last executing test programs: 24m2.163944514s ago: executing program 32 (id=165): io_setup(0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x41, '\x00', r9, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xf, 0x1, 0x2}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0, 0x10, 0x7f, @void, @value}, 0x94) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) 17m57.528727203s ago: executing program 33 (id=1143): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d02"}) 17m57.447112671s ago: executing program 5 (id=1178): r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00'}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='workqueue_activate_work\x00', r3}, 0x18) r4 = gettid() tgkill(r0, r4, 0x30) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000008c0)={0x2, 0x0, @ioapic={0xeeef0000, 0xfffffffe, 0x1, 0xeffffdff, 0x0, [{0x0, 0xff, 0x0, '\x00', 0xfd}, {0x39, 0x3, 0xe}, {0x8}, {0x0, 0xfd, 0x82}, {0x0, 0x0, 0x40}, {0x0, 0x65, 0xff}, {0x3, 0x0, 0x2c, '\x00', 0x21}, {}, {0x0, 0x1, 0x4, '\x00', 0x2}, {0x2, 0x9}, {0x0, 0x4, 0x40, '\x00', 0x1}, {0x0, 0x8, 0x5, '\x00', 0xfc}, {}, {0x3, 0x0, 0xe}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x2, 0x6, 0x80}, {0x80, 0x3, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x4, '\x00', 0x4}, {0x40, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x6, 0xff}, {0x0, 0x0, 0x1}, {0xf7, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000380)) r9 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/51, 0x33}], 0x1}, 0x22) sendmmsg$alg(r9, &(0x7f0000004e40)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="9c1ef3", 0x3}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x20040000) 17m56.143671285s ago: executing program 5 (id=1182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000000000000000000000000085004d0082cc99263fc900006d000000951f56120f0653d9936deb3e8ed3dc34cdbb408142de8a12cc0ea8be9780950305a6b5dee78c98ed8ba3acc6e9e3c6699cc23de71b1a14ea566212d2a90dd2252f1642fe1d6d120861744b1dbfeddd6db5967840f5d3250f81347bde7a5170bf6042551bf233a7b4770a6b7808ff11ace90b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, &(0x7f0000001d40)) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_sync_file_exit\x00', r0, 0x0, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) io_setup(0x200, &(0x7f0000000140)=0x0) r12 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) io_submit(r11, 0x5, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r7, &(0x7f0000000840)="34d10ada8479869a4e1d52b37563de5cdf3da10900645c86a5b220bbe96e02cc8715b053c84f7cff2ce6c27534e24095d4e8d2828a44c118f1d6449cdfe66e00"/76, 0x4c, 0x6, 0x0, 0x1, r12}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000000440)="0951637409d9addf1a5b1a62e45dcad694c7448afc9aa4bd39206229ebf3200d7bd9185767d035aba46ca833dc0d199c45c1faa01d4c56eba8387128d65c9bd0004ef5f33c93fcb093cb8c0cc08dcf7c1a6fc20f935f13bb89cbe84c07b72c2437732f8b91550fca1890ad8db4a11c705f9a9434bceb79048ab45590d63f063ffd172a619a448d439bd146589d4130fc2356d9e4df1e5b5780e42b2a88c83397a8a05a9b79230601b4d6b78458ae7ef165a30fa8687172c934ce44829f8f0dbd886bccb7e25308129687ab53633711de6167e6", 0xd3, 0x8001, 0x0, 0x3, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000700)="d3ba79c3422826427325fc8b381cb695e17ffea8fe7ab07399319e8933322df128f258471b5f0bd433deff11f955ac5d91cb221e810e2a152e11fd9d96f7a0", 0x3f, 0x3, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000540)="f80abfc6cd9173af73c196f21e4ad9b992531d6059d6b9bc1e116539d4d599f2d0e612098a93dfb64849f1ff543d8262789e3777fc8ca4f99e1f4854b6b5cced4eb4d3c5cfaaa66c1efbbe77621a0da033faab5aa7896f10ffe64b406abd03efef8c2222cb69", 0x66, 0x3e, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x2, r10, &(0x7f0000000600)="ba8a4d5573489c5cb75a5088a0bc03772e98c8cec54da7026790116b9332f3bda3a105bdf5198d6fd6e3c3af58813e5495b6afc88f56ff91759f12b4675e06b0954d47cca86bfebe6769b3e50ae4001c1689c92d2b049511c18f19c77a6e340aba4e1665a47926150c0e2f8f75ffdfc733fbc6033830", 0x76, 0x1, 0x0, 0x2}]) 17m55.108654329s ago: executing program 5 (id=1183): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x1c, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x58d9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8176c019fcf9d6f5, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xb0}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x5, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x3, 0x3, 0xb}, {0x5, 0x5, 0xe, 0x2}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='softirq_noise\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000000c0)="510003000000", 