2b2a1305bcc53a5b39dd818d9f6aa63cc61b3f0deb4be975165ece1364986dd4eb536f21e049901e92aa54f4e2ab9406d96a0571588dfb7454a6a2364800080002000300000008000200ffffffff0400010061000400f96ec7522ad7e44531b8dc20f20dff52c1af9056acbf0016f097bfbe5d5b3150176092e2a24359cf0f4661515b6b4dbb1371ab1dce83c3acb9019a1552f1f360a8b042d1d23fc9dfcb0132acebd770af9d5f3d74764629cdc47b3c71bd000000a8000380a40004000e14445557720f99d6bf40e952013154d0c5739d76fe1a3d0cc49e8bad0d34cb821632e6180933364bb57e726fffcc608f4b67d9c5ab3b782be21bce2301084497e12047cdebca3d58d7657de4c0736594992bf9e0a7ba2e66e772ed39b123e07e6231fa441bf8a47d3cca382471c467db97cee9494212ed947ccc7c9971277690733b261664286f3ced67818e33e6504a61de3bc412e08677ebefda256b69b5540001800800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000300060000002b4c03000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="580001800800030002000000140002006d61637674617030000000000000000014000200726f73653000000000000000000000001400020077673100000000000000000000000000080003000100000008000300020000000c0001800800030000000000"], 0x350}, 0x1, 0x0, 0x0, 0x20040840}, 0x4008080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500260000000000"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40046f41, &(0x7f0000000440)=0x1f) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x4800) 19.224214601s ago: executing program 7 (id=1014): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="b0000000000000001659ec089429aa5db97288b0f8a87ea8e66d9a8b051d"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 18.485885338s ago: executing program 7 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='selinuxfs\x00', 0x4040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r1, 0x20049549e2a2d659) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x8001, 0x40000000, 0x9b26, 0x7f, 0xf86, 0x2, 0x0, 0x0, 0x10, 0x80000000}}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x161081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd80000021e4cebb462906d0700040100"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x1, 0x3, '1fy', 0x3, 0x3}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x69a201, 0x0, 0x6}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) 18.435017012s ago: executing program 2 (id=1016): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r3, 0x5, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x30}}, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x166, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x130, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x30}, {"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"}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 18.166793849s ago: executing program 2 (id=1017): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080700000000000000000000850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@iter={0x0}}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r5, 0xc, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r9, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) ioctl$SIOCPNGETOBJECT(r9, 0x89e0, &(0x7f0000000540)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r0, r5, 0x13, 0x2000, 0x0, @value=r7, @void, @void, @void, r8}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[], 0x0) 17.598499806s ago: executing program 7 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="a4411551be9136fa9394768278e30915673d94a9082d56fed1359d919a9fb5ee6f525a751b87b6bee8fbdf2a4a6a9b912d7a24a3c5e1f5a2115403f6deab8375ff62459ca809e7e7fca4baf23affd0c0d726ddfaa02d0f623741ae276e81a706b9dc56be6c7794d245593be89c640ed187c4996781e2fbc70165925e23", @ANYBLOB="66865f62d099ecefa52494f00b218821b3982213a956e74382ddb53049f41ec0aeb36cec504d18030a37fa10c15273", @ANYBLOB="2f96dc092edbda1e5f2aa38b0022f181f385c00bb4e94de70e9e8734f89c4c2c44758504661897b60aeea83810a714548216ec077f98af75030105cee03e76c6b49f116b30d53c0e026845b01849ceef7ae8", @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="8e4315fd76578d795c5825d1d9497faf4a4b4235af931f3419f2075d2b3ba78df1eb3f35e24366852bd2c3e033124e19c6bdba9756b1df0ed8ff49054e166e293fefe7211c8f553c8059a0bdf83691cfecf7b32c7f47f11a68f9ee918c515047b8a2d52a9e75698d0301ec3e1585834c6246461a63dcd418a862a5c9e98413a1099275b26a79af19d5319d00012de66c650817dae7918a522585c2df40409bfb2e8c1c029b6ff766dff3edc74a9e72734b0e066e25ece3b3b665f85c7a1d", @ANYBLOB="f4beab0b101fee36191b2faf9b92c881b72511e5e5b24257a1a61a27200bbc937cf85960c695049a72a8b0a6062de89a99de4565220046f4eafb4cca896d8c6a0c67e00c28782b33ffe1b8dbfe094b527dcc896ee325f4d66f44172df0754019e23b337ff1135be97a80928c132f06c335dfa44979e55e37cfa2ed64d6108e8b5765162d971391282b683f4dbda4424abc0c0ae93c84d06abde31937d666295ae8a47dc2fbdc38fe7d2d1a970e2293b4cc9397e084068edb289d2e343627f5c23447d7f53587320ca59c50d653d55bb5b49bdd8f44e7deaa19acf14f1df2e78790ba9dde10db2d97622dde8023b51c84189391ccf3ebb26d"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x24008090) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1d0, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@mac=@random="c9a9c4ac4b8d", {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local, {[0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0d1354862e47", @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xa, @mcast1, 0xffffffff}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r2 = socket(0xb, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r3, 0x1000000, 0x2}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r4 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000240)=[0x7f, 0xfffa, 0x1]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x20000, 0x0) lseek(r5, 0x5, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x88) syz_usb_connect(0x5, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f", @ANYRES16=r6, @ANYBLOB="840aba8c80ff89ee111e3f6ca49e85d78da907be30d1fdf474def3a2d98148092cee4366fc8bbd8b4cc395688b008c9d2afe5799a37124e5b8d7eea9ef5d787201deae7bd475c09ba5c39f9104648d63d7f0fab07fea241054fc5bf7cafb4e404f6a3125ecbeee37e3e57ae475a461dbde94caec3f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000340), 0xfbfffffffffffff6, 0x18000) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 16.933180669s ago: executing program 0 (id=1019): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0xb0581000) cachestat(r1, &(0x7f0000000040)={0x0, 0x4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_mrelease(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.900678207s ago: executing program 0 (id=1020): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x2355, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000001140)=r2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="c75dd7bd11031597636331eef430285664be9cea1d79b5c1946fb3401a8535536d9b2c7a04523debe089dee1c5c790817941f5f2272b9e45405c55b2a3f564cc5fbb4542c6fc4eec8b514ab5fd538b701932074ecd0cbe9d11259b05f2a7f92995818add3f62edb2d843642deadc687b91a2f39379893f375cce187aa5f98dd96409179c5d", @ANYRES64=r9, @ANYRESOCT=0x0, @ANYRESOCT=r8, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=r8], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r13) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) io_uring_enter(r3, 0x3023, 0x4000, 0x40, 0x0, 0x28) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read$FUSE(r15, &(0x7f00000033c0)={0x2020}, 0x2020) 15.985677217s ago: executing program 0 (id=1021): clock_gettime(0x2bc7f68ba1627db2, 0x0) fsopen(&(0x7f0000000040)='ext3\x00', 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x9, 0x800) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3]) 4.537561496s ago: executing program 36 (id=1009): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) lseek(r0, 0x0, 0x3) fanotify_init(0x0, 0x0) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, 0x0, 0x0) write$nbd(r2, 0x0, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x882) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x4, 0xfd, @tick=0xfd, {0x0, 0xfe}, {}, @raw32={[0x0, 0x1, 0xd4]}}], 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x1) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24ff", 0xdc}, {&(0x7f0000000740)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24ba", 0x195}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6ffee04bb1106c7e", 0x8b}], 0x3}}], 0x2, 0xc0) 3.036776086s ago: executing program 37 (id=1017): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080700000000000000000000850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@iter={0x0}}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r5, 0xc, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r9, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) ioctl$SIOCPNGETOBJECT(r9, 0x89e0, &(0x7f0000000540)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r0, r5, 0x13, 0x2000, 0x0, @value=r7, @void, @void, @void, r8}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[], 0x0) 2.033307244s ago: executing program 38 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB="a4411551be9136fa9394768278e30915673d94a9082d56fed1359d919a9fb5ee6f525a751b87b6bee8fbdf2a4a6a9b912d7a24a3c5e1f5a2115403f6deab8375ff62459ca809e7e7fca4baf23affd0c0d726ddfaa02d0f623741ae276e81a706b9dc56be6c7794d245593be89c640ed187c4996781e2fbc70165925e23", @ANYBLOB="66865f62d099ecefa52494f00b218821b3982213a956e74382ddb53049f41ec0aeb36cec504d18030a37fa10c15273", @ANYBLOB="2f96dc092edbda1e5f2aa38b0022f181f385c00bb4e94de70e9e8734f89c4c2c44758504661897b60aeea83810a714548216ec077f98af75030105cee03e76c6b49f116b30d53c0e026845b01849ceef7ae8", @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="8e4315fd76578d795c5825d1d9497faf4a4b4235af931f3419f2075d2b3ba78df1eb3f35e24366852bd2c3e033124e19c6bdba9756b1df0ed8ff49054e166e293fefe7211c8f553c8059a0bdf83691cfecf7b32c7f47f11a68f9ee918c515047b8a2d52a9e75698d0301ec3e1585834c6246461a63dcd418a862a5c9e98413a1099275b26a79af19d5319d00012de66c650817dae7918a522585c2df40409bfb2e8c1c029b6ff766dff3edc74a9e72734b0e066e25ece3b3b665f85c7a1d", @ANYBLOB="f4beab0b101fee36191b2faf9b92c881b72511e5e5b24257a1a61a27200bbc937cf85960c695049a72a8b0a6062de89a99de4565220046f4eafb4cca896d8c6a0c67e00c28782b33ffe1b8dbfe094b527dcc896ee325f4d66f44172df0754019e23b337ff1135be97a80928c132f06c335dfa44979e55e37cfa2ed64d6108e8b5765162d971391282b683f4dbda4424abc0c0ae93c84d06abde31937d666295ae8a47dc2fbdc38fe7d2d1a970e2293b4cc9397e084068edb289d2e343627f5c23447d7f53587320ca59c50d653d55bb5b49bdd8f44e7deaa19acf14f1df2e78790ba9dde10db2d97622dde8023b51c84189391ccf3ebb26d"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x24008090) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1d0, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@mac=@random="c9a9c4ac4b8d", {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local, {[0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0d1354862e47", @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xa, @mcast1, 0xffffffff}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r2 = socket(0xb, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r3, 0x1000000, 0x2}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r4 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000240)=[0x7f, 0xfffa, 0x1]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x20000, 0x0) lseek(r5, 0x5, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x88) syz_usb_connect(0x5, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f", @ANYRES16=r6, @ANYBLOB="840aba8c80ff89ee111e3f6ca49e85d78da907be30d1fdf474def3a2d98148092cee4366fc8bbd8b4cc395688b008c9d2afe5799a37124e5b8d7eea9ef5d787201deae7bd475c09ba5c39f9104648d63d7f0fab07fea241054fc5bf7cafb4e404f6a3125ecbeee37e3e57ae475a461dbde94caec3f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000340), 0xfbfffffffffffff6, 0x18000) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 39 (id=1021): clock_gettime(0x2bc7f68ba1627db2, 0x0) fsopen(&(0x7f0000000040)='ext3\x00', 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x9, 0x800) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3]) kernel console output (not intermixed with test programs): e strings: Mfr=1, Product=2, SerialNumber=3 [ 267.736029][ T5929] usb 1-1: Product: syz [ 267.748417][ T5929] usb 1-1: Manufacturer: syz [ 267.758565][ T5929] usb 1-1: SerialNumber: syz [ 267.782834][ T5942] usbhid 2-1:1.0: can't add hid device: -71 [ 267.802580][ T5942] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 267.847290][ T5942] usb 2-1: USB disconnect, device number 15 [ 267.993442][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.038679][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.105697][ T5929] cdc_ncm 1-1:1.0: skipping garbage [ 268.109628][ T7417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.111181][ T5821] Bluetooth: hci5: command 0x0406 tx timeout [ 268.120676][ T5929] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 268.147955][ T5929] cdc_ncm 1-1:1.0: bind() failure [ 268.185847][ T5929] usb 1-1: USB disconnect, device number 10 [ 268.257880][ T7417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.283222][ T7417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.600405][ T7417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.834869][ T7589] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[7589] [ 270.210979][ T5942] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 270.241491][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.289107][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.328294][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.335566][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.370181][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 270.393416][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.538808][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.576198][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.583472][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.630950][ T5942] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 270.666909][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.708000][ T5942] usb 1-1: Product: syz [ 270.719317][ T7417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.740161][ T5942] usb 1-1: Manufacturer: syz [ 270.744827][ T5942] usb 1-1: SerialNumber: syz [ 271.143423][ T7596] sd 0:0:1:0: device reset [ 271.163667][ T5942] usb 1-1: config 0 descriptor?? [ 271.456002][ T5942] qmi_wwan 1-1:0.0: bogus CDC Union: master=31, slave=0 [ 271.525005][ T5942] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 271.534761][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.612019][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.865062][ T47] usb 1-1: USB disconnect, device number 11 [ 272.767711][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.850184][ T5929] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 273.949587][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.369'. [ 274.240252][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 274.249112][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.260229][ T5929] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 274.419084][ T7649] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[7649] [ 274.555939][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 274.587676][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.963633][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.983435][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.002047][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.112961][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.150261][ T9] usb 3-1: Product: syz [ 275.175046][ T9] usb 3-1: Manufacturer: syz [ 275.179721][ T9] usb 3-1: SerialNumber: syz [ 275.191682][ T5929] usb 2-1: config 0 descriptor?? [ 275.383982][ T7659] FAULT_INJECTION: forcing a failure. [ 275.383982][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 275.452629][ T7659] CPU: 1 UID: 0 PID: 7659 Comm: syz.5.374 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 275.452661][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.452685][ T7659] Call Trace: [ 275.452699][ T7659] [ 275.452708][ T7659] dump_stack_lvl+0x189/0x250 [ 275.452751][ T7659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.452781][ T7659] ? __pfx__printk+0x10/0x10 [ 275.452818][ T7659] ? __pfx___might_resched+0x10/0x10 [ 275.452854][ T7659] ? fs_reclaim_acquire+0x7d/0x100 [ 275.452885][ T7659] should_fail_ex+0x414/0x560 [ 275.452914][ T7659] should_failslab+0xa8/0x100 [ 275.452938][ T7659] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 275.452974][ T7659] ? __alloc_skb+0x112/0x2d0 [ 275.453005][ T7659] __alloc_skb+0x112/0x2d0 [ 275.453036][ T7659] alloc_skb_with_frags+0xca/0x890 [ 275.453064][ T7659] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 275.453102][ T7659] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 275.453137][ T7659] sock_alloc_send_pskb+0x857/0x990 [ 275.453190][ T7659] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 275.453236][ T7659] ? __lock_acquire+0xaac/0xd20 [ 275.453277][ T7659] __ip6_append_data+0x2a83/0x3dc0 [ 275.453327][ T7659] ? __pfx_udplite_getfrag+0x10/0x10 [ 275.453374][ T7659] ? __pfx___ip6_append_data+0x10/0x10 [ 275.453402][ T7659] ? ip6_setup_cork+0xacd/0x11c0 [ 275.453435][ T7659] ip6_make_skb+0x2ce/0x410 [ 275.453464][ T7659] ? __pfx_udplite_getfrag+0x10/0x10 [ 275.453493][ T7659] ? __pfx_ip6_make_skb+0x10/0x10 [ 275.453535][ T7659] ? ip6_dst_hoplimit+0x96/0x350 [ 275.453566][ T7659] ? ip6_dst_hoplimit+0x96/0x350 [ 275.453603][ T7659] udpv6_sendmsg+0x1c06/0x2700 [ 275.453630][ T7659] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.453667][ T7659] ? __pfx_udplite_getfrag+0x10/0x10 [ 275.453695][ T7659] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 275.453716][ T7659] ? udp_lib_get_port+0x15cc/0x1a60 [ 275.453776][ T7659] ? __local_bh_enable_ip+0x12d/0x1c0 [ 275.453810][ T7659] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 275.453851][ T7659] ? inet_send_prepare+0x1b9/0x270 [ 275.453885][ T7659] ? inet_send_prepare+0x1b9/0x270 [ 275.453921][ T7659] ? inet6_sendmsg+0xe4/0x120 [ 275.453956][ T7659] __sock_sendmsg+0xe5/0x270 [ 275.453982][ T7659] __sys_sendto+0x3bd/0x520 [ 275.454012][ T7659] ? __pfx___sys_sendto+0x10/0x10 [ 275.454035][ T7659] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 275.454077][ T7659] ? __fget_files+0x3a0/0x420 [ 275.454109][ T7659] ? ksys_write+0x1f0/0x250 [ 275.454139][ T7659] ? rcu_is_watching+0x15/0xb0 [ 275.454181][ T7659] __x64_sys_sendto+0xde/0x100 [ 275.454211][ T7659] do_syscall_64+0xf6/0x210 [ 275.454249][ T7659] ? clear_bhb_loop+0x60/0xb0 [ 275.454277][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.454298][ T7659] RIP: 0033:0x7fa55838e969 [ 275.454317][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.454336][ T7659] RSP: 002b:00007fa559140038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.454359][ T7659] RAX: ffffffffffffffda RBX: 00007fa5585b6080 RCX: 00007fa55838e969 [ 275.454374][ T7659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 275.454387][ T7659] RBP: 00007fa559140090 R08: 0000200000000100 R09: 000000000000001c [ 275.454402][ T7659] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 275.454415][ T7659] R13: 0000000000000000 R14: 00007fa5585b6080 R15: 00007ffeceb086d8 [ 275.454447][ T7659] [ 277.097766][ T9] usb 3-1: 0:2 : does not exist [ 277.107769][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 277.166290][ T5929] belkin 0003:050D:3201.