last executing test programs: 7m17.21467177s ago: executing program 0 (id=300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000005c0)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffffb) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}, 0x5, r6, '\x00', @auto=[0x37, 0x2a, 0x39, 0x40, 0x3a]}) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}, 0x5, r6, '\x00', @auto=[0x37, 0x2a, 0x39, 0x40, 0x3a]}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xc0c719fe1b69ce50, 0x0, 0x2, 0x0, 0x1}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xc0c719fe1b69ce50, 0x0, 0x2, 0x0, 0x1}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400fbc645aa010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a33000000000900010073797a300000873371df3719c900502af64b020df36a0000480005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a320000000020000000000000000000018008000340000000010c0004400000000000ebd9de7b8523301bc2c5bd91d0f51d0000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xd8}}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004280)="2e4873287601f85136cfd130057f46858b881fa5215207c9967fcf0f5f2dbcfaf5f71e052d6a79ec84e9d9e77b90f3d0d5bfc45df24b5264ce499af778ea2faf90d3a5e09a9c281ae8c55ca289b4b0189d59c4588bea9df9eeef203b55b20e6caf9096f12946cd053d66000a7ad60ba22dd1d46b4a629e922d7708ad5570454dc8994b000ba51b2e238494325a0bc8459b0e6980d765fafb13f5674efef6900f22a5bef42666fd74dba081e077cede0090dbc56abd256cafdcbc1be261d26e8a40d54f75a4a6332d6ad961c8662f0fb3e600adc9d1f2576636843df56482b4577ddd66e9ca89647f6d24681c62ef517b229a095048ebb442ee7a07f96c9bfbdfc838e30138671e631bd99834a5079b4524125246c8005158050ef361b1de91ddc42fbad6cdf371a0e02ba44cca19fa1f464560f730e0b6f7754bcf8652a585061dba72c9026b621526ff21ec33872bfddbbe6dd7c3641d6b7a1de064dc254dee3642aa0c58c5faa6b1f113f9f54c9bf69e50cc4b58aa3312365eef5c0fc2fcf710fd3f52d5cad80c189feeca45be913c690fe3712019855a365dacf76181df7bfe09a15d6e4b521b0359f2523a077836ce0ee35240a8eddfd8f3a6136dc14315b8caacead393ebd06be10812e4ba0b506f6448ae18d455f567609fb53f8a88c1a0678a88bd0fae75839f710a40ce98d9bc59cd30f43cde8eb00c145b1e045dc3cda7abba6d6738e927eb14ab05b708caf38a825ffd3a157f99b266ed1d4018cda94251d4ce8ae7bbe1768356a1e08aaf6b47c3b5a8cbf5a0ae18d523831a7dc827a48d67d5962c58a140cadca3a0120f22e06d4f61b8cb98ff3a2e559de7625a454ee7e3d9bcb5543b4b4de6e323abd97655e7cc5e608e902680017227b24690eebc56f9b6d197b7fc10456aec0292d2b7d55b329e282fa756b29767b4746e22100ff07e0d49336e2092ff35ac119a7cd5c3622d480c44410a24944804487327c764ff0d990eae2a45d8fe20e9796471e78d35f64c72261948738f5e822a08d4eaba65535333027979fc93f9c007cf23d00ae861eeb70ac16aebed7000d0ddba7e7a4df396f2b1b92f32ed8b2afd04ed9e931168dfd91715a643ce767d744148a04300260631687f59fa7acc1d2df3ffcd570c22c726f11d401e6ce7d95637078cd1318e3e0c4a63c416343712d5959f6331f5d65289d81ad2a83936779e7fda4806e1a6b7801ce771986fd45d392d876c9894b0e32b14bb622fadfec475016f08312cb4bfd0016fbccacccb8b21d28dd64fb486da6cc90c03cb9698107209b08d299e5d9d003e56a7779fcaeee07249e07de6b3e22bb5ad8b00f7dc5bfa00d0bf80cfbbf242b3f5321e1d8a94a03f127894b058b7cc21e48834350ee3e670756e26e00bc1257e3eb9373ed41c146771e4cd2b866cd98d39d726f3f47ba083ce2d716856ac40d30e1a5d3d27777807abc962cd8e9c84d189add6455a4d6d13bdb84b7de4fccba982f6af55b23189c5b0ade8f118fa5c27cfe0f8b0ba56a5ee946657dfc932759b74bcb129acb5712ff460590225ca1c9afb70d972533b709863470eec623e8b73ff06e7533eed7f697365ca65dfe1ccffb599d7868c147606d6cabe6d633acae6f531e6864ede4f246cb7cce6d480b571b08791ee50e509eafa3163b6891d06c56a4ccda73a3922822b90fb79001569983d91d5cd3cb1513ab897c860c06f9880f0f9d9e6db0007d37726a64c2e1b80d3d9753490453ddb312ecfce8e662a4f841df5ce9f221075b9284ac9597e33f1ccd4f0509ef3498a367781d44c39cfa047adcbd65c9f05161c59918f9eb063f182de33afa54170eba0ce0fc86f679d4aae1762acf62fd4b2defa4aed42c95622e4f2f6850dd7dd395daf6a123c454cfdd5a1cb73f271c126c9bf9f4eb9cd813d370660aa21297d932cae6fae4c99187cd5ca2d5d649c503f5e37f65877cc3c55a01943d45ed1b32ec809b665f06c11494c59af13a3a3b90875d42dd6e0348a2ce827149dce5fa41656b03ee85b24e1ca1835c7bcc801257ba94d2c273a0913f521981386031fd9b8fcca3172a13080315009d500a92b76dfd8a7502c7944eb8353e220a6d8ab500176dca8535a0cff1df08fa442001c660f68077d835568d3f35b87e88b67b09419254652e926f77e7247734b8f1a8dd3bbd417f467882f64844ed3aec3b3b89906e7dcd9614a90f316e7b5fc513a3ae2b0fe1862c0202733be2f374c97bad91544274d212af903eed4619d29345a2aeb44ab427d9699a91eda36acc7bf676e1145f4f63007a5660e544c52649dd299a2843ef5103c3de81dea0582a072b8b20a64fc1682733d7497e5d797c898878f5b78de76f2a87eebc839192c5160cdfa49a89cdc2b0d9f13aa26a0a5d93d4a84d1d40ab709400e26417cc5890e390f0471bedff05c1889789486f5287f67c5f19f422c6194975182fd80e6e9e15c8dbea17db5a265be90b40fd17985c9a6f5b7fb746e2ea98e28dbc270cd77209292e526510a996b330d726e995ea85490c6a0d21744b641ccea3c6017afd94919ccccde0e736cdf5528f7c7e47547ac959eb3bf6c7d0d8226906611c6ef5de98c96771513decde7f0264a76b8db2406ebb9ca4fce6d72177aa82df4bba951edc727a3b521bb2c16c9cf684966880283235e6d842e9e8686cfb8085791327f020adf428542534ebe7fa3da33cc01672e97a28c64e95e4604c43d94977bd7cd1cd66f64c8b92749892eeecbe89edae59f44d18f2112683c2be4db2050e22d004ffa67c717fd82796556d927a21646f2e773d56044cff5d649d3e4c6ce359f38fcdd39781f684ce3c7850363cc49d996fd85ff47c61751e37846f31ae0f8f98d2397069acd5125ac1604b309a5dba69433e993b861cf9e36c1a63d20689031722e58b09f59cfe17528e2fc6a6eb12185d9f34443abb7b5c498589a137b1bc795ee8441efb535492560dd328f83015694a0e9a9fc877d1a5b513d59fa3ed23fc4b06e9b4ee37514c05b3e71269f3c2ef4e10855fb5e8a38b0949ef934ed983937c537dbf7736b0a77e8d060ab1f3f472ed03c45c1f3835bb50edea7d79962034dfee971b7d18b367f71fdc82b69f819010276005ba873fba4e022d80da51f4ba1a407b2e3d415089843d04aea759c34929e2294094c56f392b6a33ff711a799e6659f25dfc441e5784a87487baba5cc67d0846d95f0fedf3e8c4570cc9ce6752bf7cb7f48f063f37df118599e41819dd2ca6e1bd76ed8082fed252af4856b64b5cd43ee057641c0fb4e4a1fd1a65db8b1daf34950e28631750c7a64faeb559a02e167b1e5c0615a1b83290caae5f5a1903be33c3c642364f2b488b8f4005179772733cfcf4e9117868f5eb0c7939d7a9455760f6e65282b558c457ad23e4e15780eaed53409d2f61806bc96c11862e0e6cd64ea9a64f0798c9d783771720e9d30bb66b45ad5d15142a635291d9075860a39b8b3c0863ffd4dfa192abde7124a07c9291ab67d64a0116eaf8b21732d21cfc502743612729c8e68fbd9a27ca71b369d7d651a4b9fa4b1125a7e72c3120fc87d072c89c82387e93d871cdff78373e93e40e8354e1847686c7a11596b76cb156fc95aa05a589f1e62cd39aa806e82edcd313532d5f1516e85c64ccc0bcb5e4b28a3a332d46c170acf3210ed064696b58f146c69b82e69f8fa10dd3143c5ec9888e1ae78fd1245d2627644eda2de82c427417d098e89cf7af667925ecfa6e5ad61baeb319fedc8d82ccc7e1858c510a8ed0515683d469d543889b0e98360d4ef6b52f181ebbf978f71a1cf12dce0f8ce6b0e54a0d0ad16da6ad008ba73c8a33d1a65633cd8ef2da280003068efcf393678d50697369bff598b6c40c9f915072b101e247940b61534b068e478baad65e706a1fae8a21cea845fc8a7f8e2c3d6eb73e23f589da655b390b93217d5c7600eb1eebffe15ffa2f8e705b385d7118575603f9c91a94abd288b4487b678b618701c21ac2fb663f1e3efadb7ae46b5002010613a8288c8830712c5be5d74a4b2c4ea4e826873bae5619117aebc92d3ae6639fca95c67976cf53e6bdc7a17b9f0e46307299edbf09037ebbc14856e40b04d324319ece297b8bca0215c17c9335bb3f04fc062735fe816234b9e25761076eb9c3655f7ef6fbcaace9d839b3f1d62b5571d38b2e346db1ab87e4bb5077d7033b2a74bb8c334a0cb6322c4080bec40ca70ea34b1cdef76bc0030c7c4066a638fad87436cbf62f18b9f063e7e180f8e15dae5532e4b36cf1cf14629fddb9a93324cf13c5fd91ba987fc963a19077ff49252273c1429efe9fce9bad7c28c5cd19ac664af463d134c9d1211c29a9822184e9f7af519f64a5c2cd71666fbe49a86de739158bea252f259dfc850335662eb9e9e757b86222d79966290378170846c30cb17d84b8bfba322e9adf6a64006bceca72232f875af00d86f4fc447f1e3cf60adbea884f67b0ff204246695f3f02e7d7e6875eedd33063e83ecee67e2287f8456938195cf8a69b7493438a56b0cc506ff08a00e255867b7baaccec6612cb6eb96059635c529183d91fc6bee938942987530b1d94193af9733f58194aff199a1855c1cd39e95c8a2897f49208917125194c3f081b35cb629144ff0c1deedfffa67cb673eeee3c640bdc15805ddd368ff41a0910c0df0f614570451ade2aabd0ff7b563150456916afc1a22c791c693496fcdfbe6e13c6cd80952dbbcb09f4e286cc4f336cf0b7e0c94bc8e20a849818c7f6d79fbdb8cd7512186c132f62c4d5f80decd192d77e1094f94a80d48d1921e1e8b15ed4a2df48b279c33ceb7c57b1c2b43b4db4233d78b1df7063cfe0953eb815aed5fe8e85ffea0bbd3ac4af4113edfb9eafeb7613b1803414a630b95ec6ad2d9fbf44fb4ecfbcef8f1cb781a73ff03a96508a5924da6229726e580521019f2c0a47225556004f9a581da2e43d674db8e1c9371fa5050b88f0c4ac80ba48af045bf8f3387acebed27a4c0300002af87eabadff0700785c697eb2fdf41a256189f7e4a85c9fd7ebf08765f834e071aa78c595441adbb59361c0d5c9a22742efa2c6631047a13929bc4de2931f55640d0b33aba48d3c80bdf48d1f4cc3eb5280ebff23f6d9e277052beb969ba3c7cce7ebbcd53178513d4e85ba0c8b2eabe9f86bdf2f7091773cbc4275634691a6c5882ced2520097cb069cea37cbf0cf131a97215caa259e5fafa184f2ead784e8c67dda1990b2da413ec7f0ef290e3693b0b35b400c2c30f79ea83ac3bbe778c5b781aa2586eff3d6d5a9c59e31d135061b2135a1dbb7a56bbdf5e7df18c94fb2bdd89b459bed354864285f3b75cb5cc155dd517df9c77738d43da7f6ef72478ffb1d72da8e1a9c3ef52026cd10cdf50702b828f8e0375827c231955e4c5b962c395caed544739d068e7a2af70ae9c5e67c4a58669be8f145ee4eb8b1bc4e34c4fa8a160005c7cd1d9d11e4e468404446ea03c135ed17fffcdc5bcf0aafe1cb391df475fee02233dfe431aac3963c233cbd6e10c8da430d996bd83909827370fab655ead2f74e9a8170e5e6eee8fbfc63db267eb4b38f6d70d55878a6e76b3ff880de8a572cb6a4aaf46b2fa59b3458116734f7d5f41c892c62c58822e6555c95138e81756d840e3a473250480b8c7996e343979870b4e37efe72dc9455f74c52325ed510e40e8f3088b4fc24dd221c3b3417c6fb2d834c33e820fc0c856add9ba00fc750345b038f3b15870a02845eb262d51966294306970ded11f1452a40f40aab1e309e7285fe4a59587ade9e6caf1ffa0120fa9ad3a20034fc05254ec03ac20b67ecd7953841fe7d5b027ac7f3beb53f49a6338c74b80bc4b6a4146943f3ced5bea0265e1f85c37446ffeaf1842251bd72c083aa20b19eeda80a47e4433ee349c8650a88fe66d088e696a3a5e89ef4e2bc1cd771622d1c34c4101fdd513c348f6039fd8758794f1d296c722621670640d1cac5cbdd15fdb2249960d7b0279023014aed792f5d14be6551d5d114fc1cd080797e84f8d9fe6e8885b125f8d219b215ea990880ea1be8a9a785250b67e953bb8036836e3fd20da6e6fb620ae2b80f3056ad07c48bfad810251bbbfd8d4efb4fd47c6552a13776d943f17a4916330dfba0561d1adc40d28c43c27b315c163f4df9e744de42f4323870442d512988bb3f9c0e2fe238cb606f71d0820f1517138961b44ece0c7ea5744a75c157eedc271ad8c0cfcb6ad83191c6710a7145acf6ce9fd77e85e1b758d3935b801ebd7fff92b63321b0af2cc9e5b2f30dcbc0893bb0634dfcceedb58839a2e4d76ae2290ae2c1e4a48fff3f01182d5063243c40f5c44e51fd8435d41e28d94e3e5f3e5b7c3fb2ecf8aac247a876bbd583146d96a0ecdc8dfa129b364ec7e8c445cbcb5107a378c8190668bfe55c7081ae89d4f89767c97907785542938f9113c41d8c4674abe836db2e62aa01b2421b54747217afe425723634275083fbf67b7750111bd070bd598aa099d388bee5d06a112d5acaa56b553a9b184e1d66e13b0fcd63bbec503207777567f7f0561692606985414eb66c1f5b63cb59c76cf5dcad1daf25df64bebcb7de092206af76cfd474b9c4f68e441bc767d858ea23d7f1b2ff7bf0ca266c125d7dd03a0fd3b132c7303eb7801f8d5007c3b1e428ce0a00b4478eccf02888f9853dcc6a108bb36ad8961f2272b1154e595d9ac4f5a52d979457f212fe96eaac708247a91b1d12cbd261b1fcce3cc25c0daa49b0efb2bd9f19c2f7b75e05f6658c60e3231ce56b8eade3bfad0d247aea2a46229c84f57b4ed3ebbe6459d16450d280c7736c0002b8342b24cc183e70b414f02b14cf9b131acc7b049518fad19fa29449e5b5d4d1c88f736ce19c4aef4251649e075c0d700bc93c2ae06fb53f73d524b601f8c5ec074676b6b7776c86b576b647749ed751799d43219472a46374e4e65ea469ec87b0d93b6cab74b3e0230f591680fb4aa1f119eba7c7bf96e46135a3a8abe42de652230f15bb3ec30eb1f09f7102738017df83f0b8f9f61d2ebd33408f1154999e8d10c95ea25552dcd7c791bc71df5b0075c1c672463c4b71e51ac335cc56bc173709d903e9e09e6d69325239a07cae7892ea90e1b08e8570e40dbcd61295a2a6ca6bda4b3267c152f33379166b5dbfca43f88f0cca90cf081e792a8523b5b246df73102bb429a72262d50755e69c464f41187387a10bca2b695ed637d48b8a71962e3a11a582f587ccb23dcb97ad9d9916935bc5748414120848ba238464cd8f1e949e35c247392f46ec2b674a9089d8b025d3bd2a635fa261e4d8614827e0f3a5ed0f5ad17998179aa80b36e1a06067ff01ea563d1c320d6bc3a92c9e3ee01a0b024645726d2bec1ffc4ef1c512c668f51f87ca010b70cb8526579762598a137848093206b0633c8920fe99567e49754cabc0ef3d06130e94b5d0b4c321552ad5e97b8b68d58067384df31c20ef2daeca3785c9cd104db0cbe6038d49742ee140c2284762d01bd678a8bea1fee0a0a25a12f9a63c5befbad83100e326f61029a2d918b17f7ba61e627b13ee7bc9e24ada3666222a4a145493e41cb07004ae1121a2c96f55dece273813a7872686492a8a5925f16faa795b132d9560e77c182c46fa5309d398fffe3d4e6b56a87ae01c620953028f94ac8a01c7b49fd34b92420ddb4a9fd569d314b6510fed30e33afabf20f2a573cb4b37b92ff1f1ecb57128f7736eccf3870b745ecf62b189acaeece3482d26b527ac9fc243b34fe98afecdaf6cd63e416d9225413c6dcc3539aa03b1bb6a9ea4ab14d7206f7ea3024306fa4f87176b63f1e6371dedcb50af0dc24743c091424bffb9e19ddcf59e004dd580d1d94c4008911ffea16b580600ca8b0e64317b223e7ffed909b837d0f5987f2eb224719bfb8e37c68269ed72c381f786ea694c5feecbed8c3925b1df4538e11a53b4394f03c8b87d87e51ebd2d1f7d41fbb18479feda4fb234f5eaba1dc82d149664a4585931fc6c8f8c4300bea6475b24d5071d99a2a01d7867d48f0c5bc1bf8f7235072b37b60e5f081c9a3b199ad35a8062ebaba0943d728d89e478bb54d128f9329727695217e9f6fa899e8a4e87bc5238e251089913bd18f3e715573bcd81817ef06eee56f38beeaafee07363aef2822a01a1a110f4091a9db6f3152c50f1c0153b183cc2ae7f2ca6604363aa05fb3ade548896fe51fbc71a6a8f9028ce4a8a0604b076ebd8deebcdbbb1c7b6cba059a34e4c785da524f802ba5f8add03576e6381d2a2bb88f908518e4e3e0eccd97213aea10f9ccb7c521eb19318accc7066f4b5346e3226d92c41d1cf73e7ac51d87d0660507983648a7267315c00bd0424f9e64a1ab0c75bf396e99abe6b88268f0be0b349ecd59d8f7069f6ced0e9353c87869940c102998b565059efa59cf5f5955f523f8b4af37cb98d9fea2bbc7623f0b8ca79c7cd511a15b06bc1e5df2a4deba242a0c466457f57e206b7b695820f5b0b7a5007d762296f9b61f5739ed7d4840d841a7858ba3f8d7e4972b5718a3d22ff6a75b5c6461907cd992e10ec71e365880663747bde711d9216b48ca2786906d2dc930a5d215d78a3163e7c0b1777b1bc2c5c15ae1c913ab746af9466387797e5bcde9e9fe191c437f4098f8ebfc10c082ce779dcf778ac54d155385d53f1de77a08846bab947a3cdbf5660ef8d01a83fb4ee50cf02cfca421fa5f4b9859e1986987f4e1aeebd907331bd6a65ee7f47386549f3ba7f93c38c811aec1ead972b066eeb106e3e8b0133ebed55bb52819b755186ccfa284a6b9c893b09f8502e4498280abd12301139e6ac1c2b276efb9dee92192cfbc33bd5327898d57b44cea544d33e0c53f3887f15894d12db6a892df5ae1b6d7f3f37b87bf622b402110cdcaf443b29d860d7dac998e44610f1ed28cda0ffb32854cffd8088eeff38e5a37b8cf1597b5e72d8fabc1c643c48f5b04c57da75a7c87614458dfa520bfd8d95671fab8350a09cc78f1a2aaa5e87e962783986ccd2a7b97e47b84d21597f4fd4fd2445ee95f8099dd8efb87c5a34973246670d9fda4181d3b1335ee724aa79940659b6a0c62ebbcf8a7b09d670941229ed65fef5247313f078effe0fc1c2d3510019da21d1ecc3d12112ca8fe6c691c146cd160bb78cc15d3c944c97bac5214736d0e484aca6266a1c3b0f70e75bd1ce35a5e8a28e229da3796b43add92f4c67e1e80843e088ef5a246ff0e421fc0b4faf598dc013a9e263f276e459364717f210c6366f1e070b9687126a9cbea9f7a66c2eefd0851c54196479b3c3a0bd33e1a5f34767cd0443697f68426ece2986d045bd2db6c0c1ddc9ba0073d2f9be5851bcc6a8e24d0af1e6b0a6826ef0e2d211a2ec3a24db0ae02945d98de01be9c40b62e3af3c9318c1c14ce1e65d0dcb63b55d0488b96a746a262feea4441ed29e9e0422fb18fdfb9ff976c871dbf33b212b5032b6cb4ee3bff586d12b9e3ca80caa0ea9439c940505d7286cf98c9e8083e05a2d0054fec8656f26f26703ed3ab77039e7565dc670d4652afbeaac8647c7ca87ebbe3454ae75f1ac3be003296cfaea54cd2437bd7cdf2d16aa28ad12c7af93a04731fbfe601bb2e6a68add03cf9337561e449e2f5234e497dd643a1489c9b367624c036a46517632114d74950fd83c3e9539ade3b52e8e001095deeb0eb8d1d0380c7463903f189cf80117e912f82c1519fc3909b3495cdf434d86ad644886466ae215618c41aa61a7c9377002efaec1e72764fc3be2baf2ddbdd4f00cd7edd902e36265e7e7bf41d5d0e596f36edf424f5d0417dc4c64e34c53e08d1383eaf5df98a2e17310e487711b7dd881d0894afbb5066cebaa4f10b17b8a25250a84e3957615444e844d8f768e530ced5481059f1c964d07663d5fde6fc138856cfdd74786309e4743869889e30f5600dbce233d8b85620f7e006db61150983c96e74f52c348abd06d571d15baea70e519b0ac7b6802e8c2323cc5b13670a39490da046c29fb2af0af7179e3751e0035d0ff834ce6f9a991b16db1418134d066dd0ee12737c7cf8059a7f943bd6f0e377699b9d87cedfc52eb64888ddc2313f562a885a3d910e3ec163cd3c39d83cec556584c7dda001c6c22c9bccc4388e168a85bdcb1b7ad8150544634a6a05d9124ee7ce02069b066a851662884439f0f1cc4b49d6f051dc5f5a60764561e4d9fe56440b19dc1e5add259c08b0adf0c60ab937375851f90114c15ef299e919673ea316d6893d2092d050fd02f76d39c1e70a2b2858e59860ab72e962c03238e94d623711fd25f832c3e41ba4f0a64d64a782b2c00d908da68220505d199544ef9a4e6a49092ee574eb0a896c416a2586af3c573ddadcf67cb4d32582f2cb423aa5a04c9c15bcaef6cff56da6d6490fc66c80058ea42803aa71e825da99245aba1ca5131db065ef444afad6f5222f1d037bdca16e1ebd47b4d1705d10a126adff2a72cb9c6ca41086318d1ae1a37feb20d9779beba998045476ee354da0a41d897b9a5e6f0155f9b62afde5557ca848c6c49f5bfb5ed94cd41a6c1ed5f2a9b2db20848d9ce99a90fd10f51854bb1ddccb2e76babab93b32371ee7cbb685541500e5059545b9de91bccf30708cde67281a34bd70a6f4bf637f115c551a1ff5b6a8f8d4fe401e3927163571b11e27fe4b0a118c11951b87540f73c23c92b6a883d571b027627b5df75c5127216b64c2379740429ca3a06a832a6d2fd380c5269ae46bf74ca13fa441c6e318b91379feeeda81758dc10478b6837af85ef645073e7fd4296239576c7e249251ef014bbe3dde737b1a1839f4e09c5b106ca850c0c61b5506d779149edbc3d8054ca8240820d7482813126f0c66cf913894a918f56fee8de97fd0aa09229d6f8dc95965c3f123f74c7870e28dd2f1bbb56d898153993c3e2e3af9832da91202c0a497a3b4daf2214b1ce7ca7aa8cfce74b2549e835ab92093fb8288693d09094b83988abdd23b9b6ab3606134a6b6c213a3cae6e4404a592c7b82ad9fc5ddf427ceed5e99e6b865341ec5406015866095e7f6801cd8396065872b6129d221351fdafd30b76e9e8eb8f77fc4646f1c1da029bb447e29764a571925d0c10d638b5a22caee0ee881fe971fa586c804fd39cc7b7955a2d83c3cc8878af70cbb7a77969d4f9c827bd60286e96fd9e502f044f2af0896809dc82cedc423472f79cba6d48cae1276576557bc44b2461b0b80a70d984f737642d68794c428cf0df326b4feef6ae228bbcc6e836813f8adb3a4859568527db08e0dc91a5a38d6c1d21dec82ba9fa89e570518df9c49a6cad28a925fd155ce41b3f574fcd7798beb00da4cd95665c479a42430bc7fa52a9cbda3f73e89244ca8475dc5f9d9c4c66aead1a4a76910633fab14e9b517da5bfa63d03a030db1871165173cf2d1086fd16d268b88ea93145cd7f6b02b203056a360f11900d6504155c84394140ea15e56212e4c9e3cf8227c985e23cafe0dd534302ecfe06482c0a4a7e156fce72ddebdde3a6eeada936790b", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0xfffffffffffffffe, 0xefffffeffffffe00, {0xf0f, 0xfffffffe, 0x0, {0xfffffffffffffffd, 0x80000002, 0x80000001, 0xfffffffffffffffe, 0x17a3, 0x3, 0x3, 0x1, 0xd, 0x8000, 0x4, r3, r4, 0xffffffff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000080)='./file0\x00', 0x9) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x9) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000580)={0xfffffff7, 0xa58, &(0x7f0000000380)="45d41e2a0a5966d3eeb36923706e5c411804833c56a1141bcb1a965dbc2d1ed164ec506f57e495eb109ca90ad52857dc68e1c5676c96144c09edb18612263a9286b952251c45347d0fee4be1629ba41d8240675c451eb38a7610217da5", &(0x7f00000004c0)="1dcdf3b7ca99be4629e1c2e016e6095518fd530458c1f91889e3dcda36d978da06b2350d368f525d909cf740c887a3d19cdc9ba8a1eacd08ad1561661db611ec85ea786a0dfae07ac1054a3b45cd010bcdc9381d31479a6f67ff76f2108c5b40902d0ce6d34ab8aaa4a7f0cb878a14c3dfd3adf586d40e1812e137020473cc8b02ba7062cab3", 0x5d, 0x86}) (async) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000580)={0xfffffff7, 0xa58, &(0x7f0000000380)="45d41e2a0a5966d3eeb36923706e5c411804833c56a1141bcb1a965dbc2d1ed164ec506f57e495eb109ca90ad52857dc68e1c5676c96144c09edb18612263a9286b952251c45347d0fee4be1629ba41d8240675c451eb38a7610217da5", &(0x7f00000004c0)="1dcdf3b7ca99be4629e1c2e016e6095518fd530458c1f91889e3dcda36d978da06b2350d368f525d909cf740c887a3d19cdc9ba8a1eacd08ad1561661db611ec85ea786a0dfae07ac1054a3b45cd010bcdc9381d31479a6f67ff76f2108c5b40902d0ce6d34ab8aaa4a7f0cb878a14c3dfd3adf586d40e1812e137020473cc8b02ba7062cab3", 0x5d, 0x86}) sendto$inet(0xffffffffffffffff, &(0x7f00000006c0)="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", 0xfc, 0x8000, 0x0, 0x0) 7m13.476564669s ago: executing program 0 (id=309): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 7m12.432290941s ago: executing program 0 (id=312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40880, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x2, 0x10}, 0xc) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000001600)={0x0, 0xea60}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xdce, 0x101, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r3}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x8a50adcc399d9d2a, &(0x7f0000000380)=""/150, &(0x7f0000000240)=0x96) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r4, 0x10}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r4, 0xe}, 0x8) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a0000000900020054495043"], 0x7b}}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$session_to_parent(0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073"], 0xd0}}, 0x20050800) readv(r1, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/133, 0x85}], 0x1) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 7m10.74702258s ago: executing program 0 (id=317): open(&(0x7f0000000080)='./file0\x00', 0x80100, 0x10) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='setgroups\x00') write$khugepaged_scan(r1, &(0x7f0000000080), 0x8) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_init(0x200, 0x0) write(r5, &(0x7f0000000240)="e6", 0x1) tee(r4, r3, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x8010, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0xe, 0x50565559, 0x3, @stepwise={0x200, 0x8f0, 0x9c, 0x0, 0x3ff, 0x6}}) shutdown(r2, 0x2) r7 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m8.793939033s ago: executing program 0 (id=323): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfff1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc5f2}, {0x6, 0x11, 0x9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r1 = socket(0x15, 0x3, 0x8) bind$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xc9, 0x5e, &(0x7f0000000300)="24638f3ce48814e8a499d6221194542d1d13b7385c90e544a487eb6e75bc80d6a1bcbc5b0e31e74536b81cc8fb093295ca15317aeb09bbfa52364527b679e3525354b74367930a4fc36ce2e33bae9f8e606e63e73aeff8b62aba2bf119d8341ded2374c54a3327f3abb0b9f4e5fe1b391934cb94e7f301887a5f2c2f95b33fc62532f891020169cf9783b5e737360af2e3addd9c642a183a90d2c3640b200d41d4b9f66534b8fc110ca6cd1ccdbe9fa70b53fd19cbf448d061df8bee9cc127d05753b171496a9a2fad", &(0x7f0000000400)=""/94, 0x5, 0x0, 0xf3, 0xa4, &(0x7f0000000480)="def857a096431d2d76d86b0beb75c17d3d707d61bf0a27d20d98d25a163e67af8c0703b735eceda2e7408b12c333b696c1edf02c44f4856dbd7211bcdac0961a4b646b32ffe8f5779f457fa824f45b14b52251f94586c72156c561ede14b016268ca16c3aa3b7cdfbbaa9fb59fb76268542638b3f38b0c88a5146211f78c047affb3edee60f8663903efa5c09b514d8c6bfb083457f8c61a79118a69a3284ae32601bea294803ac88db0439a27180d011c3119e36c99f6a063d623f83e4d6e4c88179e09f31ded797a91ceb54107f34bc147b17011993275f97863256bcae3f6549610d9641b4d261125b8d8b74a97473a6528", &(0x7f0000000580)="266107dd87164e21e40d77403aac21412fb11e6cb897d669f043cbca085327a2c071c536275b90898e444f582145e4e53fbab83bbebc49fc9f381ede47ad2b06733b9cbfa84e50193aa0596da31e38a3c6076e4beb5e3d16b329662f4f2cb4cbe3d16f7af9a070954ee4f776559c7a53b681f8dfde6549906f116b729849edb3eec1c34450ef77255d8b44201aef242ee5926d96b52b355b1b415e88c8d692f9ce884b97", 0x0, 0x0, 0x2}, 0x50) accept4$rose(r1, &(0x7f00000006c0)=@full={0xb, @dev, @remote, 0x0, [@rose, @rose, @rose, @netrom, @netrom, @rose]}, &(0x7f0000000700)=0x40, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) recvfrom$inet_nvme(r1, &(0x7f00000008c0)=""/163, 0xa3, 0x40010121, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000980)={0x0, "2373ac0cc24d70081b933f562c58ad64"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001980)={r7, 0x6, 0x0, [0x7, 0x5, 0x3, 0x228a3472, 0x10000], [0xfffffffffffffffe, 0x3, 0xd, 0x81, 0x0, 0x1, 0x1, 0x7, 0x1, 0xffffffffffffff81, 0x4, 0x2, 0x2, 0x31, 0x224f, 0x3, 0x100000001, 0x1, 0x81, 0x1, 0x3, 0x1, 0xc1d, 0x101, 0x1000000000, 0x2, 0x7919, 0x400000000000000, 0x86c, 0x7918, 0x7, 0x8, 0x8, 0x0, 0xc4a3, 0x2, 0x926d, 0x499, 0x800, 0x6, 0x4, 0x6d, 0x3, 0x1, 0x81, 0x4, 0x7fffffffffffffff, 0xe, 0xb1b5, 0xe3, 0x9, 0x9, 0x3, 0x6, 0x9, 0x5, 0x80, 0x438, 0x8, 0xfffffffffffffffe, 0x100000001, 0xfff, 0xb1, 0x100, 0x4, 0xa, 0x9, 0xea02, 0xa, 0x80, 0x907, 0x8000000000000000, 0x0, 0x0, 0xfff, 0xb43, 0x7, 0x2, 0x3, 0x7, 0x6, 0x3981800000000000, 0x7, 