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.1-1/input0 [ 277.225927][ T9] usb 3-1: USB disconnect, device number 6 [ 277.238676][ T5929] usb 2-1: USB disconnect, device number 16 [ 277.318908][ T7417] veth0_vlan: entered promiscuous mode [ 277.394228][ T7417] veth1_vlan: entered promiscuous mode [ 277.454724][ T7671] sd 0:0:1:0: device reset [ 277.729311][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.675951][ T7665] fido_id[7665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 278.757267][ T7417] veth0_macvtap: entered promiscuous mode [ 278.815940][ T7417] veth1_macvtap: entered promiscuous mode [ 278.923241][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.978567][ T7683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.986997][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.013235][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.028756][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.211242][ T7673] overlayfs: overlapping lowerdir path [ 279.271760][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.282979][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.293788][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.304838][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.324828][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.592276][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.751884][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 279.962135][ T5887] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 279.980253][ T5887] usb 1-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 280.000302][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.019758][ T5887] usb 1-1: config 1 has no interface number 0 [ 280.040265][ T5887] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 280.060207][ T5887] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 280.090727][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.122075][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.137290][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.138770][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.147345][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.147402][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.147517][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.207660][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.228014][ T5887] usb 1-1: Product: syz [ 280.240425][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.247704][ T5887] usb 1-1: Manufacturer: syz [ 280.252740][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.266645][ T5887] usb 1-1: SerialNumber: syz [ 280.351728][ T7417] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.360958][ T7669] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 280.397820][ T7417] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.432940][ T7417] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.450171][ T7417] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.471041][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 280.500301][ T5887] usb 1-1: can't set config #1, error -71 [ 280.548787][ T5887] usb 1-1: USB disconnect, device number 12 [ 281.595626][ T5129] Bluetooth: hci1: command 0x0401 tx timeout [ 281.635478][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 282.601720][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 282.612595][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 282.623691][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 282.634004][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 282.754475][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.771509][ T9] usb 2-1: config 0 descriptor?? [ 282.996005][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 283.182697][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 283.478556][ T9] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 283.538174][ T9] hdpvr 2-1:0.0: device init failed [ 283.577285][ T9] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 283.891885][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 284.175521][ T9] usb 2-1: USB disconnect, device number 17 [ 285.760233][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.768095][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.443344][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.491579][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.470741][ T7742] sd 0:0:1:0: device reset [ 290.355172][ T7759] FAULT_INJECTION: forcing a failure. [ 290.355172][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 290.381183][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.1.391 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 290.381214][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.381227][ T7759] Call Trace: [ 290.381236][ T7759] [ 290.381244][ T7759] dump_stack_lvl+0x189/0x250 [ 290.381282][ T7759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.381311][ T7759] ? __pfx__printk+0x10/0x10 [ 290.381351][ T7759] ? __pfx___might_resched+0x10/0x10 [ 290.381384][ T7759] ? fs_reclaim_acquire+0x7d/0x100 [ 290.381415][ T7759] should_fail_ex+0x414/0x560 [ 290.381444][ T7759] should_failslab+0xa8/0x100 [ 290.381467][ T7759] __kmalloc_noprof+0xcb/0x4f0 [ 290.381500][ T7759] ? iter_file_splice_write+0x1cb/0x1000 [ 290.381538][ T7759] iter_file_splice_write+0x1cb/0x1000 [ 290.381601][ T7759] ? __pfx_iter_file_splice_write+0x10/0x10 [ 290.381639][ T7759] ? rcu_read_lock_any_held+0xb3/0x120 [ 290.381675][ T7759] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 290.381722][ T7759] ? __pfx_iter_file_splice_write+0x10/0x10 [ 290.381755][ T7759] do_splice+0xc76/0x1660 [ 290.381817][ T7759] ? __pfx_do_splice+0x10/0x10 [ 290.381863][ T7759] __se_sys_splice+0x2e1/0x460 [ 290.381905][ T7759] ? __pfx___se_sys_splice+0x10/0x10 [ 290.381944][ T7759] ? __x64_sys_splice+0x21/0xf0 [ 290.381981][ T7759] do_syscall_64+0xf6/0x210 [ 290.382012][ T7759] ? clear_bhb_loop+0x60/0xb0 [ 290.382039][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.382060][ T7759] RIP: 0033:0x7f390f78e969 [ 290.382079][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.382097][ T7759] RSP: 002b:00007f39106bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 290.382127][ T7759] RAX: ffffffffffffffda RBX: 00007f390f9b6080 RCX: 00007f390f78e969 [ 290.382143][ T7759] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000007 [ 290.382156][ T7759] RBP: 00007f39106bc090 R08: 00000000088000cc R09: 0000000000000000 [ 290.382170][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.382182][ T7759] R13: 0000000000000000 R14: 00007f390f9b6080 R15: 00007ffd96037938 [ 290.382216][ T7759] [ 293.929183][ T7797] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[7797] [ 294.309289][ T7778] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 294.331778][ T7780] overlayfs: overlapping lowerdir path [ 294.780642][ T5874] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 295.439114][ T5874] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 296.191117][ T5874] usb 7-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 296.210707][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 296.221016][ T5874] usb 7-1: config 1 has no interface number 0 [ 296.227495][ T5874] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 296.239046][ T5874] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 296.360243][ T5129] Bluetooth: hci1: command 0x0401 tx timeout [ 296.388626][ T5874] usb 7-1: string descriptor 0 read error: -71 [ 296.470936][ T5874] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.512537][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.570321][ T5874] usb 7-1: can't set config #1, error -71 [ 296.627729][ T5874] usb 7-1: USB disconnect, device number 2 [ 297.726534][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.735442][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.743825][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.768276][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.776917][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.080128][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 298.486106][ T5821] Bluetooth: hci1: command 0x0401 tx timeout [ 299.450233][ T5987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.611492][ T7862] netlink: 88 bytes leftover after parsing attributes in process `syz.1.411'. [ 299.876722][ T5821] Bluetooth: hci3: command tx timeout [ 299.899428][ T7829] lo speed is unknown, defaulting to 1000 [ 300.109548][ T5987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.298761][ T5987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.704436][ T5987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.182417][ T7886] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[7886] [ 301.312858][ T5987] bridge_slave_1: left allmulticast mode [ 301.318577][ T5987] bridge_slave_1: left promiscuous mode [ 301.326236][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.349751][ T5987] bridge_slave_0: left allmulticast mode [ 301.379745][ T5987] bridge_slave_0: left promiscuous mode [ 301.479353][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.987575][ T5821] Bluetooth: hci3: command tx timeout [ 302.431081][ T7899] input: syz0 as /devices/virtual/input/input11 [ 302.736991][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.748870][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.759924][ T5987] bond0 (unregistering): Released all slaves [ 302.786031][ T7829] chnl_net:caif_netlink_parms(): no params data found [ 303.651213][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.658900][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.668551][ T7829] bridge_slave_0: entered allmulticast mode [ 303.678981][ T7829] bridge_slave_0: entered promiscuous mode [ 303.831989][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.856927][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.865660][ T7829] bridge_slave_1: entered allmulticast mode [ 303.906991][ T7829] bridge_slave_1: entered promiscuous mode [ 304.083688][ T5821] Bluetooth: hci3: command tx timeout [ 304.568795][ T5987] hsr_slave_0: left promiscuous mode [ 304.730948][ T5987] hsr_slave_1: left promiscuous mode [ 304.737173][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.780298][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.797608][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.809332][ T7928] FAULT_INJECTION: forcing a failure. [ 304.809332][ T7928] name failslab, interval 1, probability 0, space 0, times 0 [ 304.963128][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.0.424 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 304.963161][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.963176][ T7928] Call Trace: [ 304.963184][ T7928] [ 304.963194][ T7928] dump_stack_lvl+0x189/0x250 [ 304.963236][ T7928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.963266][ T7928] ? __pfx__printk+0x10/0x10 [ 304.963307][ T7928] ? __pfx___might_resched+0x10/0x10 [ 304.963340][ T7928] ? fs_reclaim_acquire+0x7d/0x100 [ 304.963370][ T7928] should_fail_ex+0x414/0x560 [ 304.963399][ T7928] should_failslab+0xa8/0x100 [ 304.963426][ T7928] __kmalloc_noprof+0xcb/0x4f0 [ 304.963458][ T7928] ? kfree+0x4d/0x440 [ 304.963485][ T7928] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 304.963529][ T7928] tomoyo_realpath_from_path+0xe3/0x5d0 [ 304.963562][ T7928] ? tomoyo_domain+0xda/0x130 [ 304.963599][ T7928] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 304.963624][ T7928] tomoyo_path_number_perm+0x1e8/0x5a0 [ 304.963652][ T7928] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 304.963697][ T7928] ? __lock_acquire+0xaac/0xd20 [ 304.963748][ T7928] ? __fget_files+0x2a/0x420 [ 304.963775][ T7928] ? __fget_files+0x3a0/0x420 [ 304.963794][ T7928] ? __fget_files+0x2a/0x420 [ 304.963820][ T7928] security_file_ioctl+0xcb/0x2d0 [ 304.963849][ T7928] __se_sys_ioctl+0x47/0x170 [ 304.963882][ T7928] do_syscall_64+0xf6/0x210 [ 304.963912][ T7928] ? clear_bhb_loop+0x60/0xb0 [ 304.963939][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.963961][ T7928] RIP: 0033:0x7f999bf8e969 [ 304.963981][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.964001][ T7928] RSP: 002b:00007f999cd92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.964024][ T7928] RAX: ffffffffffffffda RBX: 00007f999c1b5fa0 RCX: 00007f999bf8e969 [ 304.964041][ T7928] RDX: 0000200000000280 RSI: 00000000c048aeca RDI: 000000000000000a [ 304.964056][ T7928] RBP: 00007f999cd92090 R08: 0000000000000000 R09: 0000000000000000 [ 304.964070][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.964083][ T7928] R13: 0000000000000000 R14: 00007f999c1b5fa0 R15: 00007ffe9f9bacf8 [ 304.964117][ T7928] [ 304.964242][ T7928] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.200804][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.312640][ T5987] veth1_macvtap: left promiscuous mode [ 305.318377][ T5987] veth0_macvtap: left promiscuous mode [ 305.357719][ T5987] veth1_vlan: left promiscuous mode [ 305.369090][ T5987] veth0_vlan: left promiscuous mode [ 305.965701][ T7943] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 306.191289][ T5821] Bluetooth: hci3: command tx timeout [ 307.500012][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 307.559428][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 307.577001][ T7954] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7954] [ 308.394744][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.679211][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.795393][ T7958] hub 8-0:1.0: USB hub found [ 308.803572][ T7958] hub 8-0:1.0: 1 port detected [ 309.672277][ T7967] input: syz0 as /devices/virtual/input/input12 [ 309.931566][ T7971] FAULT_INJECTION: forcing a failure. [ 309.931566][ T7971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.945039][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.2.434 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 309.945071][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.945086][ T7971] Call Trace: [ 309.945096][ T7971] [ 309.945106][ T7971] dump_stack_lvl+0x189/0x250 [ 309.945143][ T7971] ? __lock_acquire+0xaac/0xd20 [ 309.945180][ T7971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.945221][ T7971] ? __pfx__printk+0x10/0x10 [ 309.945259][ T7971] ? __might_fault+0xb0/0x130 [ 309.945311][ T7971] should_fail_ex+0x414/0x560 [ 309.945342][ T7971] _copy_from_user+0x2d/0xb0 [ 309.945378][ T7971] ___sys_sendmsg+0x158/0x2a0 [ 309.945415][ T7971] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.945493][ T7971] ? __fget_files+0x2a/0x420 [ 309.945515][ T7971] ? __fget_files+0x3a0/0x420 [ 309.945551][ T7971] __sys_sendmmsg+0x227/0x430 [ 309.945592][ T7971] ? __pfx___sys_sendmmsg+0x10/0x10 [ 309.945661][ T7971] ? ksys_write+0x1f0/0x250 [ 309.945694][ T7971] ? rcu_is_watching+0x15/0xb0 [ 309.945742][ T7971] __x64_sys_sendmmsg+0xa0/0xc0 [ 309.945778][ T7971] do_syscall_64+0xf6/0x210 [ 309.945812][ T7971] ? clear_bhb_loop+0x60/0xb0 [ 309.945842][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.945866][ T7971] RIP: 0033:0x7f2d4f78e969 [ 309.945887][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.945917][ T7971] RSP: 002b:00007f2d5066b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 309.945940][ T7971] RAX: ffffffffffffffda RBX: 00007f2d4f9b6160 RCX: 00007f2d4f78e969 [ 309.945957][ T7971] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000006 [ 309.945972][ T7971] RBP: 00007f2d5066b090 R08: 0000000000000000 R09: 0000000000000000 [ 309.945986][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.945999][ T7971] R13: 0000000000000000 R14: 00007f2d4f9b6160 R15: 00007ffcc413fbd8 [ 309.946033][ T7971] [ 310.285377][ T47] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 310.480828][ T7829] team0: Port device team_slave_0 added [ 310.551738][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 310.617760][ T7829] team0: Port device team_slave_1 added [ 310.693274][ T47] usb 1-1: config 0 has an invalid interface number: 92 but max is 0 [ 310.703375][ T47] usb 1-1: config 0 has no interface number 0 [ 310.709587][ T47] usb 1-1: config 0 interface 92 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 310.730403][ T47] usb 1-1: config 0 interface 92 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 310.745739][ T47] usb 1-1: config 0 interface 92 has no altsetting 0 [ 310.773430][ T47] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a8.eb [ 310.819683][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.847288][ T47] usb 1-1: Product: syz [ 310.854480][ T47] usb 1-1: Manufacturer: syz [ 310.859216][ T47] usb 1-1: SerialNumber: syz [ 311.052901][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.059931][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.067683][ T47] usb 1-1: config 0 descriptor?? [ 311.704158][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.840661][ T7962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.848080][ T7962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.971262][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.992470][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.018816][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.074724][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.083473][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.059155][ T7962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.134689][ T7962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.453614][ T7962] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.462865][ T7962] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.474721][ T7962] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.484449][ T7962] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.549748][ T8001] netlink: 'syz.6.440': attribute type 10 has an invalid length. [ 314.955438][ T7962] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.964792][ T7962] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.974718][ T7962] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.983713][ T7962] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.099818][ T7829] hsr_slave_0: entered promiscuous mode [ 315.108070][ T7829] hsr_slave_1: entered promiscuous mode [ 315.114934][ T7829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.123718][ T7829] Cannot create hsr debugfs directory [ 315.126199][ T7962] syz.0.431 (7962) used greatest stack depth: 20408 bytes left [ 315.139054][ T47] redrat3 1-1:0.92: Couldn't find all endpoints [ 315.177298][ T47] usb 1-1: USB disconnect, device number 13 [ 315.276262][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.284966][ T8001] bond0: (slave team0): Enslaving as an active interface with an up link [ 316.100857][ T8012] input: syz1 as /devices/virtual/input/input13 [ 316.493156][ T8016] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[8016] [ 316.912809][ T7829] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 316.986421][ T7829] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.160788][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.167277][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.244220][ T7829] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.204492][ T7829] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 318.869252][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.965028][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.041209][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.048388][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.107321][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.114608][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.427398][ T8056] 9pnet_fd: Insufficient options for proto=fd [ 319.575600][ T8059] vivid-003: disconnect [ 320.091442][ T8057] vivid-003: reconnect [ 321.293106][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.017247][ T8107] FAULT_INJECTION: forcing a failure. [ 323.017247][ T8107] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 323.100330][ T8107] CPU: 0 UID: 0 PID: 8107 Comm: syz.2.459 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 323.100364][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.100378][ T8107] Call Trace: [ 323.100387][ T8107] [ 323.100396][ T8107] dump_stack_lvl+0x189/0x250 [ 323.100437][ T8107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.100468][ T8107] ? __pfx__printk+0x10/0x10 [ 323.100503][ T8107] ? fs_reclaim_acquire+0x7d/0x100 [ 323.100539][ T8107] should_fail_ex+0x414/0x560 [ 323.100568][ T8107] prepare_alloc_pages+0x213/0x610 [ 323.100602][ T8107] __alloc_frozen_pages_noprof+0x123/0x370 [ 323.100634][ T8107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.100670][ T8107] ? policy_nodemask+0x27c/0x720 [ 323.100711][ T8107] alloc_pages_mpol+0x232/0x4a0 [ 323.100752][ T8107] alloc_pages_noprof+0xa9/0x190 [ 323.100776][ T8107] get_free_pages_noprof+0xc/0x30 [ 323.100800][ T8107] environ_read+0xbc/0x3e0 [ 323.100837][ T8107] ? __pfx_environ_read+0x10/0x10 [ 323.100870][ T8107] vfs_read+0x200/0x980 [ 323.100907][ T8107] ? __pfx___mutex_lock+0x10/0x10 [ 323.100936][ T8107] ? __pfx_vfs_read+0x10/0x10 [ 323.100968][ T8107] ? __fget_files+0x2a/0x420 [ 323.100994][ T8107] ? __fget_files+0x3a0/0x420 [ 323.101012][ T8107] ? __fget_files+0x2a/0x420 [ 323.101052][ T8107] ksys_read+0x145/0x250 [ 323.101080][ T8107] ? rcu_is_watching+0x15/0xb0 [ 323.101115][ T8107] ? __pfx_ksys_read+0x10/0x10 [ 323.101149][ T8107] ? do_syscall_64+0xba/0x210 [ 323.101182][ T8107] do_syscall_64+0xf6/0x210 [ 323.101211][ T8107] ? clear_bhb_loop+0x60/0xb0 [ 323.101238][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.101259][ T8107] RIP: 0033:0x7f2d4f78e969 [ 323.101280][ T8107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.101299][ T8107] RSP: 002b:00007f2d506ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.101322][ T8107] RAX: ffffffffffffffda RBX: 00007f2d4f9b5fa0 RCX: 00007f2d4f78e969 [ 323.101338][ T8107] RDX: 0000000000002020 RSI: 0000200000005b00 RDI: 0000000000000003 [ 323.101356][ T8107] RBP: 00007f2d506ad090 R08: 0000000000000000 R09: 0000000000000000 [ 323.101369][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.101382][ T8107] R13: 0000000000000000 R14: 00007f2d4f9b5fa0 R15: 00007ffcc413fbd8 [ 323.101417][ T8107] [ 323.711582][ T7829] veth0_vlan: entered promiscuous mode [ 323.759986][ T7829] veth1_vlan: entered promiscuous mode [ 323.887015][ T7829] veth0_macvtap: entered promiscuous mode [ 324.102935][ T7829] veth1_macvtap: entered promiscuous mode [ 324.211622][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.253478][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.266132][ T8115] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[8115] [ 324.330533][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.366910][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.410183][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.456970][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.505860][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.589964][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.628213][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.657809][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.686858][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.760186][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.806239][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.867181][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.955076][ T7829] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.040379][ T7829] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.137087][ T7829] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.855788][ T7829] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.833048][ T7051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.933824][ T7051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.343626][ T5987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.393622][ T5987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.764674][ T8157] sd 0:0:1:0: device reset [ 329.607254][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 329.744234][ T8165] bridge0: entered promiscuous mode [ 329.758451][ T8165] bridge0: port 3(macvlan2) entered blocking state [ 329.766099][ T8165] bridge0: port 3(macvlan2) entered disabled state [ 329.774110][ T8165] macvlan2: entered allmulticast mode [ 329.779607][ T8165] bridge0: entered allmulticast mode [ 329.865116][ T8165] macvlan2: left allmulticast mode [ 329.871387][ T8165] bridge0: left allmulticast mode [ 329.922890][ T8165] bridge0: left promiscuous mode [ 330.189989][ T8170] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 330.931367][ T8170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 331.061402][ T5872] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 331.504453][ T5872] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 331.621460][ T5872] usb 2-1: config 0 has no interface number 0 [ 331.716460][ T5872] usb 2-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 331.920899][ T5872] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 332.108708][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.268333][ T5872] usb 2-1: Product: syz [ 332.275254][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 332.353337][ T5872] usb 2-1: Manufacturer: syz [ 332.420941][ T5872] usb 2-1: SerialNumber: syz [ 332.469865][ T8162] team0: Port device team_slave_1 removed [ 332.722622][ T5872] usb 2-1: config 0 descriptor?? [ 332.748729][ T24] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 332.836609][ T8171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 332.924050][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.012096][ T24] usb 8-1: Product: syz [ 333.052578][ T24] usb 8-1: Manufacturer: syz [ 333.083124][ T24] usb 8-1: SerialNumber: syz [ 333.128778][ T24] usb 8-1: config 0 descriptor?? [ 333.136474][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 333.179671][ T24] usb 8-1: can't set config #0, error -32 [ 333.250257][ T24] usb 8-1: USB disconnect, device number 2 [ 333.653882][ T47] usb 2-1: USB disconnect, device number 18 [ 333.734257][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.475'. [ 333.735564][ T8197] FAULT_INJECTION: forcing a failure. [ 333.735564][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 333.824283][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.2.478 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 333.824316][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.824330][ T8197] Call Trace: [ 333.824339][ T8197] [ 333.824348][ T8197] dump_stack_lvl+0x189/0x250 [ 333.824388][ T8197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.824419][ T8197] ? __pfx__printk+0x10/0x10 [ 333.824460][ T8197] ? __pfx___might_resched+0x10/0x10 [ 333.824493][ T8197] ? fs_reclaim_acquire+0x7d/0x100 [ 333.824523][ T8197] should_fail_ex+0x414/0x560 [ 333.824552][ T8197] should_failslab+0xa8/0x100 [ 333.824575][ T8197] __kmalloc_noprof+0xcb/0x4f0 [ 333.824607][ T8197] ? kfree+0x4d/0x440 [ 333.824634][ T8197] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.824697][ T8197] tomoyo_realpath_from_path+0xe3/0x5d0 [ 333.824740][ T8197] ? tomoyo_domain+0xda/0x130 [ 333.824777][ T8197] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 333.824802][ T8197] tomoyo_path_number_perm+0x1e8/0x5a0 [ 333.824830][ T8197] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 333.824875][ T8197] ? __lock_acquire+0xaac/0xd20 [ 333.824930][ T8197] ? __fget_files+0x2a/0x420 [ 333.824956][ T8197] ? __fget_files+0x3a0/0x420 [ 333.824975][ T8197] ? __fget_files+0x2a/0x420 [ 333.825001][ T8197] security_file_ioctl+0xcb/0x2d0 [ 333.825031][ T8197] __se_sys_ioctl+0x47/0x170 [ 333.825063][ T8197] do_syscall_64+0xf6/0x210 [ 333.825094][ T8197] ? clear_bhb_loop+0x60/0xb0 [ 333.825120][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.825142][ T8197] RIP: 0033:0x7f2d4f78e969 [ 333.825162][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.825181][ T8197] RSP: 002b:00007f2d506ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.825204][ T8197] RAX: ffffffffffffffda RBX: 00007f2d4f9b5fa0 RCX: 00007f2d4f78e969 [ 333.825220][ T8197] RDX: 0000000000000000 RSI: 000000004008af00 RDI: 0000000000000003 [ 333.825234][ T8197] RBP: 00007f2d506ad090 R08: 0000000000000000 R09: 0000000000000000 [ 333.825247][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.825260][ T8197] R13: 0000000000000000 R14: 00007f2d4f9b5fa0 R15: 00007ffcc413fbd8 [ 333.825294][ T8197] [ 333.825326][ T8197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 334.071638][ T8192] openvswitch: netlink: Flow key attr not present in new flow. [ 335.180152][ T5874] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 336.023048][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 336.066263][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.146381][ T8220] sd 0:0:1:0: device reset [ 336.341008][ T5874] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 336.360236][ T5874] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 336.380095][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.400362][ T5874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.419022][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.434521][ T5874] usb 1-1: Product: syz [ 336.438854][ T5874] usb 1-1: Manufacturer: syz [ 336.465728][ T5874] usb 1-1: SerialNumber: syz [ 337.023014][ T8231] netlink: 'syz.7.483': attribute type 10 has an invalid length. [ 337.146027][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.483'. [ 337.550281][ T5129] Bluetooth: hci0: command 0x0401 tx timeout [ 337.566989][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.577112][ T8231] team0: Port device bond0 added [ 337.670629][ T5821] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 338.120751][ T5874] usb 1-1: 0:2 : does not exist [ 338.154551][ T5874] usb 1-1: USB disconnect, device number 14 [ 338.340391][ T7822] udevd[7822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.747118][ T8251] ip6tnl1: entered promiscuous mode [ 338.771877][ T8251] ip6tnl1: entered allmulticast mode [ 339.236945][ T8258] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 340.406353][ T8262] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 340.415375][ T8262] PKCS7: Only support pkcs7_signedData type [ 342.511809][ T8289] fuse: Bad value for 'fd' [ 343.922425][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 344.615985][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 345.514718][ T30] audit: type=1326 audit(1747340651.612:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.7.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed198e969 code=0x7fc00000 [ 346.670184][ T30] audit: type=1326 audit(1747340652.712:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.7.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ed192ab39 code=0x7fc00000 [ 350.550187][ T30] audit: type=1326 audit(1747340652.712:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.7.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5ed192abff code=0x7fc00000 [ 350.647857][ T30] audit: type=1326 audit(1747340652.712:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8325 comm="syz.7.