0x0, 0x5, 0xac1f, 0xfffffffffffffffd, 0x8, 0x10000, 0x2, 0x99c, 0x6, 0xb56, 0x5, 0x8, 0xbf75, 0xa1d9, 0x1, 0x2, 0x5, 0x100000000, 0x5, 0xe33, 0x7686, 0x3, 0xe, 0x200, 0x5, 0x5, 0x10, 0x21, 0xd2, 0x2, 0x7, 0xc8e, 0x3, 0x3, 0x7fffffff, 0x3, 0x5, 0x9]}) syz_io_uring_setup(0x25b7, &(0x7f0000001dc0)={0x0, 0xd799, 0x20000, 0x0, 0x374}, &(0x7f0000001e40)=0x0, &(0x7f0000001e80)) syz_io_uring_setup(0x18a5, &(0x7f0000001ec0)={0x0, 0x4a0c, 0x20, 0x3, 0x233}, &(0x7f0000001f40), &(0x7f0000001f80)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001fc0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x0, @fd=r1, 0x4d80, 0x8000000000000000, 0x0, 0x1, 0x0, {0x1, r10}}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x4, 0x3, 0x4, 0x1}}, 0x26) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000020c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x44, r12, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2800000, 0x8}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r11, &(0x7f0000002280)={0x8, 0x120, 0xfa00, {0x1, {0xfffffffc, 0x5, "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", 0x5, 0x8, 0x74, 0x7, 0x4, 0x9, 0x7}, r14}}, 0x128) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000023c0), &(0x7f0000002400)=0x4) sendmsg$nl_crypto(r1, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002580)={&(0x7f0000002480)=@get={0xe8, 0x13, 0x100, 0x70bd28, 0x25dfdbfc, {{'sha256-ni\x00'}}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002700)={&(0x7f0000002640)={0xb4, r12, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ee3a660999217353bbb0b5011db207cadcb1807a2145b700"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040880}, 0x800) write(r6, &(0x7f0000002780)="adc5889ce3e7e669de3ba168132f7f8fd6e735c67906c9bf291bfa3d59ab54995dc1fdd933be35", 0x27) 7m6.571035924s ago: executing program 0 (id=328): rename(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001080)={@any, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@my=0x0}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=ANY=[@ANYBLOB="fc9f1df8ff43eb2b000000000000000020010000000000000000000000000002a6000002000000000000000000000000000000000000000000000000000000003614126267265251b8b7d39e2c647e8bb946e4db40e182f0eacad3de2c5391bba3a3296f965287aaf30cbf34e30ee890098f9a5b9e5d05769dcf690df5d6d33ad3a527d8d31406dbe968eaf108f81664e92e8319a05e7af942f4f8b2be2969ae7dd5364c23c84cec26b0feee23ae8340e90ed729f06ff57e932b1eabfc20e99cbd744253064c5096dc18c83dc3d967664b155f4387a563cd76988c1c3471f9457e6693d753f19093229d4adc1f", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001280)={0xf, {"686cad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a907808d4ff3090000000000000075271b060029d169934288fd789aa37d1cfb5a40fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e2835f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cff85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000100", 0x1000}}, 0x1006) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) socket$inet6(0xa, 0x4, 0x10001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m2.224567794s ago: executing program 32 (id=328): rename(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001080)={@any, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@my=0x0}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=ANY=[@ANYBLOB="fc9f1df8ff43eb2b000000000000000020010000000000000000000000000002a6000002000000000000000000000000000000000000000000000000000000003614126267265251b8b7d39e2c647e8bb946e4db40e182f0eacad3de2c5391bba3a3296f965287aaf30cbf34e30ee890098f9a5b9e5d05769dcf690df5d6d33ad3a527d8d31406dbe968eaf108f81664e92e8319a05e7af942f4f8b2be2969ae7dd5364c23c84cec26b0feee23ae8340e90ed729f06ff57e932b1eabfc20e99cbd744253064c5096dc18c83dc3d967664b155f4387a563cd76988c1c3471f9457e6693d753f19093229d4adc1f", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001280)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) socket$inet6(0xa, 0x4, 0x10001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m30.533287684s ago: executing program 3 (id=906): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 2m29.66942884s ago: executing program 3 (id=910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000400000000f5dffeff95"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000680)=0x1000, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x4201, 0x3000a}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) clock_getres(0x5d2d578ddb601e47, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 2m28.472200739s ago: executing program 3 (id=917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x5, 0x7f, 0xffff, 0x0, 0x3fa, 0x2}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m27.494985389s ago: executing program 3 (id=921): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x6120480, 0x0, 0xa6fc3956163455dc, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r3, 0x0, 0x0, 0x0, 0x1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) pwritev(r3, &(0x7f0000000700)=[{&(0x7f0000000000)="80ed4837d18ca897960cda78b1f337857c4896c99f5b847a34d1a746bb4b046e811681cb498e7616a23e2736fe2b799a33004a3dc6f374ba6f5cbd69b1863312f516262f4e78e3d8985b0db9b6f518e37577bfce00f6aa1c9b53843144567e5ad40af6200897da1c427952c04fbef9b54444e4", 0x73}, {&(0x7f0000000240)="b2b91510f988022838e3a0f921140d05a30bb3478e4ed7249c204886a744146d5898bd08d2ed3ab223321cb2dd4c489923ef0887443aa9041a6607638297029cfa622c80625888398b9bba31347f5f3c8723cc9a99dd070443157827e7914f801d6ead666074d221f4d7de9482a177885c6367fcfa9056ad0f6a98e595e3300df648f0cab2c9e484f591e9a87450508212828d55e9cb52156c58b78049d86890bdaedb1f41b5f1501598915ac15a1c8195c627d5c71379051bbaccecd0a072570baeec94f37ae31cb796f368076e4935caea600bda0c29dd304b77e9eb53d6ee6525", 0xe2}, {&(0x7f0000000400)="6482a8f681f65a8fadb6687ec0d69370543e0158cc81d01beaf14c494f78c16a970ba905ee002422df5bbaca73e7d6681f414c7982855d193aa388afcc89e02cf76019e91b8f45b7bbcfa1fee268e2f3fa955bb2ecf0a000b2084ff7418264d2bc9b7cbd80e583a164d064cddd0957a5357c5b57262be79b412d2e806b76b284e30608f7b635013cceebe0be3f05e731097449173bcc2d3af1b451ca959243de3b8c3a447d3d01727f9c8511f30bff2fe23b1fc6a756e693841e635cd87c3aee7dd6c738c9", 0xc5}, {&(0x7f0000000500)="b123f17b9c85629627e2ef2b287a268ef1466ea1144036794db445a3d8b964f8ac090d7efbdf722a36e3f59ed10674d4be9ceb64a0bcd87911970050b039bf20bddf7e86fc31addc7657b92e73ca8c242e093ae2b3917dd92c9f426fd9e2029c64786862ec8da0f868c2844439ef4a62e8d3d0743acfa43f1aa6755e6e99ab8c68b386604828979ae3ec78fc5e934f14b8b27abd9a35ec14385013b687f7e6c10949e26b3abbd525217a953101c5c919b646821de2ee03e0a85db53ef81f4cfca946d03933b304015c07a3283f3ddd45503c44", 0xd3}, {&(0x7f0000000340)="d7d46cbb977c33eea97a828ad740d21cd67e883fa6a04be1c098751c97e73e746d58b71bc7bb80d88a65f3c0a58729731617f6811adcb1f07ca5233240602802e6d76849d7c70a", 0x47}, {&(0x7f0000000600)="0679a2d108113bc7d0fac4af3bbe4f4829b9ff566fc6923b0fbad98687797bc52541af6ef1f5a5a3cb27035908318398884e9d2c621b7363cec76d51c0cd8be640af9e010a8959915232bbfc3cc6b2a30ebc84164f81811bdc85791b37a1f6b9ac1d9dbad546a9b169f7d6c0d65785ff625619ac34acedfb1c8ce3f9f2b923fcca21313a932da6415239a8e0375712d1b2559331e4fb266c31cb80833226e7a8757110f604b9562221f4d638c4553987a031f69dc314e0fc6175f1beb885f49815f13b26e05e3bd1", 0xc8}, {&(0x7f0000000840)="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", 0x1000}], 0x7, 0x34000000, 0x9ee0) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m23.884352734s ago: executing program 3 (id=927): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0x184a, 0x7, [{0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x6, 0x1}, {0xb}, {0x3, 0x1}, {0xe}]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m14.642395716s ago: executing program 3 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000a00)=[{0x0, 0x0, {0x1, 0xf0}, {0x2, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}, {0x2, 0x1, {0x1, 0xf, 0x4}, {0x1, 0x1}, 0xff, 0xff}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = epoll_create1(0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.19761317s ago: executing program 33 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000a00)=[{0x0, 0x0, {0x1, 0xf0}, {0x2, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}, {0x2, 0x1, {0x1, 0xf, 0x4}, {0x1, 0x1}, 0xff, 0xff}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = epoll_create1(0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 1m52.217449797s ago: executing program 5 (id=984): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) connect$netlink(r2, &(0x7f00000005c0), 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$media(0x0, 0x0, 0x80) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x104c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x101c, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x0, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x964, 0x2, 0x5, 0x0, 0x3, 0x24000000, 0x3, 0x8, 0x307, 0x6, 0x80, 0x3, 0x3, 0x8000, 0x832b, 0x6, 0x10000, 0x0, 0x0, 0x5, 0x5, 0x1, 0x5, 0x93c, 0xf75f, 0x7, 0x7f, 0x0, 0x2800000, 0x6, 0x9, 0x3, 0xa, 0x6, 0x7, 0x3, 0x0, 0xaa3, 0x2, 0x101, 0x3, 0x9, 0x1, 0xe, 0x4, 0xfffffc01, 0x101, 0x8, 0x2, 0x3, 0x4, 0xffff, 0x7fffffff, 0x6, 0x5, 0x4a, 0xbcc, 0xff, 0x8, 0x5, 0xff, 0xff, 0x6, 0x9b4, 0x3, 0x2, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x81, 0x4, 0x8, 0x10000, 0x74f, 0x5, 0x7fffffff, 0x2, 0x4, 0x8, 0xfffffffa, 0x80, 0x1000, 0x400, 0x7, 0xd2a, 0x3, 0x400, 0x1b, 0x400, 0x4, 0x8, 0x10000, 0x1ff, 0x1, 0xad99, 0xff, 0xb, 0x3, 0x2, 0xa99, 0x4, 0xa, 0x6609, 0x5, 0x3, 0x4, 0x101, 0x7, 0x7, 0x21, 0x8, 0x8, 0x2, 0x1020, 0xc, 0x0, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0xc, 0x1, 0x7ff, 0x9, 0x1, 0xff, 0x8, 0x7, 0xc, 0x5, 0x6, 0x8000, 0xc, 0x8, 0x37, 0x55, 0x4, 0x4, 0xefaf, 0x80000001, 0x4, 0x6, 0x0, 0x3, 0x1, 0x1, 0x9, 0xd25e, 0xc, 0x5a44, 0xd3, 0x3, 0x8, 0x6, 0x2, 0x4, 0x2d, 0xab, 0x6, 0xffff, 0x5, 0xb, 0x5, 0xffff6e32, 0x4, 0x800, 0xffff, 0x3, 0x1ff, 0x3da9, 0x6, 0x8, 0x2, 0x6, 0xf, 0x5, 0x78, 0x0, 0x7, 0x200000, 0xfff, 0x8001, 0x5, 0x1ff, 0x90000000, 0x7968a3e5, 0x5, 0x9, 0x7fff, 0x2, 0x81, 0x0, 0x100, 0x0, 0xfff, 0x6, 0x4, 0x10, 0x1ff, 0x7f, 0x9, 0x7, 0x10, 0x3, 0x3b, 0x2, 0xfffffff8, 0x9, 0x2, 0xffff7597, 0xc, 0x8, 0xfffffffb, 0x1, 0x2, 0xc, 0x9, 0x65c, 0xd, 0x7, 0x7, 0x5, 0x5, 0x2, 0x5, 0x0, 0x1, 0x0, 0x5, 0x9, 0x4, 0x1, 0x5, 0x8000, 0x1, 0x7, 0x21f, 0x24000000, 0x2, 0x8, 0x9, 0x4, 0x4bf, 0x1, 0x1, 0x6d9, 0x1, 0x0, 0x4, 0x0, 0x9]}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0xc, 0x80, 0x40, 0x7, 0x1, 0x7ed, 0x9, 0x9, 0x34b, 0x5, 0x7ff, 0x400, 0x7a8d, 0x4, 0x74e8b26a, 0x81, 0x2, 0x3, 0x6, 0x3, 0x9, 0x9, 0x7, 0xf, 0x5279, 0x10000, 0x7, 0x4, 0x9, 0x1, 0x25, 0x81f, 0xf, 0x9, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0xe, 0xd37, 0x7, 0x800, 0x4, 0x10, 0x2, 0x2, 0xffffffff, 0x8001, 0x6, 0x3, 0xee99, 0x474, 0x10000, 0x9, 0x9, 0x8cce, 0x100, 0x2, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0xfffffff8, 0x8, 0x2, 0x1, 0x7, 0x1, 0xac, 0x3, 0x9, 0xfffffffc, 0x80, 0x10, 0x7fff, 0x7, 0x4, 0x2, 0x101, 0x78b, 0x7ff, 0x8, 0x78000000, 0x101, 0xc, 0x5, 0x3, 0xf534, 0x4, 0x2, 0x4000, 0x14ac, 0x64ebc947, 0x10001, 0xacd, 0x6, 0x6, 0xfffffffd, 0x0, 0x4, 0x2c, 0x0, 0x5, 0x7, 0x13a6, 0xb9, 0x1, 0x8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x0, 0x80000000, 0xf73, 0x10001, 0x5, 0x10001, 0x9, 0x7, 0x8fcf, 0x63165378, 0x9, 0x8, 0x6, 0x6, 0x3, 0xf33, 0x3, 0x9, 0x498, 0x6, 0x9, 0xffff41fd, 0x2, 0x8, 0x4, 0x6, 0x6, 0x4, 0x7, 0x200, 0x0, 0x1, 0xff, 0x9, 0x5, 0xfffffff8, 0x7, 0x5, 0x6, 0x4, 0x0, 0x9, 0x1, 0x6, 0x3, 0x14f4, 0x8, 0x6, 0x9, 0x954, 0xc, 0x7fffffff, 0xffffffff, 0x480000, 0x8, 0x7, 0x8, 0x4401, 0x6, 0xe6, 0x4, 0x9, 0x0, 0xffffffff, 0xe9, 0x32, 0xf1, 0x800, 0x20080, 0x9, 0x1, 0x976, 0x0, 0x7, 0x8, 0x9, 0xffffc69c, 0xbb2, 0x4, 0x3, 0x9, 0x7fff, 0x16, 0xd, 0x3, 0x6, 0x1, 0x1ff, 0x80000001, 0x7, 0xb, 0x3c0b, 0xffffffff, 0x4, 0x3caa, 0x100, 0x2, 0x1, 0xfffffff9, 0x4, 0xd6c7, 0xffffe53f, 0x99, 0x0, 0x3, 0x7, 0xf, 0x7701, 0x7, 0x7, 0xfff, 0x280, 0x2, 0xc12, 0x7, 0x9, 0x1, 0x3, 0x3, 0x40000000, 0xff, 0x4, 0x3ff, 0x8, 0xe2e4, 0xf, 0x5, 0x200, 0x9, 0x0, 0x9, 0x5, 0x0, 0x3, 0x8, 0x0, 0x401, 0x9, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5, 0x100, 0xffffffff, 0x407, 0x8, 0xb8, 0x0, 0x80000000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xffffff6a, 0xd09, 0x4, 0x3, 0x2, 0x6a, 0x6, 0x1, 0x9, 0x1, 0xfffffff8, 0x4, 0xde39, 0x2, 0x7f, 0x4837, 0x0, 0x92, 0x1, 0x8000000, 0x5, 0x9, 0x5, 0x9, 0x3, 0xffff, 0x81, 0x4, 0xc, 0x3ff, 0x3, 0xdac, 0x8, 0x7ff, 0x5, 0x634, 0x10001, 0x9, 0x4, 0x0, 0x1, 0x3, 0x5, 0x9, 0x400, 0x1, 0x86b0, 0x9, 0x4, 0x2, 0x6, 0x3, 0x101, 0xff, 0xc, 0x9, 0xfff, 0x2, 0x7, 0x4f0, 0x9, 0x80000001, 0x4, 0x0, 0x0, 0x4, 0xcab5, 0xed, 0x6, 0x7f, 0x40, 0x6, 0x9, 0x2, 0xb4, 0x7, 0x4, 0x7ff, 0xb2, 0x0, 0x5, 0x1, 0x7, 0xebe, 0x9, 0x2, 0x9, 0x0, 0x7, 0x6a, 0x680, 0x34a, 0x200, 0x4, 0x4d, 0x2, 0x1, 0x1, 0x3, 0x3, 0x6, 0x7, 0x2, 0x7fff, 0xf, 0xfe, 0x3, 0x9, 0x3, 0x6, 0x4, 0x800, 0xd9, 0xe, 0x1, 0xde2, 0x5, 0x1, 0x5d, 0xf17, 0x5, 0x6, 0x7, 0x9, 0x9, 0x2, 0x59, 0x1010, 0xd, 0x100, 0x680acdce, 0x9, 0x8, 0x2, 0x0, 0x7, 0xa41d, 0xb3, 0x40, 0x7, 0xffffff4a, 0x6, 0x0, 0x8, 0x6, 0x8, 0xa4, 0xd, 0x101, 0xfff, 0x78, 0x7, 0xb, 0x80000000, 0x8, 0x7f, 0xa, 0x7, 0x7, 0x8, 0x8b, 0x4, 0x1, 0x558, 0xc6f2, 0x7, 0x8, 0x3, 0x639, 0x6, 0x400, 0x10000, 0x9, 0xa05, 0x2, 0x4d58, 0x4, 0x6, 0x1, 0x9, 0x8, 0x5, 0x8000, 0xfffffff7, 0x3ff, 0x2, 0xb, 0x3, 0x9, 0x4a, 0x9, 0x7fff, 0x8, 0x1000, 0x6, 0x3, 0x9, 0x7c25, 0x6, 0x68, 0x9a0, 0x9, 0xfffffffe, 0x800a, 0xa60, 0x10001, 0xd76c, 0x9, 0x1, 0x6, 0xffff, 0x6e7, 0xad2, 0x1000, 0x40, 0x7, 0x65301570, 0x4, 0x7ff, 0xb676, 0x5, 0xe, 0x8, 0x3, 0x6340, 0x5, 0xa0f7, 0x6, 0x0, 0x1, 0x4, 0x8000, 0x40, 0x2, 0xefa2, 0x0, 0xf2c, 0xb, 0x8, 0x100, 0x8f3776d, 0x8]}]}]}}]}, 0x104c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r7, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m49.978784207s ago: executing program 5 (id=987): r0 = syz_open_procfs(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1m48.887862492s ago: executing program 5 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) chdir(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(r1, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7020000000000008500000008000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x2, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 1m46.628837102s ago: executing program 5 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000300), 0x440, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x31, 0x103, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x4c}]}]}, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000600)=@framed={{}, [@map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) waitid(0x1, 0x0, 0x0, 0x8, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1m45.155021701s ago: executing program 5 (id=998): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000000000000, 0x434000) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x7}) sync_file_range(r0, 0x5, 0x41d, 0x1) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$rds(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000002500)=""/19, 0x13}, {&(0x7f0000002540)=""/80, 0x50}, {&(0x7f00000025c0)=""/115, 0x73}, {&(0x7f0000002640)=""/205, 0xcd}, {&(0x7f0000002740)=""/230, 0xe6}], 0xa, &(0x7f0000002a80)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0xc}, &(0x7f0000002900)=0x9, &(0x7f0000002940)=0xb727, 0xffff, 0x9, 0x80000000, 0x8, 0xc0}}, @cswp={0x58, 0x114, 0x7, {{0x10, 0x3}, &(0x7f0000002980)=0x3, &(0x7f00000029c0)=0x4, 0xff, 0x800, 0x10000, 0x7, 0x4, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x40}, &(0x7f0000002a00)=0x8, &(0x7f0000002a40)=0x730c, 0x0, 0x101, 0x10, 0x1000}}], 0x108, 0x80}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd40, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) ioprio_set$uid(0x3, r2, 0x4000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) syz_open_pts(r4, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x5b06, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) 1m44.271031663s ago: executing program 5 (id=1001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x1c090) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000002b40)=0x3ff9, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000700)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100fcfd000000", @ANYRES32=r7], 0x28, 0x14}, 0x4000) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r8, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{0x0, 0xffffffffffffff8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m43.61613037s ago: executing program 34 (id=1001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x1c090) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000002b40)=0x3ff9, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000700)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100fcfd000000", @ANYRES32=r7], 0x28, 0x14}, 0x4000) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r8, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{0x0, 0xffffffffffffff8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 13.877489055s ago: executing program 2 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x7f, 0x4e, @local, @rand_addr=' \x01\x00', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000002410000001000137564703a73797a3100000000"], 0x2c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) 13.58601184s ago: executing program 2 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) unshare(0x2040400) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4, 0x0, r5}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x3, 0x1e21, 0xfffffff7, 0x1, 0x0, 0x7cce8c743ee810df, 0x7}) read(r6, &(0x7f0000000840)=""/40, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000016000000b703000000000000850000000400000018110000419c0650824d294eacc9b1f6b69c19fd2b2f2d205134bf2c", @ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) write$dsp(r5, &(0x7f0000000680)="c728c22d79b8150abd622bc3b79b14c3793f2fab387f50865038ab0e5888ef1748f000a5cd58f65bdeee19aa21efe83fb58276d01cdf82c9293a393c94b1589d1ee2fce7636fc64c91e90febd75f839770db8e7ed28507cdb8323add97a2e06f5e90da7051bb4336b06b1cfbff9c8b088471c10e9a7e0af047181868f0959acb260188bcda040e8ccd5eac8a29852138d8343a81195b30b2f0662eda9c3d429df6d0ba2df7462a2b6dd62d177c2a4d7a7abd3f2eedd3f8b3bcd5ee543f44cd04303f044225a4895762eba0e963ae0e82a71e8114323067a0a4c075ac2ec3eafccea499c4e431d1af7cdb4c495075fc9d73f8226d9d558f021d", 0xf9) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffc01, 0xfffff000, 0xb) 11.952755637s ago: executing program 2 (id=1211): shmdt(0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x44, &(0x7f00000002c0)={0x20, 0xf, 0x2, "fed1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001780)={@dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x1, 0x3, 0x500, 0xffff000000000000, 0x8}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) epoll_create(0x1fe) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9\x7f\x00\x00\x00\x00\x00\x00\x00oa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x5) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x928c3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc0003"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) r7 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2803, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r7, 0x47f6, 0x880e, 0x0, 0x0, 0x0) 11.676357429s ago: executing program 6 (id=1213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x100}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r6, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x9, 0x2, 0x2, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000340)="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", 0x109, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @local, 0x4000001}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 11.642440284s ago: executing program 4 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e0000"], 0x80}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f0000000000080003"], 0x7c}}, 0x0) 10.069892465s ago: executing program 4 (id=1218): syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x3a4, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x390, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x66c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x9c, 0x7, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7d8, 0x1, 0x7f}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, {0x44, 0x6, "1e476c6baf0460eda959c4932bcedb8702daced83843a3ef2ce3d4d105ecdaaff5be06e1f2129573bb1e63ade4737050ecb86917e899baf3fff7f49043f5c2dc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x138, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x101, 0x0, 0x4, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0x6, 0x8, 0xebc, 0xc}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc4, 0x6, "ca37b2138fed351b866e789e3ddc118505b01b51a4aed041ed7972a793e78a82ccafa0ac4130b4dfb5fb173302788da9394c7097097ab7a55a0765f39ba8d0b4db292754343d59db4bf9c240ace92ab73876ef9d09626435329ccf3e182cda8f18f03782b8a02b85025f28d71066e2645b7a8c44ad798366a76ee2451d0ea4642637f652800f3371f48aeffbc8423e009ee41cab1a9accab24914eaa51072813b0a5b94f00e5662b7cc34d8ef867d994dda1801ed864faf50f080309e81c47a8"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x158, 0x19, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xda0, 0x5, 0x8, 0x8001, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x0, 0x2, 0xfffffffb, 0x10001}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4961}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe0e9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x60c}]}, {0xd9, 0x6, "a02d41bf811d9898d2e4f67314c7d7cbcb79fc17916c006262e13d129ee85ae9142b60821693cf9f394aa6cf75c3dac7c2471631fb5a518da27cb88848d7eec7d14e07edaa049bd759f03253d5f84e67f9ae89a961bc80bd8f6181c0954d464915325c72aee12c8e4618d8423f1da778757fd75258b1808d0db5f2475eebd57ebaa482dba9e01f11b6dfb87afa31f79fa7327a8f7748d35c1f368fbf25d1dc8f17fcf997ddd15b4d211b2af9305b3d49c99d41edf570d748dca93c53cd4e8226d40f4bc19d33af4ec46a4a725bc03c915b16700942"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) 8.983308704s ago: executing program 4 (id=1222): socket$netlink(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0xf5, 0x0, 0x0) 8.926191679s ago: executing program 6 (id=1223): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x800, 0x1000000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2400f283c38c829992fd899970c674b6e519e934e0c963039ce029218a91b95adf1828e8f090585655f48d5379825921bd06fd4ed0c78210ac4dd6df9bc368c28ac04b953acf069736cd26277137788001e78d2810034bad6e156dfacee97ffa882860a52d1ac4136cab868b07c5cd50563f0ddbab15294ce42736b933f6abeabf9ec1d707fbe6508cb10751580255ceeffa201d54b9d0e074fc30733d2e5fc8547c0c50c0486cfdd37a1744ed2cc3bdc0e763b9b8"]) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 8.847147434s ago: executing program 6 (id=1224): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vbi(&(0x7f00000015c0), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x34, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x404, {[@timestamp={0x8, 0xa, 0xffffffff, 0x80de}]}}}}}}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.579920093s ago: executing program 7 (id=1225): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='%\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) read$msr(r0, &(0x7f0000000080)=""/35, 0x23) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x8042) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"446b7f2f", 0x5, 0x2, 0x5, 0x6, 0x9, "4f61da88f157ee6c4697bff9bb8ca5", "18eed1d0", "92f1df1f", "36e10dee", ["3921213c8c5c3105753af52e", "d2e3a2d18beb714541911620", "c30bd2be70cf637add05174f", "2b0f216abae3a2a1990ca1e4"]}) fcntl$setlease(r1, 