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ed198e969 code=0x7fc00000 [ 352.013867][ T8354] fuse: Bad value for 'fd' [ 352.430228][ T5929] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 352.676825][ T5929] usb 7-1: config 6 has an invalid interface number: 211 but max is 0 [ 352.700674][ T5929] usb 7-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 352.721663][ T8363] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 352.721690][ T5929] usb 7-1: config 6 has no interface number 0 [ 352.721738][ T5929] usb 7-1: config 6 interface 211 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 352.779612][ T5929] usb 7-1: config 6 interface 211 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 352.890250][ T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 352.904734][ T5929] usb 7-1: config 6 interface 211 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 352.916928][ T5929] usb 7-1: config 6 interface 211 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 352.928249][ T5929] usb 7-1: config 6 interface 211 has no altsetting 0 [ 352.938038][ T5929] usb 7-1: New USB device found, idVendor=1d19, idProduct=1101, bcdDevice=89.6c [ 352.958785][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.969427][ T5929] usb 7-1: Product: syz [ 353.012695][ T5929] usb 7-1: Manufacturer: ᐁ [ 353.032625][ T5929] usb 7-1: SerialNumber: syz [ 353.074009][ T24] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 353.136199][ T8358] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 353.146634][ T24] usb 1-1: config 0 has no interface number 0 [ 353.232434][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 353.272769][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.341979][ T24] usb 1-1: Product: syz [ 353.397223][ T24] usb 1-1: Manufacturer: syz [ 353.476764][ T24] usb 1-1: SerialNumber: syz [ 353.582204][ T24] usb 1-1: config 0 descriptor?? [ 353.587902][ T5929] usb 7-1: USB disconnect, device number 3 [ 353.594019][ T5872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 353.774006][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 353.794852][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.876418][ T24] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 353.884719][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.916831][ T5872] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 353.934059][ T24] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 353.970143][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.980175][ T24] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 354.274779][ T24] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 354.296473][ T8365] loop6: detected capacity change from 0 to 63 [ 354.304653][ T5872] usb 3-1: config 0 descriptor?? [ 354.318585][ T24] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 354.357325][ T24] usb 1-1: USB disconnect, device number 15 [ 354.933959][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 354.951563][ T24] keyspan 1-1:0.133: device disconnected [ 355.027060][ T6037] buffer_io_error: 7 callbacks suppressed [ 355.027104][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.138998][ T8392] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 355.156018][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.195437][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.215333][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.596585][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.906481][ T5872] saitek 0003:06A3:0CCB.0006: item fetching failed at offset 0/2 [ 355.946652][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 355.964132][ T5872] saitek 0003:06A3:0CCB.0006: parse failed [ 356.003727][ T5872] saitek 0003:06A3:0CCB.0006: probe with driver saitek failed with error -22 [ 356.013573][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 356.083264][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 356.156918][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 356.183054][ T5872] usb 3-1: USB disconnect, device number 7 [ 356.376159][ T6037] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.862317][ T8420] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 358.172269][ T8426] netlink: 116 bytes leftover after parsing attributes in process `syz.6.533'. [ 366.298734][ T8483] IPv6: addrconf: prefix option has invalid lifetime [ 367.538032][ T8496] pimreg: entered allmulticast mode [ 372.896335][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 374.171320][ T8566] bridge0: entered allmulticast mode [ 374.217487][ T8566] pim6reg: entered allmulticast mode [ 374.350634][ T5872] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 374.426901][ T8566] netlink: 136 bytes leftover after parsing attributes in process `syz.7.559'. [ 374.492364][ T8566] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 374.682287][ T5872] usb 1-1: config 0 has no interfaces? [ 374.692721][ T5872] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 374.838894][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.156214][ T5872] usb 1-1: config 0 descriptor?? [ 375.327649][ T8579] openvswitch: netlink: Unknown key attributes 2 [ 375.539990][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.465186][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.309961][ T47] usb 1-1: USB disconnect, device number 16 [ 378.741700][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.753342][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.299149][ T8635] bridge0: entered allmulticast mode [ 380.437359][ T8635] pim6reg: entered allmulticast mode [ 380.581787][ T8636] netlink: 136 bytes leftover after parsing attributes in process `syz.6.577'. [ 380.704464][ T8636] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 380.915513][ T8642] bridge0: entered allmulticast mode [ 381.130335][ T8648] pim6reg: entered allmulticast mode [ 381.175007][ T8650] netlink: 136 bytes leftover after parsing attributes in process `syz.0.578'. [ 381.499861][ T8650] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 383.387179][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.7.582'. [ 383.460251][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.7.582'. [ 384.220566][ T8662] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 384.457073][ T8662] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 385.862322][ T8682] input: syz0 as /devices/virtual/input/input14 [ 386.281818][ T8695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.840155][ T8702] netlink: 'syz.6.591': attribute type 10 has an invalid length. [ 387.958639][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.013180][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.366003][ T5887] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 389.262211][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.309732][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 389.346925][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.366179][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.573009][ T8710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 389.769368][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.085778][ T5129] Bluetooth: hci1: command 0x0401 tx timeout [ 391.345652][ T5887] usb 2-1: USB disconnect, device number 19 [ 393.415680][ T8759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.446686][ T8759] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 393.505274][ T8759] PKCS7: Only support pkcs7_signedData type [ 393.614229][ T30] audit: type=1400 audit(1747340699.682:17): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=8767 comm="syz.1.607" path="/proc/523/task/524/attr/current" dev="proc" ino=18959 [ 393.670608][ T30] audit: type=1400 audit(1747340699.682:18): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="w" object="_" requested=w pid=8767 comm="syz.1.607" name="137" dev="tmpfs" ino=737 [ 394.442050][ T8775] netlink: 136 bytes leftover after parsing attributes in process `syz.6.609'. [ 394.530160][ T8775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 396.152310][ T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 397.210460][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 397.242612][ T47] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 397.260433][ T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.320053][ T47] usb 7-1: config 0 has no interface number 0 [ 397.350783][ T47] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 397.403896][ T47] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 397.453119][ T47] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 397.512476][ T47] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 397.550856][ T47] usb 7-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 397.602950][ T47] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 397.674302][ T47] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 397.723572][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.731969][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 397.772141][ T47] usb 7-1: config 0 descriptor?? [ 397.777966][ T8793] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 397.814236][ T47] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.900665][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 397.934467][ T24] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 397.990822][ T24] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 397.999606][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 398.086329][ T24] usb 8-1: config 1 has no interface number 0 [ 398.131693][ T24] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.170754][ T24] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 398.203305][ T47] snd-usb-audio 7-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 399.293192][ T24] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 399.309053][ T47] usb 7-1: USB disconnect, device number 4 [ 399.316619][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.589011][ T24] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 400.426077][ T24] snd_usb_pod 8-1:1.1: set_interface failed [ 400.467914][ T24] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 400.520620][ T24] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 400.593284][ T24] usb 8-1: USB disconnect, device number 3 [ 402.698591][ T8849] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.707443][ T8849] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 402.723423][ T8849] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.731645][ T8849] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 403.254028][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'. [ 403.408001][ T8857] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[8857] [ 403.605718][ T5929] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 404.030521][ T5929] usb 8-1: Using ep0 maxpacket: 8 [ 404.049731][ T8861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.101005][ T5929] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 404.144054][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.148258][ T9] lo speed is unknown, defaulting to 1000 [ 404.175856][ T5929] usb 8-1: Product: syz [ 404.181142][ T5929] usb 8-1: Manufacturer: syz [ 404.198071][ T5929] usb 8-1: SerialNumber: syz [ 404.395795][ T5929] usb 8-1: config 0 descriptor?? [ 405.163409][ T8870] program syz.0.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.203671][ T5929] gspca_main: se401-2.14.0 probing 047d:5003 [ 405.234142][ T8861] syz.1.627 (8861) used greatest stack depth: 20264 bytes left [ 405.671623][ T5872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 405.728801][ T5929] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 405.738209][ T5929] se401 8-1:0.0: probe with driver se401 failed with error -71 [ 405.825230][ T8886] sd 0:0:1:0: device reset [ 405.870230][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 405.990786][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 406.592471][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 406.605253][ T5929] usb 8-1: USB disconnect, device number 4 [ 406.613383][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.652517][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 406.670413][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.678556][ T5872] usb 3-1: Product: syz [ 406.688056][ T5872] usb 3-1: Manufacturer: syz [ 406.695508][ T5872] usb 3-1: SerialNumber: syz [ 406.712052][ T5872] usb 3-1: config 0 descriptor?? [ 406.733705][ T5872] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 406.744501][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 406.757996][ T24] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 406.767818][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.800490][ T5872] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 406.807863][ T24] usb 7-1: Product: syz [ 406.822122][ T24] usb 7-1: Manufacturer: syz [ 406.826848][ T24] usb 7-1: SerialNumber: syz [ 406.895492][ T24] usb 7-1: config 0 descriptor?? [ 406.965610][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 407.338374][ T24] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 407.346062][ T24] se401 7-1:0.0: probe with driver se401 failed with error -71 [ 407.355694][ T24] usb 7-1: USB disconnect, device number 5 [ 407.481996][ T5872] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 407.491005][ T5872] em28xx 3-1:0.0: Config register raw data: 0x15 [ 407.775767][ T5872] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 407.825200][ T5872] em28xx 3-1:0.0: No AC97 audio processor [ 408.113882][ T5872] usb 3-1: USB disconnect, device number 8 [ 408.135887][ T5872] em28xx 3-1:0.0: Disconnecting em28xx [ 408.160876][ T5872] em28xx 3-1:0.0: Freeing device [ 408.731331][ T8911] FAULT_INJECTION: forcing a failure. [ 408.731331][ T8911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.819060][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.6.641 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 408.819095][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.819115][ T8911] Call Trace: [ 408.819123][ T8911] [ 408.819137][ T8911] dump_stack_lvl+0x189/0x250 [ 408.819172][ T8911] ? irqentry_exit+0x74/0x90 [ 408.819204][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.819255][ T8911] should_fail_ex+0x414/0x560 [ 408.819283][ T8911] _copy_from_user+0x2d/0xb0 [ 408.819315][ T8911] smc_setsockopt+0x3b8/0xab0 [ 408.819349][ T8911] ? __pfx_smc_setsockopt+0x10/0x10 [ 408.819380][ T8911] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.819404][ T8911] ? __pfx_smc_setsockopt+0x10/0x10 [ 408.819432][ T8911] do_sock_setsockopt+0x25a/0x3e0 [ 408.819465][ T8911] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 408.819490][ T8911] ? __fget_files+0x2a/0x420 [ 408.819517][ T8911] ? __fget_files+0x3a0/0x420 [ 408.819536][ T8911] ? __fget_files+0x2a/0x420 [ 408.819565][ T8911] __x64_sys_setsockopt+0x18b/0x220 [ 408.819601][ T8911] do_syscall_64+0xf6/0x210 [ 408.819629][ T8911] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 408.819651][ T8911] ? clear_bhb_loop+0x60/0xb0 [ 408.819678][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.819699][ T8911] RIP: 0033:0x7feda338e969 [ 408.819719][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.819738][ T8911] RSP: 002b:00007feda4262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.819761][ T8911] RAX: ffffffffffffffda RBX: 00007feda35b5fa0 RCX: 00007feda338e969 [ 408.819778][ T8911] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 408.819791][ T8911] RBP: 00007feda4262090 R08: 0000000000000018 R09: 0000000000000000 [ 408.819805][ T8911] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 408.819826][ T8911] R13: 0000000000000000 R14: 00007feda35b5fa0 R15: 00007ffc259b2ac8 [ 408.819859][ T8911] [ 409.261971][ T8915] program syz.7.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.529496][ T8929] sd 0:0:1:0: device reset [ 410.790594][ T8933] mkiss: ax0: crc mode is auto. [ 411.007760][ T8933] process 'syz.1.649' launched '/dev/fd/3' with NULL argv: empty string added [ 414.689502][ T8957] program syz.6.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.798878][ T8964] netlink: 'syz.2.657': attribute type 25 has an invalid length. [ 414.809843][ T8964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.657'. [ 414.867508][ T8968] netlink: 'syz.2.657': attribute type 25 has an invalid length. [ 414.882387][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.657'. [ 414.944632][ T8972] sd 0:0:1:0: device reset [ 416.865521][ T8990] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 416.872285][ T8990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 416.958138][ T8990] vhci_hcd vhci_hcd.0: Device attached [ 417.251354][ T5929] vhci_hcd: vhci_device speed not set [ 417.620299][ T5887] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 417.923778][ T5929] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 418.691411][ T9010] program syz.6.