0x400, 0x2) accept$netrom(r0, &(0x7f0000000180)={{0x3, @rose}, [@null, @default, @remote, @bcast, @remote, @rose, @rose, @bcast]}, &(0x7f0000000200)=0x48) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0xc0, 0x158, 0xc0, 0x248, 0x158, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000240), {[{{@ip={@local, @rand_addr=0x64010100, 0xff000000, 0xff, 'veth0_macvtap\x00', 'ipvlan0\x00', {0xff}, {}, 0x4, 0x2, 0x42}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010102, 0xffffff00, 0xff, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}, 0x88, 0x3, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xf4}}}, {{@ip={@local, @empty, 0xff000000, 0xff000000, 'veth1_to_batadv\x00', 'xfrm0\x00', {}, {0xff}, 0x2e, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x4]}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 0x0, 0x1, [0x27, 0xb, 0x4, 0x33, 0x1d, 0xe, 0x2c, 0x15, 0x26, 0x21, 0x12, 0x2e, 0x12, 0x3b, 0x1b, 0x3], 0x1, 0x5, 0xa}}}, {{@ip={@private=0xa010101, @private=0xa010101, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {}, {}, 0x5c, 0x2, 0x40}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "ff9c", 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x428, 0xfffff000, @remote, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) r4 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000800)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000840)={{r4}, r5, 0x18, @unused=[0x7, 0x7, 0xffffffffffffffff, 0x2], @devid}) write$ppp(r0, &(0x7f0000001840)="ec5352f8baf8fc9b0c240fe632a43d84e218a563555ce3ac1bb4f6c1e35c7dd315a2ab7f8a6e", 0x26) r6 = openat$cgroup_ro(r0, &(0x7f0000001a80)='memory.events\x00', 0x0, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b80)=@generic={&(0x7f0000001b40)='./file0\x00'}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x1c, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @generic={0x3c, 0x4, 0xd, 0x7a5, 0x212d}, @call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}]}, &(0x7f0000001980)='GPL\x00', 0x1, 0xa0, &(0x7f00000019c0)=""/160, 0x40f00, 0x4a, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001ac0)={0x5, 0xffffffff}, 0x8, 0x10, &(0x7f0000001b00)={0x2, 0x5, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[r7, r0], &(0x7f0000001c00), 0x10, 0x7ff}, 0x94) inotify_init1(0x800) gettid() madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000001d00)={0x16, 0x4, {0x2, @usage=0x9, 0x0, 0x6, 0x51fd, 0x6ce, 0x9, 0x4c9, 0x87, @struct={0x1, 0x3}, 0x9, 0x10, [0xfffffffffffffffd, 0x80000000, 0xf, 0x8, 0xdbef, 0xc46e]}, {0x8, @usage=0x7, 0x0, 0x8001, 0x10, 0x80000000, 0x5, 0x1, 0x100, @struct={0x3, 0x3}, 0x3, 0x3, [0x0, 0xffff, 0x9, 0xc00000, 0xb445, 0x1]}, {0x2, @usage=0x10000, 0x0, 0x3d, 0x2, 0x4, 0x7, 0x1, 0x0, @struct={0x8, 0x3}, 0x3, 0x4, [0xa, 0x7, 0x0, 0x8, 0x4, 0xee07]}, {0x7f, 0xa3, 0x2}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000002100)={0x0, 0x9, 0x95e}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000002500)={0x0, 0x0, {0x8, @struct={0x7, 0x7}, 0x0, 0x10, 0x9, 0x3, 0x0, 0x7, 0xd0, @usage=0x1, 0x5, 0xd3c, [0x2, 0x9, 0x5, 0x8, 0x4, 0x8]}, {0x9, @usage=0x7, r9, 0x8, 0x200, 0xfffffffffffffff7, 0x4, 0x2, 0x44c, @struct={0x9, 0x2}, 0xa24, 0xfffffff3, [0x1, 0xff, 0x7ff, 0x401, 0xd, 0x8779]}, {0x9, @usage, r10, 0x401, 0x4d, 0x7fffffffffffffff, 0x9, 0x2, 0x40, @struct={0x4, 0x7}, 0x4b, 0x8000, [0x3, 0x1, 0x3, 0xb9e, 0x9, 0xfff]}, {0x9, 0x6000, 0x1}}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002900), 0x412100, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000002940)=',\\/\\+\x00') r11 = socket$netlink(0x10, 0x3, 0xf) getsockopt$IP_SET_OP_GET_BYINDEX(r11, 0x1, 0x53, &(0x7f0000002980), &(0x7f00000029c0)=0x28) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002a00), 0x301040, 0x0) syz_open_dev$radio(&(0x7f0000002a40), 0x0, 0x2) pread64(r1, &(0x7f0000002a80), 0x0, 0x10) 7.578739102s ago: executing program 1 (id=1226): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x42, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xd38, 0x0, 0x132, 0xfffffffffffff800}, &(0x7f00000003c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000400)="a38d1ebaa67401aa83cea1a04052671e5687f8e3516041a71afa8e21b1b77d7f00764f0000604e03c30ab9948dd0f840e98c69febbcf358320ab61770c480fdf791feb9259ac97428ab35a663658a6c7be0250e82302c3a49ef7f584cd219f0062bd3c7429168c2ada56720bc3994c03d68d4d94ef5dde7b1dce376d47514d785fd513cb9695ead24de25f4dd027c5ff024add6679b6b25c22b79047f328d64f947d086f5f09490b56530093099f506efa155f65bbdcb8cb948eb23536c90ca6a399497977939d285c1eabcb70906b41c9affd7aa7761841d66a8b43e437b500"/236, 0xec) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r5 = fanotify_init(0x200, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000015}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000009ce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 7.164457864s ago: executing program 4 (id=1227): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x101080) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={0x1}) syz_pidfd_open(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) 7.03493213s ago: executing program 7 (id=1228): writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="44090400", @ANYRES16=r3, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001000040900000800"], 0x44}}, 0x44000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.91553359s ago: executing program 2 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e0000"], 0x80}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000280)=@secondary) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) io_uring_enter(r2, 0x38c5, 0x2000000, 0x0, 0x0, 0x7f00) 3.475532262s ago: executing program 7 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) unshare(0x2040400) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4, 0x0, r5}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x3, 0x1e21, 0xfffffff7, 0x1, 0x0, 0x7cce8c743ee810df, 0x7}) read(r6, &(0x7f0000000840)=""/40, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000016000000b703000000000000850000000400000018110000419c0650824d294eacc9b1f6b69c19fd2b2f2d205134bf2c8e54632342a70ddb0afab53a5502e1867220a3f30d0b480f95bb80dabb4d012f8b47e28181d530c8ce8baa5d4b79bd1d323571c0c0d5897185c3f350efe85ca909ceb7fa54880800a932e6afe070ebda1c", @ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) write$dsp(r5, &(0x7f0000000680)="c728c22d79b8150abd622bc3b79b14c3793f2fab387f50865038ab0e5888ef1748f000a5cd58f65bdeee19aa21efe83fb58276d01cdf82c9293a393c94b1589d1ee2fce7636fc64c91e90febd75f839770db8e7ed28507cdb8323add97a2e06f5e90da7051bb4336b06b1cfbff9c8b088471c10e9a7e0af047181868f0959acb260188bcda040e8ccd5eac8a29852138d8343a81195b30b2f0662eda9c3d429df6d0ba2df7462a2b6dd62d177c2a4d7a7abd3f2eedd3f8b3bcd5ee543f44cd04303f044225a4895762eba0e963ae0e82a71e8114323067a0a4c075ac2ec3eafccea499c4e431d1af7cdb4c495075fc9d73f8226d9d558f021d", 0xf9) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffffc01, 0xfffff000, 0xb) 3.47247082s ago: executing program 1 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x7f, 0x4e, @local, @rand_addr=' \x01\x00', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000002410000001000137564703a73797a3100000000"], 0x2c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) 2.349869882s ago: executing program 1 (id=1237): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001480040012"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_udp(0xa, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) llistxattr(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) creat(0x0, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780), 0x4) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) close(0x3) r4 = syz_io_uring_setup(0x1b15, &(0x7f00000001c0)={0x0, 0x5325, 0x800, 0x2, 0x259}, &(0x7f0000000000), &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x2e, 0x101, 0x8, 0x8, 0xff, 0x5, 0x2a, 0x10}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.270995743s ago: executing program 7 (id=1238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000dcfd7bc1de9dd1f0ff9ed794820000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = getpid() r5 = socket$inet(0x10, 0x3, 0x0) r6 = io_uring_setup(0x1bdd, &(0x7f0000000200)={0x0, 0x938, 0x8, 0x0, 0x2d4}) r7 = syz_io_uring_setup(0x21aa, &(0x7f0000000280)={0x0, 0xc729, 0x40, 0x1, 0xaa, 0x0, r6}, &(0x7f0000000340), &(0x7f0000000380)) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x4a, &(0x7f0000000640), 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xd0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xd0}}, 0x0) r11 = syz_pidfd_open(r4, 0x0) process_madvise(r11, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)=')', 0x1}], 0x2, 0x13, 0x0) socket(0x28, 0x80000, 0x5) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x6, 0x0, [{0x9a3, 0x0, 0x7}, {0x837, 0x0, 0x94e0}, {0xba7, 0x0, 0x400}, {0x64d, 0x0, 0x10}, {0x359, 0x0, 0x4}, {0x88f, 0x0, 0x7}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r12, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 2.190888504s ago: executing program 6 (id=1239): syz_open_dev$vbi(0x0, 0x2, 0x2) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 2.186071357s ago: executing program 4 (id=1240): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x7f, 0x3, 0x9}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) lseek(r2, 0xfffffffffffffffe, 0x4) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000089000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000644000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KIOCSOUND(r3, 0x4b2f, 0x7) r4 = syz_usb_connect(0x0, 0xa2a, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0xb6, 0x7a, 0x5a, 0x40, 0x1110, 0x9023, 0xde50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa18, 0x3, 0x3, 0xd, 0x70, 0x10, [{{0x9, 0x4, 0xcf, 0x2b, 0x4, 0xf3, 0x4c, 0x20, 0x7f, [@generic={0xd8, 0x1, "106490011ff3b0174db72e58504d965ebaf3e17557e96de094ff736d42753a1083be596c86a1d4a46b279e8b06cd8ddaa0044d52b7982882f6650dd776bfbb76712fea01e40de1a389ca4e3344a2eda873edb82309889bc5aebff24a2e140d3a660e2114f79f85e2589ab3242f21bc71d3cb796f0a6104770f4bf55cdc088781a99b2caa684396a4f7238418fe2b73755fcadea8b7a7898bd6db8dd81b3487a0ef152bed0c04b76418ed457287e53e9b2a9b631793f0062477ed68dbfaf488ffa255f5c3b8b8e4fa5e883be14ea3c9f3ae2d74d2096b"}, @generic={0x19, 0x3, "6653e1679eafb64b170b20a5dec2262bdc6055c5c8b58a"}], [{{0x9, 0x5, 0x7, 0x2, 0x3ff, 0xf2, 0x4, 0xc3, [@generic={0x23, 0x3, "c2dea66f635b427f534bd0289d7d88e560395b55852a4f126bd7e122ee55a2e01f"}, @generic={0xb0, 0xf, "c66ea0f2cc6f5d97cc547486aa687cdf4f6acaae6133d9f68f930b2b18346783c167aa8416b288e411452f87174363ceb204803530ebeebd58a200c86f77705e0739b5cee7d60187ba19f20ba9517d15aed01200bfb41848e883b1402c9442637f4333edbeca73f8319c3ac5e30c31f09e3db568ff9d54ec8fa2db66f334efab90abcde4d178a73021ec5d014e237fb207f8dbcad24f1f7c3fb0e780c9db247111c340a05dc6d6847fc6d3a2a1fd"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x4, 0x6, 0x3, [@generic={0x79, 0x7, "38842973c986f12d93b1e68b4344de77bc4869e28e8b98e1582e542b5fb3512910214395e45632b41e42848d502f1b8255a3c913d6d8336df3e2f6c4857683bff151f9e7e9092910b0132064d816ac876f8f66b882ddb983268dee4dff0d8d8b51f0a2fba9f784f4fe1e22c8eee183ca05a2566fa7d4bc"}, @generic={0xe1, 0xe, "2e088789301bdbbf4cc142318b21f5ab368af65259dd4ef3f9ba3590f79ef8509dcaff45f1f3e008f888056c0349e6f704d17680954f1b24cd76a90175a7df633f51af07ba18d92e54afb8a396f92ef88cc249abefff4eea4e4bf0b510b15f7193ccfb9c991b2d35e10b0b20b5e8ce8f094149ce7ef12b68ff8f9411bbe5a9ddae0a6c69fbbac3c1ddc558382d2517e7e9481c7e87fb04673fd15ca595b9b816e8e246800176c1cebf08be823593fe630875282c633ac31858e0faa2d95318e5a544e31310d15caa76d59c0c04da329abdfd6b98e92bc961af32e83669ecd8"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x3, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x95, 0x3}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xd, 0x9d, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1ff}]}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x1, 0x27, 0xab, 0xb, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "ae404a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xeb, 0x5, 0x43}, {0x6, 0x24, 0x1a, 0x7f, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x5, 0x6}]}], [{{0x9, 0x5, 0x5, 0x10, 0x500, 0x0, 0xf9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x53, 0x1}]}}]}}, {{0x9, 0x4, 0xab, 0xfb, 0xe, 0xff, 0x5d, 0x1, 0x9, [@generic={0x82, 0x5, "916bfb9b1ef8b7a7be1ba6a6bd67d5dd94ee5e1185269be96a397990cee211e21aecad43de74934e77779c3fc89c5eb1c4022d53c18d99670a2c9724d59e5750680d449e8a822dc62c595caedfa64e5848cfbb81b2613b9bf84054cca4eb8136048dec38faa2ad2168c6c63fee8de36cd45901216a60df29347fab8fcb90f9d0"}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "51a25cf6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xeb}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @obex={0x5, 0x24, 0x15, 0xb}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xe2, 0xc7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x77, 0xb66d, [0xfff7]}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xc, 0x28, 0x9, [@generic={0xd2, 0xc, "2dd88adae6d6cdd2a1a36668e981553f2e3a9d9c24eff61b74c94481557d35d3dd41a5859f72c7c07ed48a62c98dfa372d5209e83e5e52a84ca040c3cbea43cf704bb80cebb854b0b0f88b561676062bc68ea748228c3570a882d5124f60439d7e220ac6d34ceaf76973c61c1656afa6ecdeda8a5c83810ea85b8d36a6d39f759e1d124001b197e3545087f9138211ec3e49e0abfe78cf3e742acf3b26a63bb8b1219889f0c3324ba5441e6ff3e643fa3f76d7abbd1843307258db432a055bf3f2a0929e9caa90a488210adcddaae64c"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x56, 0x2ec3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x4, 0x40, 0x1, [@generic={0x85, 0xe, "1b5132b8c168037fd01426d7c39aad14d1ce3eecf37e4f89dbd8516b9a9b7aa742ab9923121f6532c870029fe61c6e4ef35da898a87f322d81d1dfa7d5228e2a40c66e67f891f2d90a6c1bdc7004ad0ce84a7270002445cad1e498603b57168e8e49657466bfbdeb8b695db822afdb6b563a3484ff1b6f311fcf737c9ca9d83820f573"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x6, 0x7, 0x0, [@generic={0x28, 0xa, "6b0e8ec87907b317d4d989afed9c143ea16344c78d26b65332ec36897eb2368d837dde9f4ec0"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x40, 0xa2, 0x7, [@generic={0x8c, 0x1, "44405981a51925a703f41e039b2d3d96744e16e5eadfd1b23734bd6e1a1fc79aa12d3641ccb9acce7b9c875532916606e21f674e273fc4e2ffc139712c2ae78ecfccb5cc6af2ac0ab85cb7b575a7c43291a9afefbd38bf2d77a6900bd38c79765069a0efa5d301877056830b28fcd5eb19f112f26e9dec0ff474a7bc0acbfc7bab1a061ec8ce8cbaea2c"}, @uac_iso={0x7, 0x25, 0x1, 0x184, 0x1b, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe5, 0x1000}, @generic={0x66, 0x31, "8426718165b0d1c86646e9002bb7d83912fb0ddd2becba3ab39b5b930b40a66fae2140b39323e6e2d5a3bc9c2885201d0368f2002db0297ed8dee6c269a3375e6293c3855ac12b2fb9f62d0e195fbec494b688abeca720caa5286acb19328b2f6fedf51c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x8, 0x3, 0x1, [@generic={0x5b, 0xf, "429d7d53a581a14a448f55946ef55ddc5fc1c21ea6a2a41896b3152512d4d0b580f7138dd87919efd953b2af9dfafc0d8bcad3904f5f789a9631de057b744f58999b9dd6143b9c71634d3769e1a7fbca9b5cfa9b9b69a0f06f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x6, 0x5, 0x7, [@generic={0x93, 0x21, "fdef671c6bf365c2edca70341cba2d4383edc2a3f85bb10c9929d5a9d3b204d35491ec6fdfcdfee97866eec54d1a81231732d7dcce33643fce14ddc677608b77d7326b9cba694279f6c6dbcf2e5fdb517c30e087641e8094ff9096951f2230dd0cf9580a1d2f7062cac02af2622e9aa94c502973efc4000c98736c1c42787bd1224d1bc3d878e716f5af0ca88638fd013d"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x6, 0x7, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x38, 0x2ae}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0x7, 0xf, [@generic={0x66, 0x11, "a0fbcb86b815097d4f999d73e40f968875a4f6145259e70fd4ce8a72bce373aa4a015538bb2dbe1b403f3446fef985ba47ad4941b18393969a8cfc3c10d684341af4b903c582867b013c0f87abf9086af9438d3f607a26db11676dee3282af0b515d35f9"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x9, 0x2, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x4, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x70, 0x6, 0x1, [@generic={0xf3, 0x31, "e9eb89f794af8fc34cf0322ebc0e664d545f0fb1dd9f0b372266cc2bc9c710037f89d95f0699d104af3690f973a2c8af4b286ba0ee207e7ef95c0505b4082d36dade297f994b46e38f968ddb017a8aee3892c0858676a23d1852773560dcce5c569b7e0d650170201394c5326ed953b93125b02f76d1ad18bda32e14eca4b7985ac2cee18bf9e707781341f247b471ad7239531b2fa885b762e39dceb9e6ce8ce65cc58fefb2c30f212f67ab8bdab3c875629897988821af76f208a3cee590e47114f1b90e4750714d53e5c79774387544d9ec1a6dc1c2e86e330d00beccdf1fab1da19c5c1454474dffc3a00cd4e036ef"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xf5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x6, 0x80, 0x4, [@generic={0xf, 0x9, "523d1cc69cd856d6db926888ef"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x3b, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x24, 0x25, 0x96, 0x8, 0x1}, 0xe5, &(0x7f0000000100)={0x5, 0xf, 0xe5, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x11, 0x7, 0x17, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1e, 0x10, 0xfffd}, @generic={0xb1, 0x10, 0x4, "49d32a565d668fafca1e3c54a478343d3b5877b5a0817f2564e7790d5ceb376cd903c6fb6214be5328d6accf0c04b56b5554ad3d4e67004cac2ec86bc3d0be8637bb87ba0388174d7948b5ab2c859d524ae3b19e4738aaac83deed347f8469f9c364f5e1237c3e99b008488ba6685f3d806d5564f0318dbf87f2e06aae5f66982ffc1f9a8216bb54f4545202613520eb31597619f8c32909c77dd97c2680d5ea3887b4f6b7a47ec5b3eb8ee5e94b"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x7fffff1, 0xf00, 0x9, [0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x7, 0x3}]}, 0x7, [{0xcf, &(0x7f0000000d40)=@string={0xcf, 0x3, "5a476d55656c2791c0a0c3c7469341afe0b5559e6910c600360df42b1f767e5604991a3467e7014a79a61d4b0c59d92c5ddca5f383c08d897ab90406e3a4e30d47c1c1c512fcbbc7a1012316fe75852172a158de3e80481f29bbc80347e42c98f3d24cc8e1b1a69230b161e8457e8dbace3245f8479f1a074eaea9aac0b0c802c75a3b39c637ba2610e9ca7d4e8ea3b5a8eceda9abb52941d69fb5672ac12cb6a482741ac7d6baae4aa6a42d5498fa21972bba424672c28e5d90891f2d6e6cf28c4a5b852accda15af21f32086"}}, {0x5a, &(0x7f0000000200)=@string={0x5a, 0x3, "886376ff4d02da3dc015785400cab611e6ebaf32357657a72e06fac07ab8040da83ab09300f97f52b2a32c85d87d417efe5edd4074d37864e97dbd1969c891003ac251406eb5a835ac98144f17bd5752674002a0a78d1a41"}}, {0xed, &(0x7f0000000e40)=@string={0xed, 0x3, "83a84e3823b10d8373da058de2d47e7c537b3a3f14f0c21eb2e33b362dbbe32de6a467abbc9b35069c444948760003e500e20124f6dbbf1f87547376862258b3120269ed974a81061c091e47d032e10ea96506c72a1d7d6421a3e103b1c267fde88774d2d35ef0a41c8b68645f50cbc9fbbd6b216cbdac2fe270b0fcd928cdb4a30ae162d107116c11ba6c4c92df4ed9d876e75516af243c09d7b86f800dc8b8de77b47e32b2bbc3ab39307a9f5280df0e78c16883e7ca0e2e4a2174bfd7d1cc49551db8721c0b9a638fed71a0f1300488f8928133290f9acb87ad760a5622f239c40b27684a231819ddb3"}}, {0x5c, &(0x7f0000000f40)=@string={0x5c, 0x3, "a7981ae8238d9ad780715b8dbf687392e062d71f00b7745325452324c1fa15aed37f4430b9984f2f01429fe19d967c71b90153cec202fa7bb0f7f8c58d11f5ab660c82feaf191101a22d2d05e90b3e469627b0c3b67a9444cfe6"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x420}}, {0x9f, &(0x7f0000000fc0)=@string={0x9f, 0x3, "070208ccb269076783c5651c3f3be7d6c3e36d1ea13df2ab1d9a07b7a60be1f5ce36939971ed60e32d6988754f404f1c300d794bfc2c7802996cc4dc70b1e13cfdb4af99e9c313a3ea1eae7b24cc6692441a9b0ef7c356112567182bcd7881e03e0fba6c79f27dd24a1a441ca10f83c420ae552d9380376f20c02a270293f9fffaa02d8de3e15511d99415cd46c8fea98fbe3b766f815d59e53eff2a84"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io$printer(r4, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x40, 0xe, 0xa0, {0xa0, 0x22, "9925834c984ed5e0c892aa19e806eb9c9ccb52c8f4d6298c8351d9f348e32ffbc2f19340c3014a3643d1cd20e03bf0846f5dae0ace0e152f9e8239716a527057d563b282208d5e547e022af77d35ec5d01c9962ee020c5777fa12ab3154f26440cf4659ae39893b72215d7d42f3c53212ee14a55eae58cb048a18bd1c99f0e32a92ba4698b5b4f23504126e9396a8480ec79208e1c8f82b44a2a95ff309f"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f00000014c0)={0x34, &(0x7f0000001500)=ANY=[@ANYBLOB="201c2400000014d6010029b5fff6b3126eab10957de637a96a0fe69cccefe58d6b025d76f0e86cf9e9f87de29219406443472364ef82312ef3743ded47ca4f7cf754a1ecd14a378f64eb7f2839a611e268ffe806d8551bf11e23"], &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x12}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000001340)={0x20, 0x0, 0xde, {0xdc, "a56e5fb2795816c9664bc7e3620813aa83093fb1212923a92b28e9878b5c49fe73585112c86fa4c05826a6ad11e8c7d15b22f6000917890e6b43f8f85f211e04850203e2aeb7a938fbea62b53a0e426a391843f854cd38e5e4a46875a72f18c110d449ebc3cbe495cb251400f035737fb99f4aa27a1081c3c3acddb49f09a738397ae31792c526a98be10b9d9ae785e418d14fdf334ce6bbf2400151f10eaff8ba9dd26bcd3b379337e2b0228200e606bbba2e09510c0b6de3d2d0ebc1ebbb4c3262b299a76d50f651d791ca71a4f551c88dd95666c584d11b8dd08c"}}, &(0x7f0000001440)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000001480)={0x20, 0x0, 0x1}}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.229486651s ago: executing program 1 (id=1241): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x4000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000041}, 0x4092) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x2000000) syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0xec, 0x68, 0xd4, 0x20, 0x93a, 0x50f, 0x56a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x90, 0x64}}]}}]}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)}, 0x0) 1.22891399s ago: executing program 2 (id=1242): r0 = socket$netlink(0x10, 0x3, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0, @ANYBLOB='M\x00']) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmsg$netlink(r0, &(0x7f0000000040), 0x40460) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="810ac4ff0800"/24], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 163.108332ms ago: executing program 2 (id=1243): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f0000000440), &(0x7f0000000480)=@sha1={0x1, "f7bd8e97ff8b3c428a8c3744fb293e2661fd3146"}, 0x15, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xc1, 0x7, 0x1, 0x0, "bd1e611b10fcc43567571a47083edff7bb84d6b83ee261df2fcd5ce3e936cb3275db0f1413abc273e914f373f80d74800f78635888417a14b2bad77f149c096dd2585080e5d4623206eac6cba00b6a058edde16bc85bc312daa9abaea2b2c44d2b01a57888747228ae43ba6eac2e0f34e39fbaeec28e99c4529c8975217da653af54eb4eb94289bb26fcda622441f0d2fc0f20d13410c066cf4f15e254b8c7af5295cbdd536715a2e6ce2f53229c3223ac0b15f858a698b9ede13f4192"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$UHID_CREATE2(r1, &(0x7f00000001c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xc, 0x9, 0x5, 0x3, 0xfffffff8, 0x0, "16137f28e579117500000000"}}, 0x124) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x7e, 0x3, 0x2}}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) capset(&(0x7f0000000240)={0x20080522, r3}, &(0x7f00000001c0)={0x2, 0x7, 0x87, 0x7f, 0x1000, 0x5}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {r5, r6}}, './file0\x00'}) sendmsg$unix(r1, &(0x7f0000003900)={&(0x7f00000004c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000000540)="83f2c210a933a8695fa8a9ad1ff7e3", 0xf}, {&(0x7f0000000580)="fd7b32418c0956acbc1e4cbd76c9db0f722c4f8232904ba5ca5757423be5a1748cc2777ba8", 0x25}, {&(0x7f00000005c0)="009249c53f1217cbc3e7f7fd14515efd7c1f4ace1fbdd56f2591f69653c5ff63055274810d2316d2d419fa7b53d86b1935560dec83d1feb7bf422462eaa77cfd7a3126d2a62d8301e13ea5332dcafe0b27e8e1aadedeee992b", 