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.716170][ T5887] usb 3-1: config 6 has an invalid interface number: 225 but max is 2 [ 418.729726][ T5887] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 418.770238][ T5887] usb 3-1: config 6 has an invalid interface number: 175 but max is 2 [ 418.800808][ T5887] usb 3-1: config 6 has an invalid interface number: 66 but max is 2 [ 418.840225][ T5887] usb 3-1: config 6 has an invalid interface number: 160 but max is 2 [ 418.876895][ T5887] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 419.040086][ T5887] usb 3-1: config 6 has an invalid interface number: 132 but max is 2 [ 419.048348][ T5887] usb 3-1: config 6 has 5 interfaces, different from the descriptor's value: 3 [ 419.064496][ T5887] usb 3-1: config 6 has no interface number 0 [ 419.071249][ T5887] usb 3-1: config 6 has no interface number 1 [ 419.078999][ T5887] usb 3-1: config 6 has no interface number 2 [ 419.088355][ T5887] usb 3-1: config 6 has no interface number 3 [ 419.108853][ T5887] usb 3-1: config 6 has no interface number 4 [ 419.996630][ T5887] usb 3-1: config 6 interface 225 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 420.018873][ T5887] usb 3-1: config 6 interface 225 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 420.184215][ T5887] usb 3-1: config 6 interface 225 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 420.199879][ T5887] usb 3-1: config 6 interface 225 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 420.211383][ T5887] usb 3-1: config 6 interface 225 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 420.243565][ T5887] usb 3-1: config 6 interface 225 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 420.350878][ T9024] sd 0:0:1:0: device reset [ 420.641684][ T8991] vhci_hcd: connection reset by peer [ 420.762435][ T3060] vhci_hcd: stop threads [ 420.872464][ T3060] vhci_hcd: release socket [ 420.991065][ T3060] vhci_hcd: disconnect device [ 421.083676][ T5887] usb 3-1: config 6 interface 225 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 421.097068][ T5887] usb 3-1: config 6 interface 225 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 421.108929][ T5887] usb 3-1: config 6 interface 225 altsetting 0 has a duplicate endpoint with address 0x87, skipping [ 421.119842][ T5887] usb 3-1: config 6 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.130805][ T5887] usb 3-1: config 6 interface 225 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 421.144421][ T5887] usb 3-1: config 6 interface 175 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 421.155255][ T5887] usb 3-1: config 6 interface 175 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 421.166668][ T5887] usb 3-1: config 6 interface 175 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 421.177717][ T5887] usb 3-1: config 6 interface 175 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 421.190639][ T5887] usb 3-1: config 6 interface 175 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 421.201689][ T5887] usb 3-1: config 6 interface 175 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 13 [ 421.215088][ T5887] usb 3-1: too many endpoints for config 6 interface 66 altsetting 245: 225, using maximum allowed: 30 [ 421.320317][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has a duplicate endpoint with address 0x7, skipping [ 421.424904][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has a duplicate endpoint with address 0x7, skipping [ 422.036647][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 422.184444][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has a duplicate endpoint with address 0x1, skipping [ 422.195507][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has an invalid descriptor for endpoint zero, skipping [ 422.206607][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has a duplicate endpoint with address 0x7, skipping [ 422.239062][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has a duplicate endpoint with address 0xB, skipping [ 422.263350][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has a duplicate endpoint with address 0x2, skipping [ 422.333669][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has a duplicate endpoint with address 0x2, skipping [ 422.377737][ T5887] usb 3-1: config 6 interface 66 altsetting 245 has 8 endpoint descriptors, different from the interface descriptor's value: 225 [ 422.409294][ T9042] (syz.7.677,9042,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 422.420169][ T9042] (syz.7.677,9042,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 422.479663][ T5887] usb 3-1: config 6 interface 160 altsetting 220 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 422.528702][ T5887] usb 3-1: config 6 interface 160 altsetting 220 has a duplicate endpoint with address 0x5, skipping [ 422.816392][ T5887] usb 3-1: config 6 interface 160 altsetting 220 has a duplicate endpoint with address 0x5, skipping [ 422.830523][ T5887] usb 3-1: config 6 interface 160 altsetting 220 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 423.108636][ T5929] vhci_hcd: vhci_device speed not set [ 423.149927][ T9038] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 423.596792][ T5887] usb 3-1: too many endpoints for config 6 interface 132 altsetting 61: 95, using maximum allowed: 30 [ 423.610913][ T5887] usb 3-1: config 6 interface 132 altsetting 61 endpoint 0xE has an invalid bInterval 134, changing to 11 [ 423.622404][ T5887] usb 3-1: config 6 interface 132 altsetting 61 has 1 endpoint descriptor, different from the interface descriptor's value: 95 [ 423.638611][ T5887] usb 3-1: config 6 interface 175 has no altsetting 0 [ 423.647563][ T5887] usb 3-1: config 6 interface 66 has no altsetting 0 [ 423.654425][ T5887] usb 3-1: config 6 interface 160 has no altsetting 0 [ 423.685623][ T5887] usb 3-1: config 6 interface 132 has no altsetting 0 [ 423.702634][ T5887] usb 3-1: string descriptor 0 read error: -71 [ 423.720847][ T5887] usb 3-1: New USB device found, idVendor=1199, idProduct=68a8, bcdDevice=2b.08 [ 423.886247][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.113793][ T5887] usb 3-1: can't set config #6, error -71 [ 424.239213][ T9057] program syz.0.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.501211][ T5887] usb 3-1: USB disconnect, device number 9 [ 424.510529][ T5129] Bluetooth: hci1: command 0x0401 tx timeout [ 425.903619][ T9074] sd 0:0:1:0: device reset [ 426.780854][ T30] audit: type=1326 audit(1747340732.882:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feda3385927 code=0x7ffc0000 [ 426.941632][ T30] audit: type=1326 audit(1747340732.882:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feda332ab39 code=0x7ffc0000 [ 427.070825][ T30] audit: type=1326 audit(1747340732.882:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feda3385927 code=0x7ffc0000 [ 427.201700][ T30] audit: type=1326 audit(1747340732.882:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feda332ab39 code=0x7ffc0000 [ 427.277702][ T30] audit: type=1326 audit(1747340732.882:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feda3385927 code=0x7ffc0000 [ 428.010545][ T30] audit: type=1326 audit(1747340732.882:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feda332ab39 code=0x7ffc0000 [ 428.298965][ T30] audit: type=1326 audit(1747340732.882:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feda3385927 code=0x7ffc0000 [ 428.618678][ T30] audit: type=1326 audit(1747340732.882:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feda332ab39 code=0x7ffc0000 [ 428.642130][ T30] audit: type=1326 audit(1747340732.882:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feda3385927 code=0x7ffc0000 [ 428.666931][ T30] audit: type=1326 audit(1747340732.882:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9070 comm="syz.6.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feda332ab39 code=0x7ffc0000 [ 429.376095][ T5129] Bluetooth: hci1: unexpected event for opcode 0x1c10 [ 429.397748][ T9103] program syz.0.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.721238][ T5129] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 429.732096][ T5129] CPU: 1 UID: 0 PID: 5129 Comm: kworker/u9:1 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 429.732132][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.732149][ T5129] Workqueue: hci1 hci_rx_work [ 429.732188][ T5129] Call Trace: [ 429.732198][ T5129] [ 429.732208][ T5129] dump_stack_lvl+0x189/0x250 [ 429.732248][ T5129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.732279][ T5129] ? __pfx__printk+0x10/0x10 [ 429.732317][ T5129] ? kernfs_path_from_node+0x2b/0x260 [ 429.732341][ T5129] ? kernfs_path_from_node+0x2b/0x260 [ 429.732363][ T5129] ? kernfs_path_from_node+0x2b/0x260 [ 429.732389][ T5129] ? kernfs_path_from_node+0x216/0x260 [ 429.732416][ T5129] sysfs_create_dir_ns+0x259/0x280 [ 429.732443][ T5129] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 429.732469][ T5129] ? do_raw_spin_unlock+0x122/0x240 [ 429.732501][ T5129] kobject_add_internal+0x59f/0xb40 [ 429.732544][ T5129] kobject_add+0x155/0x220 [ 429.732592][ T5129] ? __pfx_kobject_add+0x10/0x10 [ 429.732624][ T5129] ? _raw_spin_unlock+0x28/0x50 [ 429.732653][ T5129] ? get_device_parent+0x366/0x3a0 [ 429.732686][ T5129] device_add+0x408/0xb50 [ 429.732718][ T5129] hci_conn_add_sysfs+0xd5/0x1e0 [ 429.732752][ T5129] le_conn_complete_evt+0xc3a/0x1220 [ 429.732791][ T5129] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 429.732816][ T5129] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 429.732843][ T5129] ? __asan_memcpy+0x40/0x70 [ 429.732876][ T5129] ? __pfx___mutex_lock+0x10/0x10 [ 429.732906][ T5129] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.732933][ T5129] ? skb_pull_data+0xfb/0x200 [ 429.732974][ T5129] hci_le_conn_complete_evt+0x187/0x450 [ 429.733021][ T5129] hci_event_packet+0x7a2/0x1270 [ 429.733059][ T5129] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 429.733096][ T5129] ? __pfx_hci_event_packet+0x10/0x10 [ 429.733130][ T5129] ? kcov_remote_start+0x4d3/0x7f0 [ 429.733156][ T5129] ? lockdep_hardirqs_on+0x20/0x150 [ 429.733187][ T5129] ? hci_send_to_monitor+0xd7/0x4f0 [ 429.733215][ T5129] hci_rx_work+0x46a/0xe80 [ 429.733257][ T5129] ? process_scheduled_works+0x9ec/0x17a0 [ 429.733295][ T5129] process_scheduled_works+0xadb/0x17a0 [ 429.733366][ T5129] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.733422][ T5129] worker_thread+0x8a0/0xda0 [ 429.733474][ T5129] kthread+0x70e/0x8a0 [ 429.733505][ T5129] ? __pfx_worker_thread+0x10/0x10 [ 429.733525][ T5129] ? __pfx_kthread+0x10/0x10 [ 429.733554][ T5129] ? __pfx_kthread+0x10/0x10 [ 429.733585][ T5129] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.733610][ T5129] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.733637][ T5129] ? __pfx_kthread+0x10/0x10 [ 429.733662][ T5129] ret_from_fork+0x4b/0x80 [ 429.733684][ T5129] ? __pfx_kthread+0x10/0x10 [ 429.733710][ T5129] ret_from_fork_asm+0x1a/0x30 [ 429.733764][ T5129] [ 429.733796][ T5129] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 430.032149][ T5129] Bluetooth: hci1: failed to register connection device [ 430.580433][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 431.460182][ T5887] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 431.624405][ T5887] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.670088][ T5887] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 2607, setting to 1024 [ 431.718233][ T5887] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 431.779325][ T5887] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 431.830030][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.897158][ T9134] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 432.093541][ T5887] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.111030][ T5129] Bluetooth: hci1: command 0x0401 tx timeout [ 432.861665][ T5872] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 432.962753][ T9157] program syz.6.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.055306][ T5929] usb 8-1: USB disconnect, device number 5 [ 433.066376][ T5872] usb 1-1: config index 0 descriptor too short (expected 33995, got 43) [ 433.090666][ T5872] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 433.098821][ T5872] usb 1-1: config 0 has no interface number 0 [ 433.128158][ T5872] usb 1-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 433.139328][ T5872] usb 1-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 433.153912][ T5872] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 433.166249][ T5872] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 433.241810][ T5872] usb 1-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 433.723653][ T5872] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 433.762955][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.039798][ T5872] usb 1-1: config 0 descriptor?? [ 434.083412][ T5872] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 434.092295][ T5872] gspca_mr97310a: reg write [21] error -22 [ 434.098853][ T5872] mr97310a 1-1:0.57: probe with driver mr97310a failed with error -22 [ 434.406170][ T10] usb 1-1: USB disconnect, device number 17 [ 436.369397][ T5872] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 436.382467][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 436.540869][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 436.577771][ T5872] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 437.617257][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.633412][ T24] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 437.651766][ T24] usb 2-1: config 0 has no interface number 0 [ 437.659373][ T5872] usb 1-1: config 0 descriptor?? [ 437.668307][ T24] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 437.876753][ T24] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 437.965745][ T24] usb 2-1: config 0 interface 255 has no altsetting 0 [ 438.015804][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 438.047138][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.134811][ T9202] sd 0:0:1:0: device reset [ 438.859832][ T5872] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 438.896325][ T24] usb 2-1: config 0 descriptor?? [ 438.937917][ T5872] asix 1-1:0.0: probe with driver asix failed with error -71 [ 438.949547][ T24] usb 2-1: can't set config #0, error -71 [ 439.003247][ T24] usb 2-1: USB disconnect, device number 20 [ 439.016431][ T5872] usb 1-1: USB disconnect, device number 18 [ 440.036814][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.043629][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.106514][ T9215] netlink: 364 bytes leftover after parsing attributes in process `syz.1.728'. [ 440.183941][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 440.183960][ T30] audit: type=1326 audit(1747340746.282:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9214 comm="syz.1.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f390f78e969 code=0x0 [ 440.222928][ T9217] FAULT_INJECTION: forcing a failure. [ 440.222928][ T9217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.271170][ T9217] CPU: 0 UID: 0 PID: 9217 Comm: syz.7.730 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 440.271195][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.271205][ T9217] Call Trace: [ 440.271211][ T9217] [ 440.271218][ T9217] dump_stack_lvl+0x189/0x250 [ 440.271242][ T9217] ? __lock_acquire+0xaac/0xd20 [ 440.271266][ T9217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.271287][ T9217] ? __pfx__printk+0x10/0x10 [ 440.271311][ T9217] ? __might_fault+0xb0/0x130 [ 440.271344][ T9217] should_fail_ex+0x414/0x560 [ 440.271364][ T9217] _copy_from_user+0x2d/0xb0 [ 440.271386][ T9217] __sys_bpf+0x1ed/0x860 [ 440.271407][ T9217] ? __pfx___sys_bpf+0x10/0x10 [ 440.271435][ T9217] ? ksys_write+0x1f0/0x250 [ 440.271455][ T9217] ? rcu_is_watching+0x15/0xb0 [ 440.271487][ T9217] __x64_sys_bpf+0x7c/0x90 [ 440.271504][ T9217] do_syscall_64+0xf6/0x210 [ 440.271525][ T9217] ? clear_bhb_loop+0x60/0xb0 [ 440.271543][ T9217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.271559][ T9217] RIP: 0033:0x7f5ed198e969 [ 440.271574][ T9217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.271590][ T9217] RSP: 002b:00007f5ed28d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.271606][ T9217] RAX: ffffffffffffffda RBX: 00007f5ed1bb5fa0 RCX: 00007f5ed198e969 [ 440.271617][ T9217] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000001 [ 440.271627][ T9217] RBP: 00007f5ed28d2090 R08: 0000000000000000 R09: 0000000000000000 [ 440.271637][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.271646][ T9217] R13: 0000000000000000 R14: 00007f5ed1bb5fa0 R15: 00007ffda2b67af8 [ 440.271669][ T9217] [ 441.083814][ T9228] netlink: 136 bytes leftover after parsing attributes in process `syz.0.733'. [ 441.128781][ T9228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 443.485208][ T9256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.740'. [ 443.513655][ T9253] FAULT_INJECTION: forcing a failure. [ 443.513655][ T9253] name failslab, interval 1, probability 0, space 0, times 0 [ 443.526498][ T9253] CPU: 1 UID: 0 PID: 9253 Comm: syz.1.739 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 443.526521][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.526531][ T9253] Call Trace: [ 443.526537][ T9253] [ 443.526544][ T9253] dump_stack_lvl+0x189/0x250 [ 443.526571][ T9253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.526593][ T9253] ? __pfx__printk+0x10/0x10 [ 443.526621][ T9253] ? __pfx___might_resched+0x10/0x10 [ 443.526644][ T9253] ? fs_reclaim_acquire+0x7d/0x100 [ 443.526665][ T9253] should_fail_ex+0x414/0x560 [ 443.526685][ T9253] should_failslab+0xa8/0x100 [ 443.526701][ T9253] __kmalloc_noprof+0xcb/0x4f0 [ 443.526724][ T9253] ? iter_file_splice_write+0x1cb/0x1000 [ 443.526752][ T9253] iter_file_splice_write+0x1cb/0x1000 [ 443.526795][ T9253] ? __pfx_iter_file_splice_write+0x10/0x10 [ 443.526821][ T9253] ? rcu_read_lock_any_held+0xb3/0x120 [ 443.526847][ T9253] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 443.526881][ T9253] ? __pfx_iter_file_splice_write+0x10/0x10 [ 443.526903][ T9253] do_splice+0xc76/0x1660 [ 443.526946][ T9253] ? __pfx_do_splice+0x10/0x10 [ 443.526977][ T9253] __se_sys_splice+0x2e1/0x460 [ 443.527005][ T9253] ? __pfx___se_sys_splice+0x10/0x10 [ 443.527033][ T9253] ? __x64_sys_splice+0x21/0xf0 [ 443.527059][ T9253] do_syscall_64+0xf6/0x210 [ 443.527080][ T9253] ? clear_bhb_loop+0x60/0xb0 [ 443.527099][ T9253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.527114][ T9253] RIP: 0033:0x7f390f78e969 [ 443.527128][ T9253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.527142][ T9253] RSP: 002b:00007f39106dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 443.527166][ T9253] RAX: ffffffffffffffda RBX: 00007f390f9b5fa0 RCX: 00007f390f78e969 [ 443.527177][ T9253] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000007 [ 443.527186][ T9253] RBP: 00007f39106dd090 R08: 00000000088000cc R09: 0000000000000000 [ 443.527196][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.527205][ T9253] R13: 0000000000000000 R14: 00007f390f9b5fa0 R15: 00007ffd96037938 [ 443.527229][ T9253] [ 444.573890][ T9269] netlink: 'syz.1.742': attribute type 21 has an invalid length. [ 444.689869][ T9269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.742'. [ 444.737830][ T9269] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 445.577186][ T9279] netlink: 136 bytes leftover after parsing attributes in process `syz.2.745'. [ 445.797461][ T9279] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 446.598506][ T9292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.748'. [ 446.641486][ T9292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.748'. [ 446.654671][ T9292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.748'. [ 446.954159][ T9302] veth1_macvtap: left promiscuous mode [ 447.019445][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.335391][ T9297] program syz.7.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.339872][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 449.958074][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.756'. [ 453.834777][ T30] audit: type=1326 audit(1747340759.892:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 453.870582][ T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 453.876232][ T30] audit: type=1326 audit(1747340759.892:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 453.901701][ T30] audit: type=1326 audit(1747340759.892:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 454.038968][ T10] usb 2-1: config 136 has an invalid descriptor of length 229, skipping remainder of the config [ 454.050690][ T30] audit: type=1326 audit(1747340759.892:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 454.073607][ T10] usb 2-1: config 136 has 0 interfaces, different from the descriptor's value: 1 [ 454.096872][ T30] audit: type=1326 audit(1747340759.892:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 454.511993][ T30] audit: type=1326 audit(1747340759.892:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 454.686072][ T30] audit: type=1326 audit(1747340759.902:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 454.850239][ T10] usb 2-1: string descriptor 0 read error: -71 [ 454.857243][ T10] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 455.003580][ T30] audit: type=1326 audit(1747340759.902:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 455.025933][ T30] audit: type=1326 audit(1747340759.902:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 455.087661][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.100624][ T30] audit: type=1326 audit(1747340759.902:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bf8e969 code=0x7ffc0000 [ 455.864856][ T10] usb 2-1: can't set config #136, error -71 [ 455.877479][ T10] usb 2-1: USB disconnect, device number 21 [ 457.313008][ T9384] netlink: 'syz.2.774': attribute type 3 has an invalid length. [ 457.321176][ T9384] netlink: 666 bytes leftover after parsing attributes in process `syz.2.774'. [ 458.602971][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 458.820427][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 459.011389][ T10] usb 7-1: config 0 has an invalid interface number: 57 but max is 0 [ 459.030044][ T10] usb 7-1: config 0 has no interface number 0 [ 459.044839][ T10] usb 7-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.068369][ T10] usb 7-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 459.399399][ T10] usb 7-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 460.356200][ T10] usb 7-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 460.557064][ T10] usb 7-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.605811][ T10] usb 7-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 460.639727][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.671825][ T10] usb 7-1: config 0 descriptor?? [ 460.681833][ T10] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 460.688896][ T10] gspca_mr97310a: reg write [21] error -22 [ 460.734414][ T10] mr97310a 7-1:0.57: probe with driver mr97310a failed with error -22 [ 461.080145][ T5929] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 461.440077][ T9390] geneve2: entered promiscuous mode [ 461.479604][ T9390] geneve2: entered allmulticast mode [ 461.817230][ T9425] delete_channel: no stack [ 461.864631][ T24] usb 7-1: USB disconnect, device number 6 [ 461.910425][ T5929] usb 8-1: Using ep0 maxpacket: 8 [ 461.925962][ T5929] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 461.946328][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.956359][ T9428] netlink: 80 bytes leftover after parsing attributes in process `syz.2.785'. [ 461.965657][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 461.975103][ T5929] usb 8-1: Product: syz [ 461.983324][ T5929] usb 8-1: Manufacturer: syz [ 462.004810][ T5929] usb 8-1: SerialNumber: syz [ 462.050556][ T5929] usb 8-1: config 0 descriptor?? [ 462.061836][ T5929] gspca_main: se401-2.14.0 probing 047d:5003 [ 462.944926][ T5929] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 462.981080][ T5929] se401 8-1:0.0: probe with driver se401 failed with error -71 [ 463.105716][ T5929] usb 8-1: USB disconnect, device number 6 [ 463.497954][ T9443] FAULT_INJECTION: forcing a failure. [ 463.497954][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 463.574201][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.2.788 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 463.574236][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.574250][ T9443] Call Trace: [ 463.574258][ T9443] [ 463.574268][ T9443] dump_stack_lvl+0x189/0x250 [ 463.574314][ T9443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.574344][ T9443] ? __pfx__printk+0x10/0x10 [ 463.574385][ T9443] ? __pfx___might_resched+0x10/0x10 [ 463.574418][ T9443] ? fs_reclaim_acquire+0x7d/0x100 [ 463.574449][ T9443] should_fail_ex+0x414/0x560 [ 463.574477][ T9443] ? hash_netportnet_create+0x3a5/0xf90 [ 463.574499][ T9443] should_failslab+0xa8/0x100 [ 463.574523][ T9443] __kvmalloc_node_noprof+0x168/0x5e0 [ 463.574545][ T9443] ? hash_netportnet_create+0x3a5/0xf90 [ 463.574567][ T9443] ? hash_netportnet_create+0x2fa/0xf90 [ 463.574596][ T9443] hash_netportnet_create+0x3a5/0xf90 [ 463.574630][ T9443] ? __nla_parse+0x40/0x60 [ 463.574656][ T9443] ? __pfx_hash_netportnet_create+0x10/0x10 [ 463.574683][ T9443] ip_set_create+0xa94/0x1940 [ 463.574715][ T9443] ? ip_set_create+0x4a2/0x1940 [ 463.574759][ T9443] ? __pfx_ip_set_create+0x10/0x10 [ 463.574833][ T9443] nfnetlink_rcv_msg+0xb4d/0x1130 [ 463.574865][ T9443] ? __kernel_text_address+0xd/0x40 [ 463.574892][ T9443] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 463.574949][ T9443] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 463.575039][ T9443] netlink_rcv_skb+0x21c/0x490 [ 463.575065][ T9443] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 463.575099][ T9443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.575140][ T9443] ? safesetid_security_capable+0xa9/0x1a0 [ 463.575168][ T9443] ? bpf_lsm_capable+0x9/0x20 [ 463.575197][ T9443] ? security_capable+0x7e/0x2e0 [ 463.575236][ T9443] nfnetlink_rcv+0x273/0x2530 [ 463.575271][ T9443] ? __dev_queue_xmit+0x27e/0x3a70 [ 463.575309][ T9443] ? __dev_queue_xmit+0x27e/0x3a70 [ 463.575338][ T9443] ? __dev_queue_xmit+0x27e/0x3a70 [ 463.575372][ T9443] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 463.575415][ T9443] ? __dev_queue_xmit+0x27e/0x3a70 [ 463.575448][ T9443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.575474][ T9443] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 463.575512][ T9443] ? __pfx___dev_queue_xmit+0x10/0x10 [ 463.575561][ T9443] ? ref_tracker_free+0x63a/0x7d0 [ 463.575583][ T9443] ? __copy_skb_header+0xa7/0x550 [ 463.575616][ T9443] ? __pfx_ref_tracker_free+0x10/0x10 [ 463.575661][ T9443] ? skb_clone+0x246/0x3a0 [ 463.575696][ T9443] ? __netlink_deliver_tap+0x807/0x850 [ 463.575721][ T9443] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.575754][ T9443] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.575778][ T9443] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.575810][ T9443] netlink_unicast+0x758/0x8d0 [ 463.575845][ T9443] netlink_sendmsg+0x805/0xb30 [ 463.575868][ T9443] ? is_bpf_text_address+0x26/0x2b0 [ 463.575908][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.575943][ T9443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.575967][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.575993][ T9443] __sock_sendmsg+0x21c/0x270 [ 463.576019][ T9443] ____sys_sendmsg+0x505/0x830 [ 463.576056][ T9443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.576096][ T9443] ? import_iovec+0x74/0xa0 [ 463.576130][ T9443] ___sys_sendmsg+0x21f/0x2a0 [ 463.576163][ T9443] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.576236][ T9443] ? __fget_files+0x2a/0x420 [ 463.576256][ T9443] ? __fget_files+0x3a0/0x420 [ 463.576289][ T9443] __x64_sys_sendmsg+0x19b/0x260 [ 463.576330][ T9443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.576380][ T9443] ? do_syscall_64+0xba/0x210 [ 463.576413][ T9443] do_syscall_64+0xf6/0x210 [ 463.576442][ T9443] ? clear_bhb_loop+0x60/0xb0 [ 463.576469][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.576490][ T9443] RIP: 0033:0x7f2d4f78e969 [ 463.576509][ T9443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.576528][ T9443] RSP: 002b:00007f2d506ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.576551][ T9443] RAX: ffffffffffffffda RBX: 00007f2d4f9b5fa0 RCX: 00007f2d4f78e969 [ 463.576568][ T9443] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 463.576582][ T9443] RBP: 00007f2d506ad090 R08: 0000000000000000 R09: 0000000000000000 [ 463.576595][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.576608][ T9443] R13: 0000000000000000 R14: 00007f2d4f9b5fa0 R15: 00007ffcc413fbd8 [ 463.576643][ T9443] [ 464.508478][ T9447] CIFS mount error: No usable UNC path provided in device string! [ 464.508478][ T9447] [ 464.516512][ T9449] /dev/nullb0: Can't open blockdev [ 464.529624][ T9447] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 465.247004][ T9444] delete_channel: no stack [ 465.672593][ T9470] sg_write: data in/out 2268/14 bytes for SCSI command 0x0-- guessing data in; [ 465.672593][ T9470] program syz.0.795 not setting count and/or reply_len properly [ 466.220535][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 466.990139][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 466.999519][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 467.038357][ T24] usb 2-1: config 191 has an invalid descriptor of length 0, skipping remainder of the config [ 467.066423][ T24] usb 2-1: config 191 has 0 interfaces, different from the descriptor's value: 1 [ 467.081977][ T24] usb 2-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 467.196653][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 467.240998][ T24] usb 2-1: Product: syz [ 467.261125][ T24] usb 2-1: Manufacturer: syz [ 467.286193][ T24] usb 2-1: SerialNumber: syz [ 467.510313][ T5887] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 467.543986][ T9491] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.558583][ T9491] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 467.655594][ T9491] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 467.662149][ T9491] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 467.700046][ T5887] usb 8-1: Using ep0 maxpacket: 8 [ 467.722367][ T5887] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 467.750074][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.778797][ T5887] usb 8-1: Product: syz [ 467.794728][ T5887] usb 8-1: Manufacturer: syz [ 467.802878][ T5887] usb 8-1: SerialNumber: syz [ 467.825327][ T5887] usb 8-1: config 0 descriptor?? [ 467.849513][ T5887] gspca_main: se401-2.14.0 probing 047d:5003 [ 467.956069][ T24] usb 2-1: USB disconnect, device number 22 [ 468.141256][ T9491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.183646][ T9491] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 468.309595][ T9491] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.316729][ T9491] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 468.632003][ T5887] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 468.661750][ T5887] se401 8-1:0.0: probe with driver se401 failed with error -71 [ 468.682690][ T5887] usb 8-1: USB disconnect, device number 7 [ 470.148313][ T9517] mkiss: ax0: crc mode is auto. [ 470.210109][ T5887] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 471.130687][ T5887] usb 2-1: device descriptor read/64, error -71 [ 471.760422][ T5887] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 471.900141][ T5887] usb 2-1: device descriptor read/64, error -71 [ 471.970224][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 472.013987][ T5887] usb usb2-port1: attempt power cycle [ 472.140128][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 472.148141][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.158732][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.169857][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.182893][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.192791][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.207523][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 472.217010][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 472.225237][ T9] usb 3-1: SerialNumber: syz [ 472.238304][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 472.247556][ T9] usbtest 3-1:1.0: Linux gadget zero [ 472.252981][ T9] usbtest 3-1:1.0: high-speed {control in/out bulk-in int-in} tests (+alt) [ 472.360236][ T5887] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 472.383183][ T5887] usb 2-1: device descriptor read/8, error -71 [ 472.583704][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 472.583723][ T30] audit: type=1326 audit(1747340778.682:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9531 comm="syz.7.