0x59}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="e85e2d2c215f223f78c6a9576af9ddb92a681bcfac9386d83f06e8fab60d2e18c99a679174ac294b31e913dc91d5d824e566e56cde0f5b01435dc4aaa681b694a92cf88482b3ff1309b25c53bb4c726acc88e2a2e2e6de4fa7760ccdb3ab60393bb5cdf125f73d29707318c40aca9459f0576942d1f3d9cc9f55d9f085db11a7280bc573414ab7975db123bf66fdabbcddb5897ca08db5344cb0a4274c6c13a69d7f40111ac3d665e53ea1492a3629244f1904852fef9b0916922f5f27bd71568109b6064e1c7b90d9bc2db6a7cdde49464054832821de92d9cde3047f78554e", 0xe0}, {&(0x7f0000000640)="27f0ae7f88c060d4f5e833c5b83c465368bfeeb6f4ba8944c355447cf93178cd8f210d9f948d1490ade976b835891fb49760516d3fea03a7c1ca0127870c40b1fcf257e87839cf48f5c4cd90d94105ff9716328f302cf95d02dac917b374b6173016302b7e2cb157489a108b1204338fde2f5b3e2a422476983235096a45a9c7bdd39eadac9181f8cf6d71d5d36098e75cb08c8ac31ffc7b732c8158ac", 0x9d}], 0x6, &(0x7f00000038c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r2}}}], 0x20, 0x10801}, 0x4004000) 0s ago: executing program 6 (id=1244): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000010001ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x1a, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x1000000, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 0x28f/0x300 [ 325.754262][ T7923] ? translate_table+0x1a8/0x1f90 [ 325.754301][ T7923] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 325.754360][ T7923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 325.754401][ T7923] ? rcu_is_watching+0x15/0xb0 [ 325.754427][ T7923] ? translate_table+0x1a8/0x1f90 [ 325.754461][ T7923] ? translate_table+0x1a8/0x1f90 [ 325.754493][ T7923] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 325.754518][ T7923] ? translate_table+0x1a8/0x1f90 [ 325.754550][ T7923] ? xt_alloc_table_info+0x3b/0xa0 [ 325.754580][ T7923] translate_table+0x1a8/0x1f90 [ 325.754648][ T7923] ? __pfx_translate_table+0x10/0x10 [ 325.754704][ T7923] ? _copy_from_user+0x94/0xb0 [ 325.754742][ T7923] do_arpt_set_ctl+0x993/0xf10 [ 325.754786][ T7923] ? __mutex_trylock_common+0x153/0x260 [ 325.754818][ T7923] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 325.754865][ T7923] ? rcu_is_watching+0x15/0xb0 [ 325.754908][ T7923] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 325.754939][ T7923] ? __pfx___mutex_lock+0x10/0x10 [ 325.754964][ T7923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.755010][ T7923] nf_setsockopt+0x26f/0x290 [ 325.755047][ T7923] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 325.755079][ T7923] do_sock_setsockopt+0x179/0x1b0 [ 325.755119][ T7923] __x64_sys_setsockopt+0x13f/0x1b0 [ 325.755159][ T7923] do_syscall_64+0xfa/0x3b0 [ 325.755183][ T7923] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.755206][ T7923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.755228][ T7923] ? clear_bhb_loop+0x60/0xb0 [ 325.755255][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.755277][ T7923] RIP: 0033:0x7f81b3b8e9a9 [ 325.755297][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.755316][ T7923] RSP: 002b:00007f81b4a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 325.755339][ T7923] RAX: ffffffffffffffda RBX: 00007f81b3db6080 RCX: 00007f81b3b8e9a9 [ 325.755356][ T7923] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 325.755369][ T7923] RBP: 00007f81b3c10d69 R08: 0000000000000a50 R09: 0000000000000000 [ 325.755384][ T7923] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 325.755398][ T7923] R13: 0000000000000000 R14: 00007f81b3db6080 R15: 00007ffcda247548 [ 325.755432][ T7923] [ 326.253095][ T7923] Mem-Info: [ 326.294351][ T7923] active_anon:17495 inactive_anon:12424 isolated_anon:0 [ 326.294351][ T7923] active_file:14583 inactive_file:36780 isolated_file:0 [ 326.294351][ T7923] unevictable:768 dirty:286 writeback:0 [ 326.294351][ T7923] slab_reclaimable:10439 slab_unreclaimable:101330 [ 326.294351][ T7923] mapped:37230 shmem:24321 pagetables:1600 [ 326.294351][ T7923] sec_pagetables:0 bounce:0 [ 326.294351][ T7923] kernel_misc_reclaimable:0 [ 326.294351][ T7923] free:1286256 free_pcp:15775 free_cma:0 [ 326.656643][ T7923] Node 0 active_anon:69972kB inactive_anon:26104kB active_file:58136kB inactive_file:147120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121716kB dirty:964kB writeback:0kB shmem:72948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12976kB pagetables:5956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 326.751194][ T7923] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 326.800038][ T7923] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.909955][ T7923] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 326.935701][ T7923] Node 0 DMA32 free:1233444kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:69968kB inactive_anon:37156kB active_file:56380kB inactive_file:147052kB unevictable:1536kB writepending:964kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:47304kB local_pcp:26560kB free_cma:0kB [ 327.048570][ T7996] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 327.097735][ T7923] lowmem_reserve[]: 0 0 1 1 1 [ 327.811821][ T7996] netlink: 224 bytes leftover after parsing attributes in process `syz.2.521'. [ 327.837158][ T7923] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 327.945299][ T7923] lowmem_reserve[]: 0 0 0 0 0 [ 327.968278][ T7923] Node 1 Normal free:3897756kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23072kB local_pcp:13312kB free_cma:0kB [ 328.105616][ T7923] lowmem_reserve[]: 0 0 0 0 0 [ 328.110470][ T7923] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.173662][ T7923] Node 0 DMA32: 52*4kB (UM) 801*8kB (UME) 338*16kB (UM) 251*32kB (UME) 81*64kB (UME) 78*128kB (UME) 60*256kB (UME) 53*512kB (UME) 36*1024kB (UM) 12*2048kB (UM) 270*4096kB (M) = 1245080kB [ 328.266273][ T7923] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 328.332939][ T7923] Node 1 Normal: 177*4kB (U) 33*8kB (UME) 37*16kB (UME) 94*32kB (UME) 27*64kB (UM) 6*128kB (UME) 4*256kB (UM) 3*512kB (ME) 3*1024kB (UM) 1*2048kB (U) 948*4096kB (M) = 3897756kB [ 328.439816][ T7923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.461820][ T7923] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.556838][ T7923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.424854][ T7923] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.016045][ T7923] 69964 total pagecache pages [ 330.020957][ T7923] 0 pages in swap cache [ 330.028314][ T7923] Free swap = 124996kB [ 330.032809][ T7923] Total swap = 124996kB [ 330.036978][ T7923] 2097051 pages RAM [ 330.049353][ T7923] 0 pages HighMem/MovableOnly [ 330.088078][ T7923] 424693 pages reserved [ 330.191816][ T7923] 0 pages cma reserved [ 330.690251][ T5835] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 330.800928][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 331.525057][ T8032] loop2: detected capacity change from 0 to 7 [ 331.541720][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 331.593860][ T5835] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.629457][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.650131][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.703277][ T5835] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.735600][ T5835] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.759376][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.045252][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.102157][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.125131][ T5835] usb 3-1: GET_CAPABILITIES returned 0 [ 334.303553][ T5835] usbtmc 3-1:16.0: can't read capabilities [ 334.888395][ T5835] usb 3-1: USB disconnect, device number 10 [ 335.084345][ T8057] FAULT_INJECTION: forcing a failure. [ 335.084345][ T8057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.182343][ T8057] CPU: 1 UID: 0 PID: 8057 Comm: syz.1.533 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 335.182374][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.182388][ T8057] Call Trace: [ 335.182397][ T8057] [ 335.182407][ T8057] dump_stack_lvl+0x189/0x250 [ 335.182437][ T8057] ? __pfx____ratelimit+0x10/0x10 [ 335.182461][ T8057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.182485][ T8057] ? __pfx__printk+0x10/0x10 [ 335.182515][ T8057] ? fs_reclaim_acquire+0x7d/0x100 [ 335.182550][ T8057] should_fail_ex+0x414/0x560 [ 335.182578][ T8057] prepare_alloc_pages+0x213/0x610 [ 335.182615][ T8057] __alloc_frozen_pages_noprof+0x123/0x370 [ 335.182647][ T8057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.182687][ T8057] ? policy_nodemask+0x27c/0x720 [ 335.182716][ T8057] alloc_pages_mpol+0x232/0x4a0 [ 335.182745][ T8057] vma_alloc_folio_noprof+0xe4/0x200 [ 335.182772][ T8057] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 335.182811][ T8057] folio_prealloc+0x30/0x180 [ 335.182837][ T8057] do_wp_page+0x1231/0x5800 [ 335.182926][ T8057] ? __pfx_do_wp_page+0x10/0x10 [ 335.182956][ T8057] ? do_raw_spin_lock+0x121/0x290 [ 335.182988][ T8057] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 335.183030][ T8057] __handle_mm_fault+0x1144/0x5620 [ 335.183087][ T8057] ? __pfx___handle_mm_fault+0x10/0x10 [ 335.183143][ T8057] ? find_vma+0xe7/0x160 [ 335.183162][ T8057] ? __pfx_find_vma+0x10/0x10 [ 335.183188][ T8057] handle_mm_fault+0x2d5/0x7f0 [ 335.183235][ T8057] do_user_addr_fault+0x764/0x1390 [ 335.183287][ T8057] exc_page_fault+0x76/0xf0 [ 335.183314][ T8057] asm_exc_page_fault+0x26/0x30 [ 335.183334][ T8057] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 335.183366][ T8057] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 335.183385][ T8057] RSP: 0018:ffffc900034d7b68 EFLAGS: 00050206 [ 335.183405][ T8057] RAX: ffffffff84b95901 RBX: 0000000000001000 RCX: 0000000000001000 [ 335.183420][ T8057] RDX: 0000000000000000 RSI: ffff88804552f000 RDI: 0000200000006000 [ 335.183435][ T8057] RBP: ffffc900034d7c90 R08: ffff88804552ffff R09: 1ffff11008aa5fff [ 335.183451][ T8057] R10: dffffc0000000000 R11: ffffed1008aa6000 R12: 0000200000007000 [ 335.183465][ T8057] R13: 00007ffffffff000 R14: ffff88804552f000 R15: 0000200000006000 [ 335.183491][ T8057] ? _copy_to_user+0x41/0xb0 [ 335.183530][ T8057] _copy_to_user+0x8a/0xb0 [ 335.183563][ T8057] proc_pid_cmdline_read+0x472/0x840 [ 335.183599][ T8057] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 335.183627][ T8057] ? rw_verify_area+0x258/0x650 [ 335.183659][ T8057] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 335.183686][ T8057] vfs_read+0x200/0x980 [ 335.183726][ T8057] ? __pfx___mutex_lock+0x10/0x10 [ 335.183751][ T8057] ? __pfx_vfs_read+0x10/0x10 [ 335.183786][ T8057] ? __fget_files+0x2a/0x420 [ 335.183816][ T8057] ? __fget_files+0x3a0/0x420 [ 335.183844][ T8057] ? __fget_files+0x2a/0x420 [ 335.183880][ T8057] ksys_read+0x145/0x250 [ 335.183902][ T8057] ? __pfx_ksys_read+0x10/0x10 [ 335.183918][ T8057] ? rcu_is_watching+0x15/0xb0 [ 335.183948][ T8057] ? do_syscall_64+0xbe/0x3b0 [ 335.183977][ T8057] do_syscall_64+0xfa/0x3b0 [ 335.183999][ T8057] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.184021][ T8057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.184042][ T8057] ? clear_bhb_loop+0x60/0xb0 [ 335.184068][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.184089][ T8057] RIP: 0033:0x7f81b3b8e9a9 [ 335.184108][ T8057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.184126][ T8057] RSP: 002b:00007f81b4a7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.184147][ T8057] RAX: ffffffffffffffda RBX: 00007f81b3db5fa0 RCX: 00007f81b3b8e9a9 [ 335.184162][ T8057] RDX: 00000000fffffc7a RSI: 0000200000000000 RDI: 0000000000000004 [ 335.184176][ T8057] RBP: 00007f81b4a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 335.184189][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.184201][ T8057] R13: 0000000000000000 R14: 00007f81b3db5fa0 R15: 00007ffcda247548 [ 335.184235][ T8057] [ 337.351944][ T92] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 337.542505][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 337.587118][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.629841][ T92] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.843973][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.307510][ T92] usb 6-1: config 0 descriptor?? [ 338.524458][ T8087] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 338.943713][ T92] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 339.661753][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.702036][ T92] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 339.709175][ T92] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 339.716973][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.791571][ T92] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 339.829368][ T92] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 339.885106][ T92] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 341.655239][ T8100] fuseblk: Unknown parameter 'ò' [ 341.874651][ T92] usb 6-1: USB disconnect, device number 6 [ 342.400651][ T8109] digital: digital_start_poll: Unknown protocol [ 343.153325][ T8113] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 343.161012][ T8113] netlink: 224 bytes leftover after parsing attributes in process `syz.1.547'. [ 345.756790][ T8151] Set syz0 is full, maxelem 0 reached [ 345.797038][ T5928] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 346.960619][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 347.024974][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 347.040535][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 347.056076][ T5928] usb 2-1: Product: syz [ 347.070984][ T5928] usb 2-1: config 0 descriptor?? [ 347.095957][ T5928] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 347.115962][ T5928] gspca_stv06xx: st6422 sensor detected [ 347.315020][ T8161] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 347.630364][ T8146] vxcan0: tx address claim with dest, not broadcast [ 349.329129][ T8146] wg1 speed is unknown, defaulting to 1000 [ 352.492979][ T5928] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -110 [ 352.931890][ T5976] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 354.070993][ T5976] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 354.085472][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.100236][ T5976] usb 3-1: Product: syz [ 354.104919][ T5976] usb 3-1: Manufacturer: syz [ 354.109574][ T5976] usb 3-1: SerialNumber: syz [ 354.183118][ T5976] usb 3-1: config 0 descriptor?? [ 354.197280][ T5976] ch341 3-1:0.0: ch341-uart converter detected [ 354.338408][ T5835] usb 2-1: USB disconnect, device number 24 [ 354.812290][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 354.973265][ T5976] usb 3-1: failed to receive control message: -121 [ 355.033256][ T5976] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 355.376086][ T8211] Invalid logical block size (3) [ 355.617232][ T5835] usb 3-1: USB disconnect, device number 11 [ 356.044548][ T5835] ch341 3-1:0.0: device disconnected [ 358.325061][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 358.368556][ T8254] wg1 speed is unknown, defaulting to 1000 [ 359.048598][ T5835] kernel write not supported for file task/114/net/snmp (pid: 5835 comm: kworker/0:3) [ 359.101187][ T8266] wg1 speed is unknown, defaulting to 1000 [ 360.521644][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 362.504432][ T8305] netlink: 32 bytes leftover after parsing attributes in process `syz.3.587'. [ 363.228758][ T8310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.587'. [ 363.816492][ T8321] overlayfs: failed to clone lowerpath [ 365.423089][ T8333] trusted_key: encrypted_key: insufficient parameters specified [ 367.129006][ T30] audit: type=1400 audit(1753291227.683:28): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8342 comm="syz.3.596" daddr=fe80::aa dest=20002 [ 367.240812][ T8342] delete_channel: no stack [ 368.020181][ T5835] hid-generic 0000:0004:0034.0009: unknown main item tag 0x0 [ 368.027876][ T5835] hid-generic 0000:0004:0034.0009: unknown main item tag 0x0 [ 368.035348][ T5835] hid-generic 0000:0004:0034.0009: unknown main item tag 0x0 [ 369.227982][ T5835] hid-generic 0000:0004:0034.0009: hidraw0: HID v0.0e Device [syz0] on syz1 [ 369.605296][ T5928] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 369.683063][ T30] audit: type=1400 audit(1753291230.253:29): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8358 comm="syz.3.599" daddr=::ffff:0.0.0.0 dest=20002 [ 370.061736][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 370.103800][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.139786][ T8354] fido_id[8354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 370.182163][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.221506][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.251831][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.274861][ T8356] wg1 speed is unknown, defaulting to 1000 [ 370.338556][ T5928] usb 2-1: config 0 descriptor?? [ 370.369790][ T5928] hub 2-1:0.0: USB hub found [ 370.704950][ T5928] hub 2-1:0.0: 2 ports detected [ 371.021472][ C0] hrtimer: interrupt took 116689 ns [ 371.488831][ T8352] openvswitch: netlink: IPv6 tunnel dst address is zero [ 372.058523][ T8379] overlayfs: failed to clone lowerpath [ 372.459605][ T5928] usb 2-1: USB disconnect, device number 25 [ 373.552157][ T8390] overlayfs: failed to clone lowerpath [ 374.110236][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 374.230287][ T8395] team0: Port device batadv1 added [ 374.750422][ T8407] overlayfs: failed to clone lowerpath [ 375.606515][ T8417] fuse: Bad value for 'fd' [ 376.429212][ T5928] hid-generic 0000:0004:0034.000A: unknown main item tag 0x0 [ 376.437525][ T5836] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 376.486564][ T5928] hid-generic 0000:0004:0034.000A: unknown main item tag 0x0 [ 376.647744][ T5928] hid-generic 0000:0004:0034.000A: unknown main item tag 0x0 [ 376.684528][ T5928] hid-generic 0000:0004:0034.000A: hidraw0: HID v0.0e Device [syz0] on syz1 [ 376.722756][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 376.978517][ T5836] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 377.007050][ T30] audit: type=1400 audit(1753291237.563:30): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8430 comm="syz.2.614" daddr=fe80::27 dest=4 [ 377.045729][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.081142][ T5836] usb 2-1: config 0 has no interface number 0 [ 377.109507][ T5836] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 377.168639][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.187542][ T8436] fido_id[8436]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 377.205140][ T5836] usb 2-1: Product: syz [ 377.222790][ T5836] usb 2-1: Manufacturer: syz [ 377.241785][ T5836] usb 2-1: SerialNumber: syz [ 377.269165][ T5836] usb 2-1: config 0 descriptor?? [ 377.327045][ T5836] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 377.400327][ T5836] usb 2-1: No valid video chain found. [ 377.719642][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.734430][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.443004][ T5905] usb 2-1: USB disconnect, device number 26 [ 380.217046][ T8457] overlayfs: failed to clone lowerpath [ 380.930218][ T8471] bpq0: entered promiscuous mode [ 380.935349][ T8471] bpq0: entered allmulticast mode [ 381.007800][ T30] audit: type=1400 audit(1753291241.573:31): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8470 comm="syz.3.621" dest=20004 [ 381.051909][ T5835] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 381.211426][ T30] audit: type=1326 audit(1753291241.763:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 381.235672][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 381.260260][ T5835] usb 5-1: config 0 has no interfaces? [ 381.277045][ T5835] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 381.311649][ T30] audit: type=1326 audit(1753291241.763:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 381.337202][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.385520][ T8484] capability: warning: `syz.3.624' uses 32-bit capabilities (legacy support in use) [ 381.403825][ T5835] usb 5-1: config 0 descriptor?? [ 381.496999][ T8479] mmap: syz.5.622 (8479) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 381.618167][ T30] audit: type=1326 audit(1753291241.763:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 381.658635][ T5905] usb 5-1: USB disconnect, device number 15 [ 381.811507][ T979] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 381.822206][ T30] audit: type=1326 audit(1753291241.763:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 381.913185][ T30] audit: type=1326 audit(1753291241.773:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 382.567391][ T30] audit: type=1326 audit(1753291241.773:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 382.807711][ T30] audit: type=1326 audit(1753291241.773:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 382.899883][ T30] audit: type=1326 audit(1753291241.773:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 383.017454][ T979] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.064808][ T979] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 383.083187][ T30] audit: type=1326 audit(1753291241.773:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 383.108960][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.348078][ T979] usb 6-1: config 0 descriptor?? [ 383.354893][ T30] audit: type=1326 audit(1753291241.773:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 383.928059][ T30] audit: type=1326 audit(1753291241.773:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 383.931252][ T979] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 383.991894][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.998250][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.007714][ T30] audit: type=1326 audit(1753291241.773:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 384.091647][ T30] audit: type=1326 audit(1753291241.783:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 384.312015][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 384.356496][ T30] audit: type=1326 audit(1753291241.783:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 384.447334][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.468366][ T24] usb 6-1: USB disconnect, device number 7 [ 384.501465][ T30] audit: type=1326 audit(1753291241.803:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8475 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fda0658e9a9 code=0x7ffc0000 [ 384.501597][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 384.539906][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.602254][ T43] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.625582][ T43] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.636593][ T43] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 384.681585][ T979] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 384.752708][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 384.759407][ T43] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 385.053543][ T979] usb 5-1: device descriptor read/64, error -71 [ 385.133358][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.264940][ T43] usb 4-1: config 0 descriptor?? [ 385.350662][ T8524] fuseblk: Unknown parameter 'ò' [ 385.412183][ T979] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 385.880025][ T8501] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 385.888019][ T8501] netlink: 224 bytes leftover after parsing attributes in process `syz.3.626'. [ 386.142263][ T8527] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 388.176608][ T5905] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 388.191980][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 