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed198e969 code=0x7fc00000 [ 472.622488][ T5887] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 472.661992][ T5887] usb 2-1: device descriptor read/8, error -71 [ 472.692296][ T9539] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.814'. [ 472.796185][ T5887] usb usb2-port1: unable to enumerate USB device [ 472.826618][ T9541] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 472.836332][ T9541] overlayfs: overlapping lowerdir path [ 472.977291][ T47] usb 3-1: USB disconnect, device number 10 [ 473.090145][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 473.102933][ T9548] netlink: 'syz.7.816': attribute type 10 has an invalid length. [ 473.207751][ T9548] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.830307][ T5129] Bluetooth: hci1: command tx timeout [ 475.503642][ T9569] netlink: 'syz.7.819': attribute type 10 has an invalid length. [ 475.513129][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.783353][ T5887] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 475.980072][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 475.992152][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.010045][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 476.019154][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.040994][ T5887] usb 3-1: config 0 descriptor?? [ 477.095382][ T9581] netlink: 136 bytes leftover after parsing attributes in process `syz.1.824'. [ 477.120281][ T9581] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 477.395298][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.420558][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.425230][ T9594] dummy0: entered promiscuous mode [ 477.438674][ T9594] vlan2: entered promiscuous mode [ 477.540184][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 477.696418][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 477.705814][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.714945][ T24] usb 2-1: Product: syz [ 477.719193][ T24] usb 2-1: Manufacturer: syz [ 477.723857][ T24] usb 2-1: SerialNumber: syz [ 477.731747][ T24] usb 2-1: config 0 descriptor?? [ 477.738651][ T24] ch341 2-1:0.0: ch341-uart converter detected [ 477.750411][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 477.919005][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 477.928610][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.936764][ T10] usb 1-1: Product: syz [ 477.942456][ T10] usb 1-1: Manufacturer: syz [ 477.947113][ T10] usb 1-1: SerialNumber: syz [ 477.963420][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 478.084433][ T59] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 478.106050][ T9598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.289914][ C0] usb 1-1: ath9k_htc: invalid pkt_len (b408) [ 478.578596][ T10] usb 3-1: USB disconnect, device number 11 [ 478.590714][ T9596] vlan0: entered promiscuous mode [ 478.600103][ T47] usb 1-1: USB disconnect, device number 20 [ 478.674921][ T9603] netlink: 'syz.7.831': attribute type 10 has an invalid length. [ 479.190051][ T59] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 479.197423][ T59] ath9k_htc: Failed to initialize the device [ 479.234154][ T9603] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.245488][ T47] usb 1-1: ath9k_htc: USB layer deinitialized [ 479.388750][ T24] ch341-uart ttyUSB0: break control not supported, using simulated break [ 479.399334][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.409022][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.579679][ T24] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 480.013334][ T24] usb 2-1: USB disconnect, device number 27 [ 480.028068][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 480.047677][ T24] ch341 2-1:0.0: device disconnected [ 482.753853][ T9631] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 482.762218][ T9631] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 482.780015][ T9631] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 482.788226][ T9631] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 483.414087][ T9635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.980141][ T9642] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 487.516242][ T9676] vlan2: entered promiscuous mode [ 487.580393][ T9676] bond0: entered promiscuous mode [ 487.585529][ T9676] bond_slave_0: entered promiscuous mode [ 487.591884][ T9676] bond_slave_1: entered promiscuous mode [ 487.597958][ T9676] team0: entered promiscuous mode [ 487.603758][ T9676] team_slave_0: entered promiscuous mode [ 487.630796][ T9686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.704707][ T9687] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 487.770239][ T59] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 487.990265][ T59] usb 3-1: Using ep0 maxpacket: 8 [ 488.002482][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.028534][ T59] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 488.057657][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.156869][ T59] usb 3-1: config 0 descriptor?? [ 488.185043][ T59] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 490.296820][ T9705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.854'. [ 490.300295][ T59] gspca_vc032x: reg_w err -110 [ 490.567868][ T59] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 490.589380][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.602001][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.718201][ T47] usb 3-1: USB disconnect, device number 12 [ 490.861574][ T9717] netlink: 'syz.1.862': attribute type 10 has an invalid length. [ 490.878101][ T9717] fuse: Bad value for 'user_id' [ 490.883843][ T9717] fuse: Bad value for 'user_id' [ 491.148168][ T9712] XFS (nullb0): Invalid superblock magic number [ 492.966159][ T9731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.321346][ T9741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.941322][ T9762] binder: 9761:9762 ioctl c0306201 0 returned -14 [ 499.222893][ T9786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.490499][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.144323][ T9811] program syz.7.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.384531][ T9822] netlink: 'syz.7.891': attribute type 3 has an invalid length. [ 502.393154][ T9822] netlink: 666 bytes leftover after parsing attributes in process `syz.7.891'. [ 502.641698][ T5929] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 502.956874][ T5929] usb 1-1: config index 0 descriptor too short (expected 39186, got 18) [ 502.967783][ T5929] usb 1-1: config 54 has too many interfaces: 97, using maximum allowed: 32 [ 502.986960][ T5929] usb 1-1: config 54 has an invalid descriptor of length 154, skipping remainder of the config [ 503.002329][ T5929] usb 1-1: config 54 has 0 interfaces, different from the descriptor's value: 97 [ 503.017073][ T5929] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 503.026755][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.042564][ T5929] usb 1-1: Product: syz [ 503.048456][ T5929] usb 1-1: Manufacturer: syz [ 503.059218][ T5929] usb 1-1: SerialNumber: syz [ 504.871185][ T5929] usb 1-1: USB disconnect, device number 21 [ 506.497435][ T9853] team_slave_0: entered promiscuous mode [ 506.497536][ T9853] team_slave_1: entered promiscuous mode [ 506.603148][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 506.901353][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 506.983666][ T9] usb 8-1: config 5 has an invalid interface number: 168 but max is 0 [ 507.001443][ T9] usb 8-1: config 5 has no interface number 0 [ 507.159801][ T9] usb 8-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 507.260031][ T9] usb 8-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 507.336045][ T9] usb 8-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 507.347456][ T9] usb 8-1: config 5 interface 168 has no altsetting 0 [ 507.397374][ T9] usb 8-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 507.410201][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.418890][ T9] usb 8-1: Product: syz [ 507.428637][ T9] usb 8-1: Manufacturer: syz [ 507.439256][ T9] usb 8-1: SerialNumber: syz [ 507.689848][ T9850] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 507.701231][ T9850] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 507.758048][ T9871] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 507.915426][ T9878] openvswitch: netlink: IPv4 tun info is not correct [ 507.938137][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.963817][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.994034][ C0] usb 8-1: NFC: Urb failure (status -71) [ 508.009677][ C0] usb 8-1: NFC: Urb failure (status -71) [ 508.020258][ T9] usb 8-1: NFC: Unable to get FW version [ 508.053497][ T9] pn533_usb 8-1:5.168: probe with driver pn533_usb failed with error -71 [ 508.085429][ T9] usb 8-1: USB disconnect, device number 8 [ 508.101402][ T9881] netlink: 260 bytes leftover after parsing attributes in process `syz.0.908'. [ 509.478457][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.912'. [ 511.798752][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 511.831375][ T9902] tmpfs: User quota inode hardlimit too large. [ 513.991013][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 514.171953][ T24] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 514.180653][ T24] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 514.191362][ T24] usb 8-1: config 0 has no interface number 0 [ 514.197502][ T24] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 30768, setting to 1024 [ 514.208881][ T24] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 514.219850][ T24] usb 8-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.247349][ T9935] 9pnet_fd: Insufficient options for proto=fd [ 514.248633][ T24] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 514.266524][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.275472][ T24] usb 8-1: Product: syz [ 514.279928][ T24] usb 8-1: Manufacturer: syz [ 514.288232][ T24] usb 8-1: SerialNumber: syz [ 514.293787][ T5929] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 514.304957][ T24] usb 8-1: config 0 descriptor?? [ 514.311247][ T9929] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 514.319780][ T24] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 514.331831][ T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 514.347352][ T24] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 514.405868][ T30] audit: type=1326 audit(1747340820.502:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9936 comm="syz.0.926" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f999bf8e969 code=0x0 [ 514.461838][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 514.475260][ T5929] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 514.486781][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.495150][ T5929] usb 3-1: Product: syz [ 514.499377][ T5929] usb 3-1: Manufacturer: syz [ 514.504978][ T5929] usb 3-1: SerialNumber: syz [ 514.512327][ T5929] usb 3-1: config 0 descriptor?? [ 514.525143][ T5929] gspca_main: se401-2.14.0 probing 047d:5003 [ 514.710125][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 514.870048][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 514.877033][ T10] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 514.886557][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.897365][ T10] usb 2-1: config 0 descriptor?? [ 514.909356][ T10] as10x_usb: device has been detected [ 514.916690][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 514.936519][ T5929] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 514.943046][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 514.946268][ T5929] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 514.962657][ T5929] usb 3-1: USB disconnect, device number 13 [ 515.063529][ T10] as10x_usb: error during firmware upload part1 [ 515.070937][ T10] Registered device nBox DVB-T Dongle [ 515.110952][ T9941] Bluetooth: hci1: Opcode 0x080f failed: -22 [ 515.127591][ T24] usb 2-1: USB disconnect, device number 28 [ 515.147553][ T24] Unregistered device nBox DVB-T Dongle [ 515.149035][ T24] as10x_usb: device has been disconnected [ 517.096677][ T5929] usb 8-1: USB disconnect, device number 9 [ 517.170840][ T5129] Bluetooth: hci1: command tx timeout [ 517.177554][ T5929] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 517.214558][ T5929] cyberjack 8-1:0.69: device disconnected [ 517.727191][ T9975] FAULT_INJECTION: forcing a failure. [ 517.727191][ T9975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.744306][ T9975] CPU: 0 UID: 0 PID: 9975 Comm: syz.7.938 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 517.744337][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.744348][ T9975] Call Trace: [ 517.744355][ T9975] [ 517.744362][ T9975] dump_stack_lvl+0x189/0x250 [ 517.744387][ T9975] ? __lock_acquire+0xaac/0xd20 [ 517.744410][ T9975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.744431][ T9975] ? __pfx__printk+0x10/0x10 [ 517.744461][ T9975] ? __might_fault+0xb0/0x130 [ 517.744494][ T9975] should_fail_ex+0x414/0x560 [ 517.744514][ T9975] _copy_from_user+0x2d/0xb0 [ 517.744536][ T9975] memdup_user+0x5e/0xd0 [ 517.744557][ T9975] strndup_user+0x68/0xd0 [ 517.744578][ T9975] __se_sys_mount+0xde/0x410 [ 517.744593][ T9975] ? ksys_write+0x1f0/0x250 [ 517.744617][ T9975] ? __pfx___se_sys_mount+0x10/0x10 [ 517.744635][ T9975] ? do_syscall_64+0xba/0x210 [ 517.744654][ T9975] ? __x64_sys_mount+0x20/0xc0 [ 517.744670][ T9975] do_syscall_64+0xf6/0x210 [ 517.744691][ T9975] ? clear_bhb_loop+0x60/0xb0 [ 517.744710][ T9975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.744725][ T9975] RIP: 0033:0x7f5ed198e969 [ 517.744739][ T9975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.744753][ T9975] RSP: 002b:00007f5ed28d2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 517.744769][ T9975] RAX: ffffffffffffffda RBX: 00007f5ed1bb5fa0 RCX: 00007f5ed198e969 [ 517.744780][ T9975] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 517.744792][ T9975] RBP: 00007f5ed28d2090 R08: 0000000000000000 R09: 0000000000000000 [ 517.744801][ T9975] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000001 [ 517.744811][ T9975] R13: 0000000000000000 R14: 00007f5ed1bb5fa0 R15: 00007ffda2b67af8 [ 517.744834][ T9975] [ 519.466635][ T9988] 9pnet_virtio: no channels available for device syz [ 519.806439][ T9585] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 520.740283][ T9585] usb 3-1: Using ep0 maxpacket: 8 [ 520.751487][ T9585] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 520.777356][ T9585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.788891][ T9585] usb 3-1: Product: syz [ 520.796989][ T9585] usb 3-1: Manufacturer: syz [ 520.805358][ T9585] usb 3-1: SerialNumber: syz [ 520.862603][ T9585] usb 3-1: config 0 descriptor?? [ 520.875564][ T9585] gspca_main: se401-2.14.0 probing 047d:5003 [ 521.938628][ T9585] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 521.947325][T10013] fuse: Unknown parameter 'grou00000000000000000000' [ 521.960477][ T9585] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 521.985104][ T9585] usb 3-1: USB disconnect, device number 14 [ 526.740065][ T59] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 527.581632][ T9585] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 527.820871][ T9585] usb 1-1: Using ep0 maxpacket: 32 [ 527.867746][ T9585] usb 1-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 527.891158][ T9585] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.945020][T10056] fuse: Unknown parameter 'grou00000000000000000000' [ 527.973561][ T9585] usb 1-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=17.ac [ 528.010039][ T9585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.022587][ T9585] usb 1-1: Product: syz [ 528.026839][ T9585] usb 1-1: Manufacturer: syz [ 528.031649][ T9585] usb 1-1: SerialNumber: syz [ 528.063270][ T9585] usb 1-1: config 0 descriptor?? [ 528.081717][ T9585] igorplugusb 1-1:0.0: incorrect number of endpoints [ 528.292953][ T9585] usb 1-1: USB disconnect, device number 22 [ 528.300153][ T5929] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 529.040101][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 529.088291][ T5929] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 529.098924][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.107211][ T5929] usb 2-1: Product: syz [ 529.113078][ T5929] usb 2-1: Manufacturer: syz [ 529.117811][ T5929] usb 2-1: SerialNumber: syz [ 529.140397][T10064] netlink: 32 bytes leftover after parsing attributes in process `syz.7.964'. [ 529.173587][ T5929] usb 2-1: config 0 descriptor?? [ 529.207221][ T5929] gspca_main: se401-2.14.0 probing 047d:5003 [ 530.278442][ T5929] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 530.301559][ T5929] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 530.312758][ T5929] usb 2-1: USB disconnect, device number 29 [ 530.365888][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.7.967'. [ 530.377603][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.7.967'. [ 530.388984][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.967'. [ 532.496879][ T59] usb 3-1: device descriptor read/all, error -71 [ 532.527063][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.975'. [ 536.888560][T10138] input: syz0 as /devices/virtual/input/input16 [ 537.812833][T10137] sd 0:0:1:0: device reset [ 537.928996][ T30] audit: type=1400 audit(1747340844.022:177): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10146 comm="syz.1.990" dest=20002 netif=wpan0 [ 539.720396][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 539.960042][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 540.097062][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.232247][ T9] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 540.287207][T10183] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 540.295078][T10183] overlayfs: overlapping lowerdir path [ 540.301185][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.309256][ T9] usb 8-1: Product: syz [ 540.313646][ T9] usb 8-1: Manufacturer: syz [ 540.322891][ T9] usb 8-1: SerialNumber: syz [ 540.334119][ T9] usb 8-1: config 0 descriptor?? [ 540.356765][ T9] usb 8-1: bad CDC descriptors [ 540.363003][ T9] usb 8-1: unsupported MDLM descriptors [ 540.629234][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.7.998'. [ 540.638368][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.998'. [ 540.679301][ T59] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 540.729525][T10180] syz.2.1002 (10180) used greatest stack depth: 18168 bytes left [ 540.781619][ T9] usb 8-1: USB disconnect, device number 10 [ 542.180299][ T59] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 542.246123][T10216] 9pnet_fd: Insufficient options for proto=fd [ 542.403033][ T5129] Bluetooth: hci1: command tx timeout [ 543.080042][ T59] usb 2-1: Using ep0 maxpacket: 8 [ 543.099643][ T59] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 543.119426][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.129075][T10220] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 543.139349][ T59] usb 2-1: Product: syz [ 543.143679][ T59] usb 2-1: Manufacturer: syz [ 543.148310][ T59] usb 2-1: SerialNumber: syz [ 543.157413][T10220] overlayfs: overlapping lowerdir path [ 543.176068][ T59] usb 2-1: config 0 descriptor?? [ 543.188361][ T59] gspca_main: se401-2.14.0 probing 047d:5003 [ 544.430440][ T59] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 544.452773][ T59] se401 2-1:0.0: probe with driver se401 failed with error -110 [ 544.851212][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 545.152045][ T5129] Bluetooth: hci1: command tx timeout [ 545.547551][T10244] program syz.0.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.924363][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.670649][ T31] INFO: task kworker/0:4:5874 blocked for more than 143 seconds. [ 616.678548][ T31] Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 [ 616.686261][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.695199][ T31] task:kworker/0:4 state:D stack:22440 pid:5874 tgid:5874 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 616.707880][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 616.714653][ T31] Call Trace: [ 616.717959][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 616.720968][ T31] __schedule+0x168f/0x4c70 [ 616.725542][ T31] ? schedule+0x165/0x360 [ 616.730362][ T31] ? __pfx___schedule+0x10/0x10 [ 616.735271][ T31] ? schedule+0x91/0x360 [ 616.739644][ T31] schedule+0x165/0x360 [ 616.744383][ T31] schedule_preempt_disabled+0x13/0x30 [ 616.753839][ T31] __mutex_lock+0x724/0xe80 [ 616.758415][ T31] ? __mutex_lock+0x51b/0xe80 [ 616.763546][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 616.820428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 616.825554][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 616.875878][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 616.886434][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 616.892674][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 616.898546][ T31] process_scheduled_works+0xadb/0x17a0 [ 616.904315][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.910949][ T31] worker_thread+0x8a0/0xda0 [ 616.915583][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 616.922047][ T31] ? __kthread_parkme+0x7b/0x200 [ 616.927029][ T31] kthread+0x70e/0x8a0 [ 616.931396][ T31] ? __pfx_worker_thread+0x10/0x10 [ 616.936544][ T31] ? __pfx_kthread+0x10/0x10 [ 616.941477][ T31] ? __pfx_kthread+0x10/0x10 [ 616.946091][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.951508][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.956743][ T31] ? __pfx_kthread+0x10/0x10 [ 616.961438][ T31] ret_from_fork+0x4b/0x80 [ 616.965902][ T31] ? __pfx_kthread+0x10/0x10 [ 616.970959][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.975815][ T31] [ 616.978866][ T31] INFO: task syz.6.801:9491 blocked for more than 143 seconds. [ 616.986604][ T31] Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 [ 616.994395][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.003477][ T31] task:syz.6.801 state:D stack:24568 pid:9491 tgid:9490 ppid:7417 task_flags:0x400140 flags:0x00024006 [ 617.015504][ T31] Call Trace: [ 617.018791][ T31] [ 617.021762][ T31] __schedule+0x168f/0x4c70 [ 617.026294][ T31] ? schedule+0x165/0x360 [ 617.031083][ T31] ? __pfx___schedule+0x10/0x10 [ 617.035974][ T31] ? schedule+0x91/0x360 [ 617.040473][ T31] schedule+0x165/0x360 [ 617.044647][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.050259][ T31] __mutex_lock+0x724/0xe80 [ 617.054873][ T31] ? __mutex_lock+0x51b/0xe80 [ 617.059584][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 617.065158][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.071317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.076581][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 617.082563][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 617.088923][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 617.095086][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 617.100311][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 617.106069][ T31] rfkill_set_block+0x1d2/0x440 [ 617.111019][ T31] rfkill_fop_write+0x44b/0x570 [ 617.115921][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 617.121587][ T31] ? security_file_permission+0x40/0x290 [ 617.127230][ T31] ? rw_verify_area+0x258/0x650 [ 617.132143][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 617.137557][ T31] vfs_write+0x27e/0xa90 [ 617.141882][ T31] ? __pfx_vfs_write+0x10/0x10 [ 617.146677][ T31] ? __fget_files+0x2a/0x420 [ 617.151778][ T31] ? __fget_files+0x2a/0x420 [ 617.156376][ T31] ? __fget_files+0x3a0/0x420 [ 617.161241][ T31] ? __fget_files+0x2a/0x420 [ 617.165886][ T31] ksys_write+0x145/0x250 [ 617.170312][ T31] ? rcu_is_watching+0x15/0xb0 [ 617.175198][ T31] ? __pfx_ksys_write+0x10/0x10 [ 617.180457][ T31] ? do_syscall_64+0xba/0x210 [ 617.185201][ T31] do_syscall_64+0xf6/0x210 [ 617.189711][ T31] ? clear_bhb_loop+0x60/0xb0 [ 617.194491][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.200531][ T31] RIP: 0033:0x7feda338e969 [ 617.205001][ T31] RSP: 002b:00007feda4262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 617.213812][ T31] RAX: ffffffffffffffda RBX: 00007feda35b5fa0 RCX: 00007feda338e969 [ 617.221845][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 617.229838][ T31] RBP: 00007feda3410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 617.237926][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.246188][ T31] R13: 0000000000000000 R14: 00007feda35b5fa0 R15: 00007ffc259b2ac8 [ 617.254235][ T31] [ 617.257270][ T31] INFO: task syz.1.794:9496 blocked for more than 143 seconds. [ 617.265188][ T31] Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 [ 617.273355][ T31] Blocked by coredump. [ 617.277971][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.286712][ T31] task:syz.1.794 state:D stack:26520 pid:9496 tgid:9496 ppid:5832 task_flags:0x40004c flags:0x00004002 [ 617.298756][ T31] Call Trace: [ 617.302430][ T31] [ 617.305402][ T31] __schedule+0x168f/0x4c70 [ 617.310045][ T31] ? schedule+0x165/0x360 [ 617.314437][ T31] ? __pfx___schedule+0x10/0x10 [ 617.319307][ T31] ? schedule+0x91/0x360 [ 617.323588][ T31] schedule+0x165/0x360 [ 617.327755][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.333640][ T31] __mutex_lock+0x724/0xe80 [ 617.338176][ T31] ? kobject_put+0x43f/0x480 [ 617.342814][ T31] ? __mutex_lock+0x51b/0xe80 [ 617.347503][ T31] ? rfkill_unregister+0xc8/0x220 [ 617.352669][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.357732][ T31] ? __pfx_device_del+0x10/0x10 [ 617.362882][ T31] rfkill_unregister+0xc8/0x220 [ 617.367751][ T31] nfc_unregister_device+0x96/0x2a0 [ 617.373367][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 617.379096][ T31] virtual_ncidev_close+0x56/0x90 [ 617.384208][ T31] __fput+0x449/0xa70 [ 617.388207][ T31] task_work_run+0x1d1/0x260 [ 617.393117][ T31] ? __pfx_task_work_run+0x10/0x10 [ 617.398248][ T31] do_exit+0x8d6/0x2550 [ 617.402477][ T31] ? __pfx_do_exit+0x10/0x10 [ 617.407116][ T31] ? rcu_is_watching+0x15/0xb0 [ 617.412001][ T31] __x64_sys_exit+0x40/0x40 [ 617.416526][ T31] x64_sys_call+0x21a3/0x21c0 [ 617.421595][ T31] do_syscall_64+0xf6/0x210 [ 617.426143][ T31] ? clear_bhb_loop+0x60/0xb0 [ 617.430909][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.436829][ T31] RIP: 0033:0x7f390f78e969 [ 617.441276][ T31] RSP: 002b:00007f39106bbfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 617.449693][ T31] RAX: ffffffffffffffda RBX: 00007f390f9b6080 RCX: 00007f390f78e969 [ 617.458087][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.466144][ T31] RBP: 00007f390f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 617.474217][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.482999][ T31] R13: 0000000000000000 R14: 00007f390f9b6080 R15: 00007ffd96037938 [ 617.491162][ T31] [ 617.494227][ T31] [ 617.494227][ T31] Showing all locks held in the system: [ 617.506099][ T31] 2 locks held by ksoftirqd/1/23: [ 617.511520][ T31] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 617.521641][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 617.533250][ T31] 1 lock held by khungtaskd/31: [ 617.538130][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 617.548206][ T31] 5 locks held by kworker/u8:4/73: [ 617.553474][ T31] 2 locks held by getty/5586: [ 617.558179][ T31] #0: ffff8880309060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 617.568204][ T31] #1: ffffc900036e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 617.578362][ T31] 3 locks held by kworker/0:4/5874: [ 617.583616][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 617.594635][ T31] #1: ffffc9000477fc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 617.608196][ T31] #2: ffffffff8f5b90a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 617.619799][ T31] 2 locks held by syz.6.801/9491: [ 617.624851][ T31] #0: ffffffff8f5b90a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 617.635129][ T31] #1: ffff888069a5f100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 617.644871][ T31] 2 locks held by syz.1.794/9496: [ 617.649954][ T31] #0: ffff888069a5f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 617.659793][ T31] #1: ffffffff8f5b90a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 617.670161][ T31] 2 locks held by syz-executor/9660: [ 617.675475][ T31] #0: ffff88807a901118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 617.685896][ T31] #1: ffffffff8f5b90a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 617.695971][ T31] 1 lock held by syz.1.1009/10205: [ 617.701115][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.709581][ T31] 3 locks held by syz.2.1017/10226: [ 617.714948][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.723532][ T31] #1: ffff88807cc71100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 617.733213][ T31] #2: ffffffff8f5b90a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 617.743217][ T31] 1 lock held by syz-executor/10231: [ 617.748519][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.757237][ T31] 1 lock held by syz.7.1018/10235: [ 617.762579][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.771105][ T31] 1 lock held by syz.0.1021/10243: [ 617.776239][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.784803][ T31] 1 lock held by syz-executor/10246: [ 617.790159][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.798682][ T31] 1 lock held by syz-executor/10248: [ 617.804050][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.812606][ T31] 1 lock held by syz-executor/10250: [ 617.817915][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.826481][ T31] 1 lock held by syz-executor/10252: [ 617.831799][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.840338][ T31] 1 lock held by syz-executor/10254: [ 617.845648][ T31] #0: ffffffff8e79d968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 617.854150][ T31] [ 617.856475][ T31] ============================================= [ 617.856475][ T31] [ 617.865121][ T31] NMI backtrace for cpu 0 [ 617.865135][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 617.865154][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.865165][ T31] Call Trace: [ 617.865171][ T31] [ 617.865178][ T31] dump_stack_lvl+0x189/0x250 [ 617.865209][ T31] ? __wake_up_klogd+0xd9/0x110 [ 617.865229][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.865250][ T31] ? __pfx__printk+0x10/0x10 [ 617.865284][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 617.865302][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 617.865316][ T31] ? _printk+0xcf/0x120 [ 617.865343][ T31] ? __pfx__printk+0x10/0x10 [ 617.865368][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 617.865385][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 617.865404][ T31] watchdog+0xfee/0x1030 [ 617.865425][ T31] ? watchdog+0x1de/0x1030 [ 617.865449][ T31] kthread+0x70e/0x8a0 [ 617.865470][ T31] ? __pfx_watchdog+0x10/0x10 [ 617.865488][ T31] ? __pfx_kthread+0x10/0x10 [ 617.865506][ T31] ? __pfx_kthread+0x10/0x10 [ 617.865523][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.865540][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.865558][ T31] ? __pfx_kthread+0x10/0x10 [ 617.865575][ T31] ret_from_fork+0x4b/0x80 [ 617.865589][ T31] ? __pfx_kthread+0x10/0x10 [ 617.865607][ T31] ret_from_fork_asm+0x1a/0x30 [ 617.865642][ T31] [ 617.865647][ T31] Sending NMI from CPU 0 to CPUs 1: [ 618.013200][ C1] NMI backtrace for cpu 1 [ 618.013218][ C1] CPU: 1 UID: 0 PID: 73 Comm: kworker/u8:4 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 618.013241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.013254][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 618.013281][ C1] RIP: 0010:_raw_spin_lock_irqsave+0xa2/0xf0 [ 618.013303][ C1] Code: 02 00 00 74 05 e8 fe b8 75 f6 bf 01 00 00 00 e8 b4 37 3f f6 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 75 08 c9 86 4c f6 48 83 c4 08 48 89 df e8 ed 2a 4d f6 48 c7 04 24 0e [ 618.013320][ C1] RSP: 0018:ffffc900015677d8 EFLAGS: 00000046 [ 618.013334][ C1] RAX: 0000000000000002 RBX: ffffffff99a0ec70 RCX: 0000000000000000 [ 618.013347][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff99a0ec88 [ 618.013359][ C1] RBP: ffffc90001567860 R08: 0000000000000001 R09: 0000000000000000 [ 618.013371][ C1] R10: dffffc0000000000 R11: fffffbfff1efba6f R12: dffffc0000000000 [ 618.013385][ C1] R13: ffff88804aad1000 R14: 0000000000000a06 R15: 1ffff920002acefc [ 618.013399][ C1] FS: 0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 618.013414][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.013427][ C1] CR2: 00007f6c1db39f38 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 618.013444][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.013454][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.013465][ C1] Call Trace: [ 618.013472][ C1] [ 618.013479][ C1] ? debug_check_no_obj_freed+0x17a/0x470 [ 618.013511][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 618.013531][ C1] ? crng_make_state+0x13a/0x700 [ 618.013558][ C1] debug_check_no_obj_freed+0x17a/0x470 [ 618.013596][ C1] ? skb_release_data+0x69a/0x890 [ 618.013620][ C1] kfree+0x117/0x440 [ 618.013650][ C1] skb_release_data+0x69a/0x890 [ 618.013686][ C1] consume_skb+0x9e/0xf0 [ 618.013709][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 618.013738][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 618.013768][ C1] process_scheduled_works+0xadb/0x17a0 [ 618.013812][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 618.013849][ C1] worker_thread+0x8a0/0xda0 [ 618.013867][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 618.013892][ C1] ? __kthread_parkme+0x7b/0x200 [ 618.013916][ C1] kthread+0x70e/0x8a0 [ 618.013937][ C1] ? __pfx_worker_thread+0x10/0x10 [ 618.013953][ C1] ? __pfx_kthread+0x10/0x10 [ 618.013974][ C1] ? __pfx_kthread+0x10/0x10 [ 618.013993][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.014012][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.014033][ C1] ? __pfx_kthread+0x10/0x10 [ 618.014052][ C1] ret_from_fork+0x4b/0x80 [ 618.014070][ C1] ? __pfx_kthread+0x10/0x10 [ 618.014089][ C1] ret_from_fork_asm+0x1a/0x30 [ 618.014126][ C1] [ 618.018648][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 618.306029][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 618.317936][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.328440][ T31] Call Trace: [ 618.331816][ T31] [ 618.334760][ T31] dump_stack_lvl+0x99/0x250 [ 618.339405][ T31] ? __asan_memcpy+0x40/0x70 [ 618.344024][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.349239][ T31] ? __pfx__printk+0x10/0x10 [ 618.353862][ T31] panic+0x2db/0x790 [ 618.357785][ T31] ? __pfx_panic+0x10/0x10 [ 618.362221][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 618.367628][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 618.373010][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 618.379191][ T31] watchdog+0x102d/0x1030 [ 618.383536][ T31] ? watchdog+0x1de/0x1030 [ 618.388065][ T31] kthread+0x70e/0x8a0 [ 618.392152][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.396839][ T31] ? __pfx_kthread+0x10/0x10 [ 618.401466][ T31] ? __pfx_kthread+0x10/0x10 [ 618.406155][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.411363][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.416578][ T31] ? __pfx_kthread+0x10/0x10 [ 618.421228][ T31] ret_from_fork+0x4b/0x80 [ 618.425742][ T31] ? __pfx_kthread+0x10/0x10 [ 618.430343][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.435137][ T31] [ 618.438427][ T31] Kernel Offset: disabled [ 618.442762][ T31] Rebooting in 86400 seconds..