388.201937][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 388.247180][ T43] usb 4-1: USB disconnect, device number 24 [ 388.378232][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 388.386681][ T5905] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 388.396066][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.426902][ T5905] usb 3-1: config 0 has no interface number 0 [ 388.467731][ T5905] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 388.483032][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.550419][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 388.550440][ T30] audit: type=1400 audit(1753291249.113:89): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8557 comm="syz.5.638" daddr=fc00::1 dest=20003 [ 388.701280][ T5905] usb 3-1: Product: syz [ 388.709271][ T5905] usb 3-1: Manufacturer: syz [ 388.721495][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 388.730266][ T5905] usb 3-1: SerialNumber: syz [ 388.740800][ T8560] sctp: [Deprecated]: syz.1.637 (pid 8560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.740800][ T8560] Use struct sctp_sack_info instead [ 388.770837][ T30] audit: type=1400 audit(1753291249.143:90): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8557 comm="syz.5.638" daddr=2001:: [ 388.777787][ T5905] usb 3-1: config 0 descriptor?? [ 388.849463][ T5905] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 388.859174][ T5905] usb 3-1: No valid video chain found. [ 388.873928][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 388.887354][ T43] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 388.905236][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.921732][ T43] usb 4-1: config 0 has no interface number 0 [ 388.932976][ T43] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 388.947852][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.956307][ T43] usb 4-1: Product: syz [ 388.960725][ T43] usb 4-1: Manufacturer: syz [ 388.971127][ T43] usb 4-1: SerialNumber: syz [ 389.008931][ T43] usb 4-1: config 0 descriptor?? [ 389.497809][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.513425][ T43] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 389.575123][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.587506][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.612804][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.622703][ T43] usb 4-1: No valid video chain found. [ 390.189286][ T43] usb 3-1: USB disconnect, device number 12 [ 392.898343][ T8589] fuseblk: Unknown parameter 'ò' [ 393.088595][ T30] audit: type=1400 audit(1753291253.653:91): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 394.843014][ T30] audit: type=1400 audit(1753291255.373:92): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8601 comm="syz.1.645" daddr=fe80::aa dest=20002 [ 395.337445][ T8601] delete_channel: no stack [ 395.834095][ T5841] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 396.725114][ T8617] dummy0: entered allmulticast mode [ 397.681574][ T5976] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 397.766510][ T8635] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 397.771522][ T43] usb 4-1: USB disconnect, device number 25 [ 397.797860][ T8635] netlink: 224 bytes leftover after parsing attributes in process `syz.4.651'. [ 397.871502][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 397.915879][ T5976] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 397.951935][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.960022][ T5976] usb 3-1: Product: syz [ 398.221484][ T5976] usb 3-1: Manufacturer: syz [ 398.226169][ T5976] usb 3-1: SerialNumber: syz [ 398.267312][ T5976] usb 3-1: config 0 descriptor?? [ 398.289480][ T8643] fuseblk: Unknown parameter 'ò' [ 398.411218][ T8650] fuse: Bad value for 'fd' [ 398.857568][ T5976] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 398.886085][ T5976] usb 3-1: USB disconnect, device number 13 [ 399.266307][ T30] audit: type=1400 audit(1753291259.833:93): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8649 comm="syz.4.655" daddr=2001::2 dest=20001 [ 400.149478][ T8656] delete_channel: no stack [ 400.346946][ T30] audit: type=1400 audit(1753291260.223:95): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8656 comm="syz.1.657" daddr=fe80::aa dest=20002 [ 401.048572][ T30] audit: type=1400 audit(1753291260.173:94): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8661 comm="syz.5.659" daddr=::900:0:0:0:1 dest=20003 [ 401.137596][ T8668] wg1 speed is unknown, defaulting to 1000 [ 401.907997][ T8681] dummy0: entered allmulticast mode [ 401.981582][ T5835] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 402.171784][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 402.189247][ T5835] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 402.203173][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.214692][ T5835] usb 4-1: config 0 has no interface number 0 [ 402.228677][ T5835] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 402.246591][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.258436][ T5835] usb 4-1: Product: syz [ 402.268602][ T5835] usb 4-1: Manufacturer: syz [ 402.280238][ T5835] usb 4-1: SerialNumber: syz [ 402.299704][ T5835] usb 4-1: config 0 descriptor?? [ 402.325394][ T5835] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 402.361106][ T5835] usb 4-1: No valid video chain found. [ 403.034980][ T5928] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 403.264829][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.287694][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.417320][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.427795][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.469807][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.498340][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.589497][ T5928] usb 3-1: Product: syz [ 403.596043][ T5928] usb 3-1: Manufacturer: syz [ 403.680648][ T5928] usb 3-1: SerialNumber: syz [ 406.523353][ T5928] usb 3-1: cannot find UAC_HEADER [ 406.575693][ T5928] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 406.620399][ T5928] usb 3-1: USB disconnect, device number 14 [ 407.106907][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.189033][ T8724] netlink: 248 bytes leftover after parsing attributes in process `syz.5.671'. [ 407.326981][ T30] audit: type=1400 audit(1753291267.863:96): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 407.863846][ T30] audit: type=1400 audit(1753291268.423:97): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 408.071979][ T8743] overlayfs: failed to clone lowerpath [ 408.174932][ T30] audit: type=1400 audit(1753291268.743:98): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 408.649535][ T30] audit: type=1400 audit(1753291269.213:99): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 408.966884][ T30] audit: type=1400 audit(1753291269.523:100): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8741 comm="syz.2.673" daddr=fe80::aa dest=20002 [ 409.100947][ T8741] delete_channel: no stack [ 409.792588][ T30] audit: type=1400 audit(1753291270.363:101): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8756 comm="syz.5.676" daddr=fe88::106 [ 411.105583][ T5976] usb 4-1: USB disconnect, device number 26 [ 411.688755][ T8775] overlayfs: failed to clone lowerpath [ 414.525092][ T30] audit: type=1400 audit(1753291275.083:102): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8796 comm="syz.3.684" daddr=fe88::104 [ 415.748085][ T8819] overlayfs: failed to clone lowerpath [ 417.074209][ T8823] input: syz0 as /devices/virtual/input/input8 [ 417.081242][ T8823] input: failed to attach handler leds to device input8, error: -6 [ 417.240480][ T8830] fuseblk: Unknown parameter 'ò' [ 419.452368][ T8849] vlan2: entered allmulticast mode [ 419.457615][ T8849] bond0: entered allmulticast mode [ 419.462918][ T8849] bond_slave_0: entered allmulticast mode [ 419.468783][ T8849] bond_slave_1: entered allmulticast mode [ 419.753875][ T8855] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 419.800172][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 419.810714][ T8855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 421.017676][ T8871] dummy0: entered allmulticast mode [ 421.149661][ T30] audit: type=1400 audit(1753291281.713:103): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 421.331172][ T8866] delete_channel: no stack [ 421.819377][ T30] audit: type=1400 audit(1753291281.773:104): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8866 comm="syz.1.704" daddr=fe80::aa dest=20002 [ 422.039477][ T30] audit: type=1400 audit(1753291281.793:105): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 422.085197][ T30] audit: type=1400 audit(1753291282.483:106): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 422.202392][ T30] audit: type=1400 audit(1753291282.663:107): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 423.727159][ T8913] netlink: 40 bytes leftover after parsing attributes in process `syz.5.715'. [ 423.770280][ T8914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.715'. [ 424.050153][ T8922] capability: warning: `syz.3.716' uses deprecated v2 capabilities in a way that may be insecure [ 424.157527][ T8906] tipc: Started in network mode [ 424.181586][ T8906] tipc: Node identity d284e44ba8d8, cluster identity 4711 [ 424.191895][ T30] audit: type=1400 audit(1753291284.763:108): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8927 comm="syz.5.717" daddr=fc00::1 dest=20003 [ 424.211807][ T8906] tipc: Enabled bearer , priority 0 [ 424.218878][ T8907] syzkaller0: entered promiscuous mode [ 424.224417][ T8907] syzkaller0: entered allmulticast mode [ 424.435539][ T30] audit: type=1400 audit(1753291284.813:109): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8927 comm="syz.5.717" daddr=2001:: [ 424.471634][ T8905] tipc: Resetting bearer [ 425.442573][ T8933] delete_channel: no stack [ 425.632246][ T5835] tipc: Node number set to 2052908107 [ 425.640869][ T8905] tipc: Disabling bearer [ 425.654805][ T30] audit: type=1400 audit(1753291285.473:110): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8933 comm="syz.3.719" daddr=fe80::aa dest=20002 [ 427.093651][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 429.215055][ T8974] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 429.334956][ T30] audit: type=1400 audit(1753291289.903:111): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 429.423669][ T30] audit: type=1400 audit(1753291289.903:112): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 429.604769][ T30] audit: type=1400 audit(1753291289.923:113): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 429.668708][ T8987] fuseblk: Unknown parameter 'ò' [ 429.689662][ T30] audit: type=1400 audit(1753291289.983:114): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8977 comm="syz.2.730" daddr=fc00::1 dest=20003 [ 429.724232][ T30] audit: type=1400 audit(1753291289.983:115): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8977 comm="syz.2.730" daddr=2001:: [ 430.992606][ T30] audit: type=1400 audit(1753291291.533:116): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8964 comm="syz.3.727" daddr=::ffff:0.0.0.0 dest=20003 [ 431.459458][ T30] audit: type=1400 audit(1753291292.013:117): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8999 comm="syz.2.734" daddr=fe80::aa dest=20002 [ 431.829411][ T8999] delete_channel: no stack [ 432.679261][ T9019] 9pnet_fd: Insufficient options for proto=fd [ 432.976700][ T9026] fuse: Bad value for 'fd' [ 434.338899][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 434.730623][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 435.148304][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 435.158081][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 438.121467][ T9092] netlink: 'syz.1.753': attribute type 9 has an invalid length. [ 438.129339][ T9092] netlink: 200108 bytes leftover after parsing attributes in process `syz.1.753'. [ 438.140063][ T9092] openvswitch: netlink: Message has 5 unknown bytes. [ 440.038452][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz.5.756'. [ 440.062497][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz.5.756'. [ 441.954511][ T9121] netlink: 'syz.5.761': attribute type 13 has an invalid length. [ 442.643106][ T9126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 443.319634][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.328504][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.593386][ T9145] netlink: 'syz.1.766': attribute type 20 has an invalid length. [ 444.416671][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.447974][ T9121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.701207][ T9121] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.719810][ T9121] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.730337][ T9121] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.739706][ T9121] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.865522][ T9146] dvmrp17: entered allmulticast mode [ 444.877482][ T9147] vlan2: entered allmulticast mode [ 444.912152][ T9147] hsr0: entered allmulticast mode [ 444.926107][ T9147] hsr_slave_0: entered allmulticast mode [ 444.938965][ T9147] hsr_slave_1: entered allmulticast mode [ 446.361277][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.370913][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.633078][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 452.103763][ T9194] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 452.169856][ T9194] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 452.340294][ T9199] syz.2.778 (9199): /proc/9190/oom_adj is deprecated, please use /proc/9190/oom_score_adj instead. [ 452.395354][ T9201] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 455.011621][ T9216] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 455.202463][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 455.559947][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 455.617413][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 456.786933][ T43] usb 5-1: can't read configurations, error -61 [ 457.251664][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 457.304306][ T30] audit: type=1400 audit(1753291317.863:118): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 457.402687][ T30] audit: type=1400 audit(1753291317.863:119): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 457.513693][ T30] audit: type=1400 audit(1753291317.863:120): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 457.750468][ T9255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.789'. [ 457.840896][ T9255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.789'. [ 458.821892][ T30] audit: type=1400 audit(1753291319.383:121): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9264 comm="syz.4.793" daddr=::ffff:172.20.20.0 [ 459.104371][ T9268] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 459.150862][ T9268] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 460.603541][ T9263] syz.5.792: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 460.675232][ T9263] CPU: 0 UID: 0 PID: 9263 Comm: syz.5.792 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 460.675262][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.675279][ T9263] Call Trace: [ 460.675292][ T9263] [ 460.675302][ T9263] dump_stack_lvl+0x189/0x250 [ 460.675338][ T9263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.675364][ T9263] ? __pfx__printk+0x10/0x10 [ 460.675393][ T9263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 460.675421][ T9263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 460.675451][ T9263] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 460.675482][ T9263] warn_alloc+0x214/0x310 [ 460.675507][ T9263] ? stack_depot_save_flags+0x40/0x900 [ 460.675536][ T9263] ? __pfx_warn_alloc+0x10/0x10 [ 460.675563][ T9263] ? kasan_save_track+0x4f/0x80 [ 460.675597][ T9263] ? xskq_create+0x56/0x170 [ 460.675617][ T9263] ? xsk_init_queue+0xb0/0x110 [ 460.675635][ T9263] ? xsk_setsockopt+0x43f/0x710 [ 460.675666][ T9263] ? do_sock_setsockopt+0x179/0x1b0 [ 460.675695][ T9263] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 460.675725][ T9263] ? do_syscall_64+0xfa/0x3b0 [ 460.675747][ T9263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.675778][ T9263] __vmalloc_node_range_noprof+0x125/0x12f0 [ 460.675845][ T9263] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 460.675878][ T9263] ? __kasan_kmalloc+0x93/0xb0 [ 460.675903][ T9263] vmalloc_user_noprof+0xad/0xf0 [ 460.675928][ T9263] ? xskq_create+0xbf/0x170 [ 460.675951][ T9263] xskq_create+0xbf/0x170 [ 460.675977][ T9263] xsk_init_queue+0xb0/0x110 [ 460.676002][ T9263] xsk_setsockopt+0x43f/0x710 [ 460.676038][ T9263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 460.676076][ T9263] ? __fget_files+0x2a/0x420 [ 460.676104][ T9263] ? __fget_files+0x2a/0x420 [ 460.676126][ T9263] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 460.676148][ T9263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 460.676182][ T9263] do_sock_setsockopt+0x179/0x1b0 [ 460.676219][ T9263] __x64_sys_setsockopt+0x13f/0x1b0 [ 460.676262][ T9263] do_syscall_64+0xfa/0x3b0 [ 460.676283][ T9263] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.676306][ T9263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.676326][ T9263] ? clear_bhb_loop+0x60/0xb0 [ 460.676353][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.676373][ T9263] RIP: 0033:0x7fda0658e9a9 [ 460.676392][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.676411][ T9263] RSP: 002b:00007fda0731b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 460.676434][ T9263] RAX: ffffffffffffffda RBX: 00007fda067b5fa0 RCX: 00007fda0658e9a9 [ 460.676450][ T9263] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 460.676462][ T9263] RBP: 00007fda06610d69 R08: 0000000000000052 R09: 0000000000000000 [ 460.676476][ T9263] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.676490][ T9263] R13: 0000000000000000 R14: 00007fda067b5fa0 R15: 00007ffe632d15d8 [ 460.676524][ T9263] [ 460.679986][ T9263] Mem-Info: [ 460.844352][ T9283] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 460.854066][ T9263] active_anon:28980 inactive_anon:12815 isolated_anon:0 [ 460.854066][ T9263] active_file:14695 inactive_file:36844 isolated_file:0 [ 460.854066][ T9263] unevictable:768 dirty:345 writeback:0 [ 460.854066][ T9263] slab_reclaimable:10569 slab_unreclaimable:117086 [ 460.854066][ T9263] mapped:37174 shmem:35825 pagetables:1707 [ 460.854066][ T9263] sec_pagetables:0 bounce:0 [ 460.854066][ T9263] kernel_misc_reclaimable:0 [ 460.854066][ T9263] free:1263456 free_pcp:12899 free_cma:0 [ 461.052566][ T9283] netlink: 224 bytes leftover after parsing attributes in process `syz.1.798'. [ 461.071286][ T9263] Node 0 active_anon:115920kB inactive_anon:60760kB active_file:58576kB inactive_file:147376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158296kB dirty:1380kB writeback:0kB shmem:151264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13428kB pagetables:6700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 461.131553][ T9263] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 461.163014][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.702559][ T9263] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.731409][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.772497][ T9263] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 461.778365][ T9263] Node 0 DMA32 free:1139440kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:115916kB inactive_anon:51212kB active_file:56820kB inactive_file:147308kB unevictable:1536kB writepending:1380kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:29772kB local_pcp:16608kB free_cma:0kB [ 461.838080][ T9263] lowmem_reserve[]: 0 0 1 1 1 [ 461.922147][ T9263] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 461.951278][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.051839][ T9263] lowmem_reserve[]: 0 0 0 0 0 [ 462.061439][ T9263] Node 1 Normal free:3897756kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23104kB local_pcp:9760kB free_cma:0kB [ 462.164446][ T9263] lowmem_reserve[]: 0 0 0 0 0 [ 462.184086][ T9263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 462.357275][ T9263] Node 0 DMA32: 1508*4kB (UME) 807*8kB (UME) 476*16kB (UME) 419*32kB (UME) 202*64kB (UME) 164*128kB (UME) 133*256kB (UM) 95*512kB (UME) 63*1024kB (UM) 21*2048kB (UM) 216*4096kB (M) = 1142376kB [ 462.529295][ T9263] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 462.555693][ T30] audit: type=1400 audit(1753291323.123:122): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9300 comm="syz.1.802" daddr=fe80::1c dest=20000 [ 462.579886][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 462.615712][ T9263] Node 1 Normal: 177*4kB (U) 33*8kB (UME) 37*16kB (UME) 94*32kB (UME) 27*64kB (UM) 6*128kB (UME) 4*256kB (UM) 3*512kB (ME) 3*1024kB (UM) 1*2048kB (U) 948*4096kB (M) = 3897756kB [ 462.633810][ T9263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.644496][ T9263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.654247][ T9263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.663985][ T9263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.685467][ T9263] 87383 total pagecache pages [ 462.690253][ T9263] 0 pages in swap cache [ 462.762252][ T9263] Free swap = 124996kB [ 462.775816][ T9263] Total swap = 124996kB [ 462.809683][ T9263] 2097051 pages RAM [ 462.841553][ T9263] 0 pages HighMem/MovableOnly [ 462.846320][ T9263] 424693 pages reserved [ 462.868400][ T9263] 0 pages cma reserved [ 463.129992][ T9310] qrtr: Invalid version 47 [ 463.379258][ T9318] fuseblk: Unknown parameter 'ò' [ 463.921482][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 464.411532][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 464.447443][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.579691][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.676593][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.713997][ T9330] netlink: 'syz.5.809': attribute type 1 has an invalid length. [ 464.730851][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.821229][ T43] usb 4-1: Product: syz [ 464.857460][ T43] usb 4-1: Manufacturer: syz [ 464.882763][ T9330] netlink: 224 bytes leftover after parsing attributes in process `syz.5.809'. [ 464.911680][ T43] usb 4-1: SerialNumber: syz [ 466.043600][ T9333] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 466.073778][ T9333] netlink: 224 bytes leftover after parsing attributes in process `syz.1.811'. [ 466.129025][ T43] usb 4-1: 0:2 : does not exist [ 466.154864][ T43] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 466.245292][ T43] usb 4-1: USB disconnect, device number 27 [ 466.443558][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.575137][ T9369] fuseblk: Unknown parameter 'ò' [ 469.648429][ T9376] netlink: 'syz.2.824': attribute type 20 has an invalid length. [ 470.038090][ T9376] binder: 9373:9376 unknown command 1662921567 [ 470.072182][ T9376] binder: 9373:9376 ioctl c0306201 200000000300 returned -22 [ 470.957600][ T9376] xt_hashlimit: size too large, truncated to 1048576 [ 470.957951][ T9379] binder: 9373:9379 ioctl c0045006 2000000003c0 returned -22 [ 471.315653][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 472.470821][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 473.833629][ T9413] FAULT_INJECTION: forcing a failure. [ 473.833629][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 473.846472][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.2.831 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 473.846500][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.846514][ T9413] Call Trace: [ 473.846524][ T9413] [ 473.846536][ T9413] dump_stack_lvl+0x189/0x250 [ 473.846567][ T9413] ? __pfx____ratelimit+0x10/0x10 [ 473.846592][ T9413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.846617][ T9413] ? __pfx__printk+0x10/0x10 [ 473.846652][ T9413] ? __pfx___might_resched+0x10/0x10 [ 473.846675][ T9413] ? fs_reclaim_acquire+0x7d/0x100 [ 473.846708][ T9413] should_fail_ex+0x414/0x560 [ 473.846744][ T9413] should_failslab+0xa8/0x100 [ 473.846770][ T9413] __kmalloc_noprof+0xcb/0x4f0 [ 473.846790][ T9413] ? kfree+0x4d/0x440 [ 473.846819][ T9413] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 473.846855][ T9413] tomoyo_realpath_from_path+0xe3/0x5d0 [ 473.846887][ T9413] ? tomoyo_domain+0xda/0x130 [ 473.846923][ T9413] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 473.846947][ T9413] tomoyo_path_number_perm+0x1e8/0x5a0 [ 473.846974][ T9413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.846999][ T9413] ? __seccomp_filter+0x3cf/0x1a40 [ 473.847038][ T9413] ? __lock_acquire+0xab9/0xd20 [ 473.847083][ T9413] ? __fget_files+0x2a/0x420 [ 473.847112][ T9413] ? __fget_files+0x2a/0x420 [ 473.847135][ T9413] ? __fget_files+0x3a0/0x420 [ 473.847158][ T9413] ? __fget_files+0x2a/0x420 [ 473.847187][ T9413] security_file_ioctl+0xcb/0x2d0 [ 473.847215][ T9413] __se_sys_ioctl+0x47/0x170 [ 473.847251][ T9413] do_syscall_64+0xfa/0x3b0 [ 473.847274][ T9413] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.847297][ T9413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.847320][ T9413] ? clear_bhb_loop+0x60/0xb0 [ 473.847347][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.847369][ T9413] RIP: 0033:0x7fc38ff8e9a9 [ 473.847389][ T9413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.847408][ T9413] RSP: 002b:00007fc390dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.847431][ T9413] RAX: ffffffffffffffda RBX: 00007fc3901b6160 RCX: 00007fc38ff8e9a9 [ 473.847447][ T9413] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000009 [ 473.847461][ T9413] RBP: 00007fc390dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 473.847475][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.847489][ T9413] R13: 0000000000000000 R14: 00007fc3901b6160 R15: 00007fffe703b3a8 [ 473.847524][ T9413] [ 473.847563][ T9413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.123233][ T9413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.184031][ T9415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.531501][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 475.181519][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 475.661501][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 475.669363][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 475.697022][ T10] usb 5-1: config 0 has no interface number 0 [ 475.723564][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 475.769181][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 475.803800][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 475.849111][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 475.911483][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.943379][ T10] usb 5-1: Product: syz [ 475.947609][ T10] usb 5-1: Manufacturer: syz [ 475.961458][ T10] usb 5-1: SerialNumber: syz [ 475.986767][ T10] usb 5-1: config 0 descriptor?? [ 476.138081][ T9421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.145739][ T9421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.288587][ T9434] fuse: Bad value for 'fd' [ 476.793834][ T9421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.801250][ T9421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.995772][ T9436] netlink: 88 bytes leftover after parsing attributes in process `syz.3.841'. [ 477.189891][ T9441] new mount options do not match the existing superblock, will be ignored [ 477.310475][ T9441] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 477.442536][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 477.455278][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 480.447366][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 480.573144][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 480.601086][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 480.658751][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 480.691867][ T10] usb 5-1: USB disconnect, device number 20 [ 480.760112][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 481.024027][ T9454] loop7: detected capacity change from 0 to 16384 [ 481.082447][ T9454] loop7: detected capacity change from 16384 to 0 [ 481.621413][ T24] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 481.709912][ T9470] wg1 speed is unknown, defaulting to 1000 [ 481.731593][ T5835] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 481.761455][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 481.792253][ T24] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 481.800794][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.821494][ T24] usb 5-1: config 0 has no interface number 0 [ 481.828310][ T24] usb 5-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.845190][ T24] usb 5-1: config 0 interface 231 has no altsetting 0 [ 481.856274][ T24] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 481.866656][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.874898][ T24] usb 5-1: Product: syz [ 481.879429][ T24] usb 5-1: Manufacturer: syz [ 481.884220][ T24] usb 5-1: SerialNumber: syz [ 481.911661][ T24] usb 5-1: config 0 descriptor?? [ 481.917740][ T5835] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 481.934267][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.944646][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 481.950352][ T5835] usb 6-1: config 0 has no interface number 0 [ 481.958693][ T10] usb 3-1: config 0 has no interfaces? [ 481.969167][ T5835] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 481.981250][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.991120][ T5835] usb 6-1: Product: syz [ 481.995852][ T5835] usb 6-1: Manufacturer: syz [ 482.001138][ T10] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 482.010318][ T5835] usb 6-1: SerialNumber: syz [ 482.015112][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.024868][ T10] usb 3-1: Product: syz [ 482.029579][ T10] usb 3-1: Manufacturer: syz [ 482.040320][ T5835] usb 6-1: config 0 descriptor?? [ 482.050767][ T10] usb 3-1: SerialNumber: syz [ 482.060882][ T5835] hub 6-1:0.31: bad descriptor, ignoring hub [ 482.072801][ T5835] hub 6-1:0.31: probe with driver hub failed with error -5 [ 482.082692][ T10] usb 3-1: config 0 descriptor?? [ 482.100923][ T5835] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 482.119911][ T5835] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 482.129558][ T5835] usb 6-1: Failed to create links for entity 6 [ 482.136338][ T5835] usb 6-1: Failed to register entities (-22). [ 482.148613][ T24] asix 5-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 482.173971][ T24] asix 5-1:0.231: probe with driver asix failed with error -61 [ 482.258053][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.289061][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.462406][ T24] usb 5-1: USB disconnect, device number 21 [ 482.491959][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 482.498426][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 483.487153][ T9480] tipc: Started in network mode [ 483.496983][ T9480] tipc: Node identity 660d85f82d68, cluster identity 4711 [ 483.506426][ T9480] tipc: Enabled bearer , priority 0 [ 483.515630][ T9480] syzkaller0: entered promiscuous mode [ 483.524120][ T9480] syzkaller0: entered allmulticast mode [ 483.583110][ T9480] program syz.3.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.654721][ T9479] tipc: Resetting bearer [ 483.750246][ T9479] tipc: Disabling bearer [ 484.990752][ T5835] usb 3-1: USB disconnect, device number 15 [ 485.163268][ T9493] tipc: Enabled bearer , priority 0 [ 485.182163][ T9493] syzkaller0: entered promiscuous mode [ 485.187703][ T9493] syzkaller0: entered allmulticast mode [ 485.228224][ T9492] tipc: Resetting bearer [ 485.353101][ T9492] tipc: Disabling bearer [ 488.153486][ T5905] usb 6-1: USB disconnect, device number 8 [ 488.644809][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 489.084649][ T9538] binder: BINDER_SET_CONTEXT_MGR already set [ 489.091148][ T9538] binder: 9528:9538 ioctl 4018620d 200000000040 returned -16 [ 490.134036][ T9533] tipc: Enabled bearer , priority 0 [ 490.346123][ T9533] tipc: Resetting bearer [ 490.628668][ T9532] tipc: Disabling bearer [ 490.723635][ T9551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 490.733797][ T9535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 492.275052][ T30] audit: type=1400 audit(1753291352.833:123): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9561 comm="syz.4.874" daddr=fe88::105 [ 493.652756][ T9567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.692492][ T9584] fuseblk: Unknown parameter 'ò' [ 494.891790][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 495.198880][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 495.338931][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 495.581301][ T5928] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 495.646113][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 495.681477][ T5928] usb 4-1: Product: syz [ 495.687195][ T5928] usb 4-1: Manufacturer: syz [ 495.759852][ T5928] usb 4-1: SerialNumber: syz [ 495.966909][ T5928] usb 4-1: config 0 descriptor?? [ 495.984796][ T9583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.727839][ T5928] hub 4-1:0.0: bad descriptor, ignoring hub [ 496.777143][ T9588] wg1 speed is unknown, defaulting to 1000 [ 496.841597][ T5928] hub 4-1:0.0: probe with driver hub failed with error -5 [ 496.912255][ T5928] usb 4-1: USB disconnect, device number 28 [ 497.431694][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 497.741837][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 498.437073][ T5928] usb 4-1: device descriptor read/all, error -71 [ 498.568729][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.885'. [ 498.621598][ T9615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.885'. [ 499.566794][ T30] audit: type=1326 audit(1753291360.133:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 499.639601][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 499.653106][ T30] audit: type=1326 audit(1753291360.133:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 499.698844][ T30] audit: type=1326 audit(1753291360.153:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 499.855140][ T30] audit: type=1326 audit(1753291360.153:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 499.886890][ T30] audit: type=1326 audit(1753291360.153:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 499.968090][ T30] audit: type=1326 audit(1753291360.153:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 500.064009][ T9629] tipc: Enabled bearer , priority 0 [ 500.090432][ T9629] syzkaller0: entered promiscuous mode [ 500.093363][ T30] audit: type=1326 audit(1753291360.153:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 500.109956][ T9629] syzkaller0: entered allmulticast mode [ 500.188834][ T30] audit: type=1326 audit(1753291360.153:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 500.212145][ T30] audit: type=1326 audit(1753291360.203:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 500.233487][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.244842][ T30] audit: type=1326 audit(1753291360.203:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af258e9a9 code=0x7ffc0000 [ 500.452314][ T9629] tipc: Resetting bearer [ 500.622368][ T9643] netlink: 'syz.1.894': attribute type 10 has an invalid length. [ 500.654680][ T9643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.677918][ T9643] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 500.713145][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.720928][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.166194][ T5928] tipc: Node number set to 1264944632 [ 501.181962][ T12] bond0: (slave batadv0): interface is now down [ 501.271695][ T12] bond0: (slave batadv0): interface is now down [ 501.415704][ T12] bond0: (slave batadv0): interface is now down [ 501.440502][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.448667][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.531616][ T7632] bond0: (slave batadv0): interface is now down [ 501.580968][ T9647] FAULT_INJECTION: forcing a failure. [ 501.580968][ T9647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.596600][ T176] bond0: (slave batadv0): interface is now down [ 501.706082][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.5.896 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 501.706116][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.706130][ T9647] Call Trace: [ 501.706139][ T9647] [ 501.706150][ T9647] dump_stack_lvl+0x189/0x250 [ 501.706183][ T9647] ? __pfx____ratelimit+0x10/0x10 [ 501.706207][ T9647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.706233][ T9647] ? __pfx__printk+0x10/0x10 [ 501.706266][ T9647] ? __might_fault+0xb0/0x130 [ 501.706301][ T9647] should_fail_ex+0x414/0x560 [ 501.706338][ T9647] _copy_from_user+0x2d/0xb0 [ 501.706370][ T9647] ___sys_recvmsg+0x12e/0x510 [ 501.706414][ T9647] ? __pfx____sys_recvmsg+0x10/0x10 [ 501.706477][ T9647] ? __fget_files+0x3a0/0x420 [ 501.706516][ T9647] do_recvmmsg+0x307/0x770 [ 501.706548][ T9647] ? __pfx_do_recvmmsg+0x10/0x10 [ 501.706584][ T9647] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.706630][ T9647] __x64_sys_recvmmsg+0x190/0x240 [ 501.706656][ T9647] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 501.706676][ T9647] ? rcu_is_watching+0x15/0xb0 [ 501.706706][ T9647] ? do_syscall_64+0xbe/0x3b0 [ 501.706735][ T9647] do_syscall_64+0xfa/0x3b0 [ 501.706758][ T9647] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.706780][ T9647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.706801][ T9647] ? clear_bhb_loop+0x60/0xb0 [ 501.706835][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.706856][ T9647] RIP: 0033:0x7fda0658e9a9 [ 501.706875][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.706895][ T9647] RSP: 002b:00007fda0731b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 501.706919][ T9647] RAX: ffffffffffffffda RBX: 00007fda067b5fa0 RCX: 00007fda0658e9a9 [ 501.706936][ T9647] RDX: 0000000000000001 RSI: 0000200000001d80 RDI: 0000000000000003 [ 501.706949][ T9647] RBP: 00007fda0731b090 R08: 0000000000000000 R09: 0000000000000000 [ 501.706962][ T9647] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 501.706975][ T9647] R13: 0000000000000000 R14: 00007fda067b5fa0 R15: 00007ffe632d15d8 [ 501.707009][ T9647] [ 501.920112][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.211842][ T12] bond0: (slave batadv0): interface is now down [ 502.231497][ T176] bond0: (slave batadv0): interface is now down [ 502.531137][ T176] bond0: (slave batadv0): interface is now down [ 502.840781][ T2937] bond0: (slave batadv0): interface is now down [ 503.142266][ T7575] bond0: (slave batadv0): interface is now down [ 503.271801][ T2937] bond0: (slave batadv0): interface is now down [ 503.360742][ T2937] bond0: (slave batadv0): interface is now down [ 503.457655][ T12] bond0: (slave batadv0): interface is now down [ 503.533626][ T2937] bond0: (slave batadv0): interface is now down [ 503.615598][ T12] bond0: (slave batadv0): interface is now down [ 503.703947][ T12] bond0: (slave batadv0): interface is now down [ 503.834301][ T7576] bond0: (slave batadv0): interface is now down [ 503.891696][ T2937] bond0: (slave batadv0): interface is now down [ 503.925252][ T9643] bond0: (slave batadv0): Releasing backup interface [ 504.014449][ T9627] tipc: Resetting bearer [ 504.121425][ T5928] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 504.132258][ T9627] tipc: Disabling bearer [ 504.647927][ T43] hid-generic 0000:0004:0034.000B: unknown main item tag 0x0 [ 504.660311][ T43] hid-generic 0000:0004:0034.000B: unknown main item tag 0x0 [ 504.660444][ T43] hid-generic 0000:0004:0034.000B: unknown main item tag 0x0 [ 504.801889][ T43] hid-generic 0000:0004:0034.000B: hidraw0: HID v0.0e Device [syz0] on syz1 [ 505.638450][ T9658] tty tty4: ldisc open failed (-12), clearing slot 3 [ 505.710590][ T9664] fido_id[9664]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 505.754203][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 505.774883][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 506.734898][ T5928] usb 5-1: string descriptor 0 read error: -71 [ 506.745791][ T5928] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 506.756580][ T5928] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 506.783410][ T5928] usb 5-1: can't set config #1, error -71 [ 506.815776][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.822473][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.834467][ T5928] usb 5-1: USB disconnect, device number 22 [ 507.196016][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.905'. [ 507.245120][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.905'. [ 507.865638][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 508.019918][ T9691] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 508.051624][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 508.051644][ T30] audit: type=1400 audit(1753291368.583:157): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9692 comm="syz.1.909" [ 508.081707][ T9691] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 508.235119][ T9691] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 508.331674][ T9700] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 508.517270][ T9704] support for cryptoloop has been removed. Use dm-crypt instead. [ 508.874917][ T9706] openvswitch: netlink: Geneve option length err (len 374, max 255). [ 508.946772][ T30] audit: type=1400 audit(1753291369.513:158): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9715 comm="syz.1.916" daddr=ff02::1 dest=20000 [ 508.966717][ T9716] tmpfs: Bad value for 'mpol' [ 509.141811][ T30] audit: type=1400 audit(1753291369.533:159): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9715 comm="syz.1.916" daddr=::ffff:172.20.20.56 dest=20001 [ 509.251931][ T5905] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 509.491689][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 509.507999][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.526015][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.545694][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.570357][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.690258][ T5905] usb 2-1: config 0 descriptor?? [ 509.737139][ T5905] hub 2-1:0.0: USB hub found [ 510.110334][ T5905] hub 2-1:0.0: 1 port detected [ 510.381201][ T9738] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 511.691011][ T9747] usb usb1: check_ctrlrecip: process 9747 (syz.5.922) requesting ep 01 but needs 81 [ 511.700751][ T9747] usb usb1: usbfs: process 9747 (syz.5.922) did not claim interface 0 before use [ 511.756065][ T30] audit: type=1400 audit(1753291372.283:160): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9745 comm="syz.5.922" dest=20002 [ 512.157265][ T5976] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 512.158851][ T10] usb 2-1: USB disconnect, device number 27 [ 514.050261][ T9775] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 514.756409][ T9777] netlink: 188 bytes leftover after parsing attributes in process `syz.2.930'. [ 515.098701][ T5976] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 516.163745][ T30] audit: type=1400 audit(1753291376.713:161): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9782 comm="syz.1.931" daddr=fe88::102 [ 517.011392][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 517.160541][ T5976] usb 6-1: device descriptor read/all, error -71 [ 518.690045][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'. [ 521.077757][ T9810] usb usb5: usbfs: process 9810 (syz.3.927) did not claim interface 0 before use [ 523.555973][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 526.762151][ T30] audit: type=1400 audit(1753291386.943:162): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9853 comm="syz.1.945" daddr=fe88::102 [ 533.712139][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.958'. [ 533.837852][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.958'. [ 534.235385][ T9906] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 535.235234][ T5976] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 535.536345][ T30] audit: type=1400 audit(1753291395.863:163): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9908 comm="syz.5.960" daddr=fe80::aa dest=20002 [ 536.631451][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 536.648417][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.665289][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.676349][ T5976] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 536.685820][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.742779][ T5976] usb 3-1: config 0 descriptor?? [ 538.211760][ T5976] hid (null): report_id 0 is invalid [ 538.726654][ T5976] usb 3-1: string descriptor 0 read error: -71 [ 538.785887][ T5976] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 538.827817][ T5976] letsketch 0003:6161:4D15.000C: probe with driver letsketch failed with error -32 [ 538.829949][ T9938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.967'. [ 538.871820][ T5976] usb 3-1: USB disconnect, device number 16 [ 540.773733][ T30] audit: type=1400 audit(1753291400.713:164): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9948 comm="syz.1.972" daddr=fe80::aa dest=20002 [ 541.386595][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.974'. [ 541.397578][ T9962] binder: BINDER_SET_CONTEXT_MGR already set [ 541.403729][ T9962] binder: 9954:9962 ioctl 4018620d 200000000040 returned -16 [ 542.769777][ T9975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.783815][ T9975] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 542.793609][ T9975] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 542.804786][ T9975] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 542.812962][ T9975] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 542.995373][ T9973] wg1 speed is unknown, defaulting to 1000 [ 543.731189][ T9986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.980'. [ 544.020511][ T9986] syz.2.980: attempt to access beyond end of device [ 544.020511][ T9986] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 544.118991][ T9986] syz.2.980: attempt to access beyond end of device [ 544.118991][ T9986] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 544.162601][ T9986] Mount JFS Failure: -5 [ 544.552574][ T9973] chnl_net:caif_netlink_parms(): no params data found [ 544.891532][ T9975] Bluetooth: hci5: command tx timeout [ 545.053513][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.071842][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.079177][ T9973] bridge_slave_0: entered allmulticast mode [ 545.108484][ T9973] bridge_slave_0: entered promiscuous mode [ 545.145217][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.153180][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.181718][ T9973] bridge_slave_1: entered allmulticast mode [ 545.198791][ T9973] bridge_slave_1: entered promiscuous mode [ 545.344018][T10009] Set syz0 is full, maxelem 0 reached [ 545.795963][ T9973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.951329][ T9973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.145861][ T9975] Bluetooth: hci5: command tx timeout [ 547.519010][ T9973] team0: Port device team_slave_0 added [ 547.575848][ T9973] team0: Port device team_slave_1 added [ 548.594762][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.602811][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.900541][ T9973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.946392][ T30] audit: type=1400 audit(1753291409.473:165): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10030 comm="syz.5.992" daddr=fe80::aa [ 549.199493][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.211629][ T9975] Bluetooth: hci5: command tx timeout [ 549.376425][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.409319][ T9973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.649069][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 549.670977][T10039] binder: BINDER_SET_CONTEXT_MGR already set [ 549.677167][T10039] binder: 10034:10039 ioctl 4018620d 200000000040 returned -16 [ 551.118487][T10050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.994'. [ 551.673745][ T30] audit: type=1400 audit(1753291411.683:166): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10041 comm="syz.4.994" daddr=::ffff:0.0.0.0 dest=20002 [ 552.033881][ T9975] Bluetooth: hci5: command tx timeout [ 552.050130][ T9973] hsr_slave_0: entered promiscuous mode [ 552.074133][T10046] netlink: 'syz.5.996': attribute type 4 has an invalid length. [ 552.157645][ T9973] hsr_slave_1: entered promiscuous mode [ 552.164464][ T9973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.174331][ T9973] Cannot create hsr debugfs directory [ 553.857493][ T9973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.914744][ T9973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 554.060166][ T9973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 554.096284][ T9973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.780493][ T49] bridge_slave_1: left allmulticast mode [ 554.808670][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 554.818195][ T49] bridge_slave_1: left promiscuous mode [ 554.834139][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.893205][ T49] bridge_slave_0: left allmulticast mode [ 554.910269][ T49] bridge_slave_0: left promiscuous mode [ 554.953968][ T9975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.963885][ T9975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.972205][ T9975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.985140][ T9975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.992929][ T9975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.006438][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.052699][ T9975] Bluetooth: hci2: command tx timeout [ 558.248293][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.285790][ T49] bond_slave_0: left allmulticast mode [ 558.296224][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.325628][ T49] bond_slave_1: left allmulticast mode [ 558.342134][ T49] bond0 (unregistering): Released all slaves [ 558.937566][T10107] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 558.949735][T10107] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 559.207379][ T9975] Bluetooth: hci2: command tx timeout [ 559.528846][T10089] wg1 speed is unknown, defaulting to 1000 [ 560.397877][T10112] Set syz0 is full, maxelem 0 reached [ 560.577032][ T9973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.722011][ T9973] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.924122][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.931417][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.956081][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.963465][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.307781][ T9975] Bluetooth: hci2: command tx timeout [ 561.543736][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 561.554758][T10142] binder: BINDER_SET_CONTEXT_MGR already set [ 561.560808][T10142] binder: 10128:10142 ioctl 4018620d 200000000040 returned -16 [ 561.574854][ T49] hsr_slave_0: left promiscuous mode [ 561.723717][ T49] hsr_slave_1: left promiscuous mode [ 561.748381][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.798427][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.896628][ T49] team0 (unregistering): Port device batadv1 removed [ 563.372576][ T9975] Bluetooth: hci2: command tx timeout [ 563.476820][ T49] team0 (unregistering): Port device team_slave_1 removed [ 563.590854][ T49] team0 (unregistering): Port device team_slave_0 removed [ 564.525075][ T49] dummy0 (unregistering): left allmulticast mode [ 565.204961][T10089] chnl_net:caif_netlink_parms(): no params data found [ 565.346682][ T5905] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 565.545658][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 565.559107][ T5905] usb 5-1: config 0 has an invalid interface number: 202 but max is 1 [ 565.592957][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.665271][ T5905] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 565.724513][ T5905] usb 5-1: config 0 has no interface number 0 [ 565.745177][ T5905] usb 5-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 565.779727][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.797494][T10188] Set syz0 is full, maxelem 0 reached [ 565.800419][ T5905] usb 5-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 565.821868][T10089] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.992089][T10089] bridge_slave_0: entered allmulticast mode [ 566.015612][ T5905] usb 5-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 566.018755][T10089] bridge_slave_0: entered promiscuous mode [ 566.078562][ T5905] usb 5-1: config 0 interface 202 has no altsetting 0 [ 566.086343][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.121216][ T5905] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 566.139357][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.140651][T10089] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.161031][T10089] bridge_slave_1: entered allmulticast mode [ 566.169848][T10089] bridge_slave_1: entered promiscuous mode [ 566.176499][ T5905] usb 5-1: Product: syz [ 566.189601][ T5905] usb 5-1: Manufacturer: syz [ 566.207557][ T5905] usb 5-1: SerialNumber: syz [ 566.232021][ T5905] usb 5-1: config 0 descriptor?? [ 566.294591][ T5905] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 566.347256][T10089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.410431][T10089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.459519][ T36] usb 5-1: Failed to submit usb control message: -71 [ 566.460719][ T5928] usb 5-1: USB disconnect, device number 23 [ 566.486224][ T36] usb 5-1: unable to send the bmi data to the device: -71 [ 566.502240][ T36] usb 5-1: unable to get target info from device [ 566.510212][ T36] usb 5-1: could not get target info (-71) [ 566.517364][ T36] usb 5-1: could not probe fw (-71) [ 566.650523][T10089] team0: Port device team_slave_0 added [ 566.685300][T10089] team0: Port device team_slave_1 added [ 566.784277][T10089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.583046][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.609878][T10089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.681109][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.943370][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 568.259148][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.682313][T10089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.970639][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.997171][T10089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.343719][T10089] hsr_slave_0: entered promiscuous mode [ 570.362303][T10089] hsr_slave_1: entered promiscuous mode [ 570.372500][T10089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.420847][T10089] Cannot create hsr debugfs directory [ 570.546653][T10229] FAULT_INJECTION: forcing a failure. [ 570.546653][T10229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.560230][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.4.1031 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 570.560259][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.560272][T10229] Call Trace: [ 570.560283][T10229] [ 570.560292][T10229] dump_stack_lvl+0x189/0x250 [ 570.560318][T10229] ? irqentry_exit+0x74/0x90 [ 570.560335][T10229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.560359][T10229] ? dump_stack+0x9/0x20 [ 570.560380][T10229] should_fail_ex+0x414/0x560 [ 570.560400][T10229] _copy_from_user+0x2d/0xb0 [ 570.560422][T10229] __copy_msghdr+0x3c5/0x5b0 [ 570.560449][T10229] ___sys_sendmsg+0x1a5/0x2a0 [ 570.560473][T10229] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.560523][T10229] ? __fget_files+0x2a/0x420 [ 570.560540][T10229] ? __fget_files+0x3a0/0x420 [ 570.560564][T10229] __x64_sys_sendmsg+0x19b/0x260 [ 570.560589][T10229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.560627][T10229] ? __pfx_ksys_write+0x10/0x10 [ 570.560645][T10229] ? do_syscall_64+0xbe/0x3b0 [ 570.560665][T10229] do_syscall_64+0xfa/0x3b0 [ 570.560683][T10229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.560697][T10229] ? asm_sysvec_call_function_single+0x1a/0x20 [ 570.560713][T10229] ? clear_bhb_loop+0x60/0xb0 [ 570.560731][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.560746][T10229] RIP: 0033:0x7f7af258e9a9 [ 570.560759][T10229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.560772][T10229] RSP: 002b:00007f7af331e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.560789][T10229] RAX: ffffffffffffffda RBX: 00007f7af27b6080 RCX: 00007f7af258e9a9 [ 570.560800][T10229] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000009 [ 570.560810][T10229] RBP: 00007f7af331e090 R08: 0000000000000000 R09: 0000000000000000 [ 570.560819][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.560828][T10229] R13: 0000000000000000 R14: 00007f7af27b6080 R15: 00007fffb0dea438 [ 570.560851][T10229] [ 572.590251][T10244] Set syz0 is full, maxelem 0 reached [ 572.872872][ T9973] veth0_vlan: entered promiscuous mode [ 572.943615][ T9973] veth1_vlan: entered promiscuous mode [ 573.083917][ T9973] veth0_macvtap: entered promiscuous mode [ 573.173745][ T9973] veth1_macvtap: entered promiscuous mode [ 573.327912][ T30] audit: type=1400 audit(1753291433.863:167): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10252 comm="syz.4.1036" daddr=fc00::1 dest=20003 [ 573.374635][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.401147][T10089] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 573.433201][ T30] audit: type=1400 audit(1753291433.873:168): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10252 comm="syz.4.1036" daddr=2001:: [ 573.504327][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.587795][T10089] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 573.629888][T10089] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 574.450401][ T9973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.462898][ T9973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.478752][ T9973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.492163][ T9973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.506910][T10089] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 575.532064][ T30] audit: type=1400 audit(1753291435.983:169): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10267 comm="syz.4.1038" daddr=fe80::aa [ 576.272694][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.298166][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.507278][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.549504][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.120377][T10089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.284952][T10089] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.524388][ T9975] Bluetooth: hci5: ISO packet too small [ 578.255697][ T30] audit: type=1400 audit(1753291438.823:170): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10296 comm="syz.4.1044" daddr=fc00::1 dest=20003 [ 578.276946][ T5906] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 578.302441][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.309748][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.388273][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.395596][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.483638][ T30] audit: type=1400 audit(1753291438.843:171): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10296 comm="syz.4.1044" daddr=2001:: [ 578.502400][T10286] wg1 speed is unknown, defaulting to 1000 [ 578.691429][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 578.708775][ T5906] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.c0 [ 578.726543][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.451918][ T5906] usb 2-1: config 0 descriptor?? [ 580.822700][ T5906] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 580.861030][ T5906] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 581.280988][ T5906] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 582.320675][T10089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.094758][T10089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.581248][ T30] audit: type=1400 audit(1753291446.143:172): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10343 comm="syz.4.1056" daddr=fc00::1 dest=20003 [ 585.699964][ T30] audit: type=1400 audit(1753291446.143:173): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10343 comm="syz.4.1056" daddr=2001:: [ 586.197214][T10359] FAULT_INJECTION: forcing a failure. [ 586.197214][T10359] name failslab, interval 1, probability 0, space 0, times 0 [ 586.211214][T10359] CPU: 0 UID: 0 PID: 10359 Comm: syz.1.1057 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 586.211243][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.211257][T10359] Call Trace: [ 586.211265][T10359] [ 586.211277][T10359] dump_stack_lvl+0x189/0x250 [ 586.211307][T10359] ? __pfx____ratelimit+0x10/0x10 [ 586.211332][T10359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.211356][T10359] ? __pfx__printk+0x10/0x10 [ 586.211391][T10359] ? __pfx___might_resched+0x10/0x10 [ 586.211420][T10359] should_fail_ex+0x414/0x560 [ 586.211448][T10359] should_failslab+0xa8/0x100 [ 586.211474][T10359] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 586.211496][T10359] ? trace_irq_disable+0x37/0x110 [ 586.211525][T10359] ? __alloc_skb+0x112/0x2d0 [ 586.211559][T10359] __alloc_skb+0x112/0x2d0 [ 586.211593][T10359] netlink_sendmsg+0x5c6/0xb30 [ 586.211623][T10359] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.211661][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.211719][T10359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.211741][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.211773][T10359] __sock_sendmsg+0x21c/0x270 [ 586.211802][T10359] ____sys_sendmsg+0x505/0x830 [ 586.211841][T10359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.211885][T10359] ? import_iovec+0x74/0xa0 [ 586.211926][T10359] ___sys_sendmsg+0x21f/0x2a0 [ 586.211963][T10359] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.212044][T10359] ? __fget_files+0x2a/0x420 [ 586.212067][T10359] ? __fget_files+0x3a0/0x420 [ 586.212103][T10359] __x64_sys_sendmsg+0x19b/0x260 [ 586.212139][T10359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.212201][T10359] do_syscall_64+0xfa/0x3b0 [ 586.212227][T10359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.212248][T10359] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 586.212268][T10359] ? clear_bhb_loop+0x60/0xb0 [ 586.212295][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.212316][T10359] RIP: 0033:0x7f81b3b8e9a9 [ 586.212335][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.212354][T10359] RSP: 002b:00007f81b4a39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.212377][T10359] RAX: ffffffffffffffda RBX: 00007f81b3db6160 RCX: 00007f81b3b8e9a9 [ 586.212394][T10359] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000009 [ 586.212408][T10359] RBP: 00007f81b4a39090 R08: 0000000000000000 R09: 0000000000000000 [ 586.212421][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.212434][T10359] R13: 0000000000000000 R14: 00007f81b3db6160 R15: 00007ffcda247548 [ 586.212468][T10359] [ 586.476437][T10359] tmpfs: Unknown parameter 'mpomdef}rSÝPäI]n²âµaOÔXîž2ut' [ 587.545185][T10355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1058'. [ 587.559143][T10355] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1058'. [ 589.944712][T10089] veth0_vlan: entered promiscuous mode [ 589.970617][T10089] veth1_vlan: entered promiscuous mode [ 590.115767][T10089] veth0_macvtap: entered promiscuous mode [ 590.196811][T10089] veth1_macvtap: entered promiscuous mode [ 591.133079][T10089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.199004][T10089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.332066][T10089] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.361345][T10089] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.388627][T10089] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.417045][T10089] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.425824][T10405] fuse: Unknown parameter '017777777777777777777770x0000000000000009' [ 591.435602][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1069'. [ 591.711819][ T30] audit: type=1400 audit(1753291452.163:174): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10407 comm="syz.1.1070" daddr=fc00::1 dest=20003 [ 591.749912][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.848879][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.862340][ T30] audit: type=1400 audit(1753291452.163:175): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10407 comm="syz.1.1070" daddr=2001:: [ 591.865319][T10412] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 591.888534][T10412] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 591.895455][T10412] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 591.903194][T10412] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 591.910121][T10412] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 591.918375][T10412] comedi comedi3: 8255: I/O port conflict (0x100010,4) [ 591.925718][T10412] comedi comedi3: 8255: I/O port conflict (0x1000002,4) [ 591.933323][T10412] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffbf,4) [ 591.941761][T10412] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 591.948388][T10412] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 591.955501][T10412] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 591.962206][T10412] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 591.968846][T10412] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 591.975542][T10412] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 591.982304][T10412] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 591.988911][T10412] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 591.995532][T10412] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 592.002213][T10412] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 592.008673][T10412] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 592.015368][T10412] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 592.022009][T10412] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 592.028612][T10412] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 592.035409][T10412] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 592.042097][T10412] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 592.629900][ T7632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.801504][ T7632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.687081][T10447] 9pnet_fd: p9_fd_create_tcp (10447): problem connecting socket to 127.0.0.1 [ 595.783455][T10451] fuse: Bad value for 'fd' [ 595.996167][ T30] audit: type=1400 audit(1753291456.553:176): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10450 comm="syz.4.1079" daddr=::ffff:127.0.0.1 dest=20002 [ 598.239686][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1086'. [ 601.452615][T10516] fuse: Bad value for 'fd' [ 602.935580][T10524] wg1 speed is unknown, defaulting to 1000 [ 603.042741][T10523] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1094'. [ 603.468070][T10520] fuse: Bad value for 'fd' [ 604.018928][T10539] hpfs: Bad magic ... probably not HPFS [ 606.007480][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'. [ 606.331736][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 606.494936][T10535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.506734][T10535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 606.566567][T10535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 606.581997][T10535] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 606.609173][T10535] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 606.615650][T10535] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 606.638088][T10535] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 606.651728][T10535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.668961][T10535] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 606.698685][T10535] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 606.963381][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 607.121381][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 607.786165][T10409] hid-generic 0000:0004:0034.000D: unknown main item tag 0x0 [ 607.863385][T10409] hid-generic 0000:0004:0034.000D: unknown main item tag 0x0 [ 607.968374][T10409] hid-generic 0000:0004:0034.000D: unknown main item tag 0x0 [ 608.342724][T10409] hid-generic 0000:0004:0034.000D: hidraw0: HID v0.0e Device [syz0] on syz1 [ 608.442093][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 608.450348][ T24] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 608.588971][T10576] fuseblk: Unknown parameter 'ò' [ 608.608974][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 608.615391][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 608.670984][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.682468][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 608.732732][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 608.751324][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.785143][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 609.228311][T10577] fido_id[10577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 609.281529][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.611476][T10584] wg1 speed is unknown, defaulting to 1000 [ 609.750589][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.968837][ T24] usb 7-1: can't set config #16, error -71 [ 609.982859][ T24] usb 7-1: USB disconnect, device number 2 [ 610.651531][ T9975] Bluetooth: hci4: command 0x0406 tx timeout [ 610.659805][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 610.731510][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 610.813403][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 610.948701][T10600] sctp: [Deprecated]: syz.2.1109 (pid 10600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.948701][T10600] Use struct sctp_sack_info instead [ 612.811460][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 612.891460][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 613.603274][ T30] audit: type=1800 audit(1753291474.153:177): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1115" name="bus" dev="tmpfs" ino=102 res=0 errno=0 [ 614.108524][T10643] overlay: Bad value for 'index' [ 615.692821][ T9975] Bluetooth: hci2: command 0x0405 tx timeout [ 616.062005][T10661] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1122'. [ 616.365340][T10665] sp0: Synchronizing with TNC [ 617.187371][T10680] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 617.188216][T10680] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 619.106396][ T30] audit: type=1400 audit(1753291479.653:178): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10698 comm="syz.1.1133" daddr=fe88::102 [ 620.799652][T10409] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 621.047883][T10715] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1136'. [ 621.961480][T10409] usb 3-1: Using ep0 maxpacket: 16 [ 621.976890][T10409] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 621.999316][T10409] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.079316][T10409] usb 3-1: config 0 has no interface number 0 [ 622.088802][T10409] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 622.121637][T10409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.129716][T10409] usb 3-1: Product: syz [ 622.172180][T10409] usb 3-1: Manufacturer: syz [ 622.176864][T10409] usb 3-1: SerialNumber: syz [ 622.207108][T10409] usb 3-1: config 0 descriptor?? [ 623.625082][T10409] usb 3-1: can't set config #0, error -71 [ 623.666056][T10409] usb 3-1: USB disconnect, device number 17 [ 623.684948][T10723] tipc: Started in network mode [ 623.710266][T10723] tipc: Node identity aaccd28ff831, cluster identity 4711 [ 623.761823][T10723] tipc: Enabled bearer , priority 0 [ 623.781211][T10735] overlayfs: failed to resolve './file2': -2 [ 623.802485][T10723] syzkaller0: entered promiscuous mode [ 623.917298][T10723] syzkaller0: entered allmulticast mode [ 623.965288][T10720] tipc: Resetting bearer [ 624.249246][T10720] tipc: Disabling bearer [ 625.152903][ T30] audit: type=1400 audit(1753291485.723:179): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10746 comm="syz.2.1146" daddr=fe88::103 [ 626.023461][T10757] netlink: 'syz.4.1144': attribute type 3 has an invalid length. [ 626.031391][T10757] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 626.039174][T10757] netlink: 191152 bytes leftover after parsing attributes in process `syz.4.1144'. [ 627.373485][T10769] wg1 speed is unknown, defaulting to 1000 [ 627.610193][T10769] fuse: Bad value for 'fd' [ 629.700029][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.011708][ T9975] Bluetooth: hci6: command 0x1003 tx timeout [ 630.626928][ T5841] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 630.701648][T10812] fuseblk: Unknown parameter 'ò' [ 631.393091][T10828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1164'. [ 631.421877][T10828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1164'. [ 631.751343][T10829] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 632.138372][ T30] audit: type=1400 audit(1753291492.703:180): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 632.337174][T10844] FAULT_INJECTION: forcing a failure. [ 632.337174][T10844] name failslab, interval 1, probability 0, space 0, times 0 [ 632.479971][T10844] CPU: 1 UID: 0 PID: 10844 Comm: syz.2.1170 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 632.480002][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.480016][T10844] Call Trace: [ 632.480026][T10844] [ 632.480036][T10844] dump_stack_lvl+0x189/0x250 [ 632.480067][T10844] ? __pfx____ratelimit+0x10/0x10 [ 632.480091][T10844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.480116][T10844] ? __pfx__printk+0x10/0x10 [ 632.480151][T10844] ? __pfx___might_resched+0x10/0x10 [ 632.480173][T10844] ? fs_reclaim_acquire+0x7d/0x100 [ 632.480212][T10844] should_fail_ex+0x414/0x560 [ 632.480242][T10844] should_failslab+0xa8/0x100 [ 632.480267][T10844] kmem_cache_alloc_noprof+0x73/0x3c0 [ 632.480288][T10844] ? getname_flags+0xb8/0x540 [ 632.480319][T10844] getname_flags+0xb8/0x540 [ 632.480350][T10844] path_removexattrat+0x151/0x690 [ 632.480385][T10844] ? __pfx_path_removexattrat+0x10/0x10 [ 632.480414][T10844] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 632.480443][T10844] ? __pfx_vfs_write+0x10/0x10 [ 632.480494][T10844] ? __pfx_ksys_write+0x10/0x10 [ 632.480513][T10844] ? rcu_is_watching+0x15/0xb0 [ 632.480547][T10844] __x64_sys_removexattr+0x62/0x70 [ 632.480577][T10844] do_syscall_64+0xfa/0x3b0 [ 632.480600][T10844] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.480623][T10844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.480644][T10844] ? clear_bhb_loop+0x60/0xb0 [ 632.480671][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.480692][T10844] RIP: 0033:0x7fc38ff8e9a9 [ 632.480712][T10844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.480731][T10844] RSP: 002b:00007fc390e3e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 632.480755][T10844] RAX: ffffffffffffffda RBX: 00007fc3901b5fa0 RCX: 00007fc38ff8e9a9 [ 632.480771][T10844] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 632.480786][T10844] RBP: 00007fc390e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 632.480800][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.480813][T10844] R13: 0000000000000000 R14: 00007fc3901b5fa0 R15: 00007fffe703b3a8 [ 632.480846][T10844] [ 632.793790][ T30] audit: type=1400 audit(1753291493.313:181): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 632.852236][ T30] audit: type=1400 audit(1753291493.323:182): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 632.871065][ T30] audit: type=1400 audit(1753291493.323:183): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 633.449110][T10853] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.458688][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.466196][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.506707][T10851] bridge0: entered promiscuous mode [ 633.512159][T10851] bridge0: entered allmulticast mode [ 633.630785][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.639052][T10859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.648107][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.655341][T10859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.270737][T10870] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 635.645486][T10878] overlayfs: failed to clone lowerpath [ 636.204268][ T30] audit: type=1400 audit(1753291496.773:184): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 636.248735][T10887] Smack: duplicate mount options [ 636.724741][ T30] audit: type=1400 audit(1753291497.293:185): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 636.795446][ T30] audit: type=1400 audit(1753291497.293:186): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 636.870485][ T30] audit: type=1400 audit(1753291497.293:187): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 638.121113][T10911] qrtr: Invalid version 48 [ 638.352219][T10915] veth3: entered promiscuous mode [ 639.263277][ T30] audit: type=1400 audit(1753291499.823:188): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10925 comm="syz.6.1193" daddr=fe88::107 [ 641.091687][ T43] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 641.814076][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.831579][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 641.895843][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 641.962689][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 642.003404][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 642.083946][ T43] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 642.123587][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 642.155773][ T43] usb 7-1: Product: syz [ 642.160022][ T43] usb 7-1: Manufacturer: syz [ 642.201368][ T43] usb 7-1: SerialNumber: syz [ 642.232461][ T43] usb 7-1: config 0 descriptor?? [ 642.460160][ T43] radio-si470x 7-1:0.0: DeviceID=0xc8c8 ChipID=0x0000 [ 642.488766][ T43] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 642.664745][ T43] radio-si470x 7-1:0.0: software version 200, hardware version 200 [ 642.770892][ T43] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 642.876596][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.039560][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.329101][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.390484][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.497745][ T43] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 643.524531][ T43] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 643.557027][ T43] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 643.645047][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.656498][ T43] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 643.701826][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.759648][ T10] usb 7-1: USB disconnect, device number 3 [ 645.142889][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578aa000: rx timeout, send abort [ 645.161401][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880578aa000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 645.342650][ T5906] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 645.541510][ T5906] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 645.634427][ T5906] usb 2-1: USB disconnect, device number 28 [ 645.832938][ T30] audit: type=1400 audit(1753291506.403:189): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=10997 comm="syz.6.1213" daddr=fe80::aa dest=20002 [ 645.857082][T10997] delete_channel: no stack [ 646.134539][T10409] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 647.111333][T10409] usb 3-1: Using ep0 maxpacket: 16 [ 647.263834][T10409] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 647.279171][T10409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 647.328515][T10409] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 647.371903][T10409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.380049][T10409] usb 3-1: Product: syz [ 647.426329][T10409] usb 3-1: Manufacturer: syz [ 647.448270][T10409] usb 3-1: SerialNumber: syz [ 647.482741][T10409] usb 3-1: config 0 descriptor?? [ 647.729397][T10409] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 648.149738][T10409] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 648.182260][T11013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1217'. [ 648.403654][T11028] 9pnet_fd: Insufficient options for proto=fd [ 649.623087][T10409] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 649.656116][T11029] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1211'. [ 649.689401][T10409] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 649.708870][T10409] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 649.730485][T10409] em28xx 3-1:0.0: No AC97 audio processor [ 649.767087][T10409] usb 3-1: USB disconnect, device number 18 [ 649.912920][T10409] em28xx 3-1:0.0: Disconnecting em28xx [ 650.052459][T10409] em28xx 3-1:0.0: Freeing device [ 651.458312][ T30] audit: type=1400 audit(1753291511.993:190): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=11053 comm="syz.7.1228" daddr=fe88::108 [ 652.231390][ T30] audit: type=1400 audit(1753291512.793:191): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 652.771913][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1232'. [ 655.157242][T11090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.225920][T11091] use of bytesused == 0 is deprecated and will be removed in the future, [ 655.234479][T11091] use the actual size instead. [ 656.381426][ T5928] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 656.581742][T11113] fuse: Bad value for 'fd' [ 656.631391][T10409] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 656.747173][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 656.892672][ T5928] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 656.950644][T10409] usb 2-1: Using ep0 maxpacket: 32 [ 656.995435][ T5928] usb 5-1: config 0 has no interface number 0 [ 657.052435][T10409] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 657.081060][ T5928] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 657.118882][T10409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 657.133118][ T5928] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 657.204064][T10409] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 657.234499][ T5928] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 657.268755][T10409] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 657.291620][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 657.325071][ T5928] usb 5-1: Product: syz [ 657.329491][T10409] usb 2-1: Product: syz [ 657.341171][ T5928] usb 5-1: SerialNumber: syz [ 657.350511][T10409] usb 2-1: Manufacturer: syz [ 657.384784][T10409] usb 2-1: SerialNumber: syz [ 657.434810][ T5928] usb 5-1: config 0 descriptor?? [ 657.471741][T10409] usb 2-1: config 0 descriptor?? [ 657.482786][ T5928] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 657.529283][ T5928] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input9 [ 657.531641][ T5928] ------------[ cut here ]------------ [ 657.531844][ T5928] URB ffff888033f8aa00 submitted while active [ 657.532859][ T5928] WARNING: CPU: 0 PID: 5928 at drivers/usb/core/urb.c:379 usb_submit_urb+0xff3/0x1890 [ 657.532909][ T5928] Modules linked in: [ 657.532972][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: kworker/0:6 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 657.533000][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.533018][ T5928] Workqueue: usb_hub_wq hub_event [ 657.533053][ T5928] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 657.533081][ T5928] Code: 00 eb 5c e8 7f 63 a7 fa e9 be f0 ff ff e8 75 63 a7 fa c6 05 ac ea 71 08 01 90 48 c7 c7 20 5b 33 8c 48 89 de e8 0e 53 6b fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 4f 63 a7 fa eb 11 e8 48 63 a7 fa bd [ 657.533103][ T5928] RSP: 0018:ffffc90004a8eb38 EFLAGS: 00010246 [ 657.533126][ T5928] RAX: 59ebac215b686b00 RBX: ffff888033f8aa00 RCX: 0000000000100000 [ 657.533144][ T5928] RDX: ffffc90018cd3000 RSI: 0000000000029bdf RDI: 0000000000029be0 [ 657.533162][ T5928] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 657.533180][ T5928] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 1ffff1100b208c0a [ 657.533199][ T5928] R13: dffffc0000000000 R14: ffff888033f8aa08 R15: 0000000000000cc0 [ 657.533218][ T5928] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 657.533238][ T5928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.533255][ T5928] CR2: 0000200000021000 CR3: 0000000038f96000 CR4: 00000000003526f0 [ 657.533277][ T5928] Call Trace: [ 657.533288][ T5928] [ 657.533307][ T5928] ? __pm_runtime_resume+0x129/0x180 [ 657.533352][ T5928] cm109_input_open+0x1fb/0x460 [ 657.533394][ T5928] input_open_device+0x1c2/0x360 [ 657.533436][ T5928] kbd_connect+0xed/0x140 [ 657.533477][ T5928] input_register_device+0xcee/0x10b0 [ 657.533526][ T5928] cm109_usb_probe+0x118c/0x1690 [ 657.533592][ T5928] usb_probe_interface+0x644/0xbc0 [ 657.533644][ T5928] ? __pfx_usb_probe_interface+0x10/0x10 [ 657.533685][ T5928] really_probe+0x26a/0x9a0 [ 657.533720][ T5928] __driver_probe_device+0x18c/0x2f0 [ 657.533765][ T5928] driver_probe_device+0x4f/0x430 [ 657.533795][ T5928] __device_attach_driver+0x2ce/0x530 [ 657.533824][ T5928] bus_for_each_drv+0x251/0x2e0 [ 657.533856][ T5928] ? __pfx___device_attach_driver+0x10/0x10 [ 657.533882][ T5928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 657.533928][ T5928] __device_attach+0x2b8/0x400 [ 657.533968][ T5928] ? __pfx___device_attach+0x10/0x10 [ 657.534009][ T5928] ? do_raw_spin_unlock+0x122/0x240 [ 657.534049][ T5928] bus_probe_device+0x185/0x260 [ 657.534085][ T5928] device_add+0x7b6/0xb50 [ 657.534125][ T5928] usb_set_configuration+0x1a87/0x20e0 [ 657.534197][ T5928] usb_generic_driver_probe+0x8d/0x150 [ 657.534234][ T5928] usb_probe_device+0x1c4/0x390 [ 657.534274][ T5928] ? __pfx_usb_probe_device+0x10/0x10 [ 657.534306][ T5928] really_probe+0x26a/0x9a0 [ 657.534340][ T5928] __driver_probe_device+0x18c/0x2f0 [ 657.534382][ T5928] driver_probe_device+0x4f/0x430 [ 657.534411][ T5928] __device_attach_driver+0x2ce/0x530 [ 657.534443][ T5928] bus_for_each_drv+0x251/0x2e0 [ 657.534474][ T5928] ? __pfx___device_attach_driver+0x10/0x10 [ 657.534498][ T5928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 657.534544][ T5928] __device_attach+0x2b8/0x400 [ 657.534585][ T5928] ? __pfx___device_attach+0x10/0x10 [ 657.534629][ T5928] ? do_raw_spin_unlock+0x122/0x240 [ 657.534676][ T5928] bus_probe_device+0x185/0x260 [ 657.534712][ T5928] device_add+0x7b6/0xb50 [ 657.534755][ T5928] usb_new_device+0xa39/0x16c0 [ 657.534798][ T5928] ? __pfx_usb_new_device+0x10/0x10 [ 657.534829][ T5928] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.534868][ T5928] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.534897][ T5928] hub_event+0x2958/0x4a20 [ 657.534992][ T5928] ? __pfx_hub_event+0x10/0x10 [ 657.535026][ T5928] ? process_scheduled_works+0x9ef/0x17b0 [ 657.535060][ T5928] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.535097][ T5928] ? process_scheduled_works+0x9ef/0x17b0 [ 657.535122][ T5928] ? process_scheduled_works+0x9ef/0x17b0 [ 657.535152][ T5928] process_scheduled_works+0xade/0x17b0 [ 657.535212][ T5928] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.535259][ T5928] worker_thread+0x8a0/0xda0 [ 657.535321][ T5928] kthread+0x711/0x8a0 [ 657.535358][ T5928] ? __pfx_worker_thread+0x10/0x10 [ 657.535385][ T5928] ? __pfx_kthread+0x10/0x10 [ 657.535420][ T5928] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.535458][ T5928] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.535480][ T5928] ? __pfx_kthread+0x10/0x10 [ 657.535513][ T5928] ret_from_fork+0x3fc/0x770 [ 657.535564][ T5928] ? __pfx_ret_from_fork+0x10/0x10 [ 657.535599][ T5928] ? __switch_to_asm+0x39/0x70 [ 657.535629][ T5928] ? __switch_to_asm+0x33/0x70 [ 657.535656][ T5928] ? __pfx_kthread+0x10/0x10 [ 657.535695][ T5928] ret_from_fork_asm+0x1a/0x30 [ 657.535747][ T5928] [ 657.976905][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.978712][ T5928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 657.978732][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: kworker/0:6 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 657.978756][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.978775][ T5928] Workqueue: usb_hub_wq hub_event [ 657.978818][ T5928] Call Trace: [ 657.978831][ T5928] [ 657.978843][ T5928] dump_stack_lvl+0x99/0x250 [ 657.978878][ T5928] ? __asan_memcpy+0x40/0x70 [ 657.978921][ T5928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.978951][ T5928] ? __pfx__printk+0x10/0x10 [ 657.979005][ T5928] panic+0x2db/0x790 [ 657.979042][ T5928] ? __pfx_panic+0x10/0x10 [ 657.979088][ T5928] ? ret_from_fork_asm+0x1a/0x30 [ 657.979130][ T5928] __warn+0x31b/0x4b0 [ 657.979154][ T5928] ? usb_submit_urb+0xff3/0x1890 [ 657.979186][ T5928] ? usb_submit_urb+0xff3/0x1890 [ 657.979215][ T5928] report_bug+0x2be/0x4f0 [ 657.979241][ T5928] ? usb_submit_urb+0xff3/0x1890 [ 657.979270][ T5928] ? usb_submit_urb+0xff3/0x1890 [ 657.979299][ T5928] ? usb_submit_urb+0xff5/0x1890 [ 657.979327][ T5928] handle_bug+0x84/0x160 [ 657.979359][ T5928] exc_invalid_op+0x1a/0x50 [ 657.979393][ T5928] asm_exc_invalid_op+0x1a/0x20 [ 657.979416][ T5928] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 657.979447][ T5928] Code: 00 eb 5c e8 7f 63 a7 fa e9 be f0 ff ff e8 75 63 a7 fa c6 05 ac ea 71 08 01 90 48 c7 c7 20 5b 33 8c 48 89 de e8 0e 53 6b fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 4f 63 a7 fa eb 11 e8 48 63 a7 fa bd [ 657.979470][ T5928] RSP: 0018:ffffc90004a8eb38 EFLAGS: 00010246 [ 657.979496][ T5928] RAX: 59ebac215b686b00 RBX: ffff888033f8aa00 RCX: 0000000000100000 [ 657.979516][ T5928] RDX: ffffc90018cd3000 RSI: 0000000000029bdf RDI: 0000000000029be0 [ 657.979534][ T5928] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 657.979553][ T5928] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 1ffff1100b208c0a [ 657.979573][ T5928] R13: dffffc0000000000 R14: ffff888033f8aa08 R15: 0000000000000cc0 [ 657.979626][ T5928] ? usb_submit_urb+0xff2/0x1890 [ 657.979661][ T5928] ? __pm_runtime_resume+0x129/0x180 [ 657.979709][ T5928] cm109_input_open+0x1fb/0x460 [ 657.979759][ T5928] input_open_device+0x1c2/0x360 [ 657.979801][ T5928] kbd_connect+0xed/0x140 [ 657.979845][ T5928] input_register_device+0xcee/0x10b0 [ 657.979898][ T5928] cm109_usb_probe+0x118c/0x1690 [ 657.979970][ T5928] usb_probe_interface+0x644/0xbc0 [ 657.980025][ T5928] ? __pfx_usb_probe_interface+0x10/0x10 [ 657.980061][ T5928] really_probe+0x26a/0x9a0 [ 657.980098][ T5928] __driver_probe_device+0x18c/0x2f0 [ 657.980144][ T5928] driver_probe_device+0x4f/0x430 [ 657.980176][ T5928] __device_attach_driver+0x2ce/0x530 [ 657.980209][ T5928] bus_for_each_drv+0x251/0x2e0 [ 657.980245][ T5928] ? __pfx___device_attach_driver+0x10/0x10 [ 657.980273][ T5928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 657.980324][ T5928] __device_attach+0x2b8/0x400 [ 657.980367][ T5928] ? __pfx___device_attach+0x10/0x10 [ 657.980411][ T5928] ? do_raw_spin_unlock+0x122/0x240 [ 657.980455][ T5928] bus_probe_device+0x185/0x260 [ 657.980494][ T5928] device_add+0x7b6/0xb50 [ 657.980539][ T5928] usb_set_configuration+0x1a87/0x20e0 [ 657.980625][ T5928] usb_generic_driver_probe+0x8d/0x150 [ 657.980668][ T5928] usb_probe_device+0x1c4/0x390 [ 657.980712][ T5928] ? __pfx_usb_probe_device+0x10/0x10 [ 657.980747][ T5928] really_probe+0x26a/0x9a0 [ 657.980784][ T5928] __driver_probe_device+0x18c/0x2f0 [ 657.980830][ T5928] driver_probe_device+0x4f/0x430 [ 657.980861][ T5928] __device_attach_driver+0x2ce/0x530 [ 657.980894][ T5928] bus_for_each_drv+0x251/0x2e0 [ 657.980928][ T5928] ? __pfx___device_attach_driver+0x10/0x10 [ 657.980955][ T5928] ? __pfx_bus_for_each_drv+0x10/0x10 [ 657.981004][ T5928] __device_attach+0x2b8/0x400 [ 657.981048][ T5928] ? __pfx___device_attach+0x10/0x10 [ 657.981096][ T5928] ? do_raw_spin_unlock+0x122/0x240 [ 657.981137][ T5928] bus_probe_device+0x185/0x260 [ 657.981176][ T5928] device_add+0x7b6/0xb50 [ 657.981221][ T5928] usb_new_device+0xa39/0x16c0 [ 657.981277][ T5928] ? __pfx_usb_new_device+0x10/0x10 [ 657.981309][ T5928] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.981350][ T5928] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.981383][ T5928] hub_event+0x2958/0x4a20 [ 657.981492][ T5928] ? __pfx_hub_event+0x10/0x10 [ 657.981526][ T5928] ? process_scheduled_works+0x9ef/0x17b0 [ 657.981565][ T5928] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.981612][ T5928] ? process_scheduled_works+0x9ef/0x17b0 [ 657.981640][ T5928] ? process_scheduled_works+0x9ef/0x17b0 [ 657.981673][ T5928] process_scheduled_works+0xade/0x17b0 [ 657.981744][ T5928] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.981798][ T5928] worker_thread+0x8a0/0xda0 [ 657.981865][ T5928] kthread+0x711/0x8a0 [ 657.981905][ T5928] ? __pfx_worker_thread+0x10/0x10 [ 657.981933][ T5928] ? __pfx_kthread+0x10/0x10 [ 657.981972][ T5928] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.982012][ T5928] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.982036][ T5928] ? __pfx_kthread+0x10/0x10 [ 657.982074][ T5928] ret_from_fork+0x3fc/0x770 [ 657.982105][ T5928] ? __pfx_ret_from_fork+0x10/0x10 [ 657.982141][ T5928] ? __switch_to_asm+0x39/0x70 [ 657.982172][ T5928] ? __switch_to_asm+0x33/0x70 [ 657.982203][ T5928] ? __pfx_kthread+0x10/0x10 [ 657.982240][ T5928] ret_from_fork_asm+0x1a/0x30 [ 657.982296][ T5928] [ 657.983630][ T5928] Kernel Offset: disabled