0x6) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0x93, 0x81, 0x8, 0xb48, 0x1003, 0x7b54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0xfd, 0x27}}]}}]}}, 0x0) 17m52.673762171s ago: executing program 5 (id=1188): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x50) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3, r2}, 0xc) 17m52.007075453s ago: executing program 5 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x6, 0x31, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) 17m51.020755956s ago: executing program 5 (id=1193): socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setparam(r1, &(0x7f0000000000)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x40) r4 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000280)={0x7, @output={0x1000, 0x0, {0x0, 0x6}, 0x2, 0xb}}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x2, 0x8000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x10}, {0x10000, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7}, {0xeeee8000, 0x5000, 0x4, 0x11, 0x7, 0x2, 0x0, 0x40, 0x0, 0x0, 0x7, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x2}, {0xc2e507335e0bab7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x3c}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0xc, 0xfe, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0xeeee8000, 0x0, 0x0, 0x3, 0x1, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x6000}, {0x1000}, 0xddf8ffdb, 0x0, 0x0, 0x312013, 0x0, 0x7801, 0x5000, [0x800000000000000, 0xfffffffffffffffc, 0x1]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x10000}) 17m40.042957323s ago: executing program 34 (id=1181): mkdir(&(0x7f0000001200)='./control\x00', 0x0) openat$kvm(0x0, &(0x7f0000000400), 0x6982, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$key(0xf, 0x3, 0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRES8=r3, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRES16=r4, @ANYRESDEC=r5, @ANYRES64]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 17m34.291483742s ago: executing program 35 (id=1193): socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setparam(r1, &(0x7f0000000000)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x40) r4 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000280)={0x7, @output={0x1000, 0x0, {0x0, 0x6}, 0x2, 0xb}}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x2, 0x8000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x10}, {0x10000, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7}, {0xeeee8000, 0x5000, 0x4, 0x11, 0x7, 0x2, 0x0, 0x40, 0x0, 0x0, 0x7, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x2}, {0xc2e507335e0bab7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x3c}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0xc, 0xfe, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0xeeee8000, 0x0, 0x0, 0x3, 0x1, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x6000}, {0x1000}, 0xddf8ffdb, 0x0, 0x0, 0x312013, 0x0, 0x7801, 0x5000, [0x800000000000000, 0xfffffffffffffffc, 0x1]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x10000}) 17m11.552341855s ago: executing program 4 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r5, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17m10.309632994s ago: executing program 4 (id=1281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 17m9.990687422s ago: executing program 4 (id=1282): syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/5, 0x5, &(0x7f0000000240)=""/155, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17m8.515908537s ago: executing program 4 (id=1284): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x1088, 0x200000000000004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) open$dir(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) listen(r5, 0x3) mkdir(&(0x7f0000000400)='./file0\x00', 0xfa) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=tcp']) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) 17m7.265807363s ago: executing program 4 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x6, 0x31, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 17m6.18886557s ago: executing program 4 (id=1289): r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00'}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='workqueue_activate_work\x00', r3}, 0x18) r4 = gettid() tgkill(r0, r4, 0x30) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000008c0)={0x2, 0x0, @ioapic={0xeeef0000, 0xfffffffe, 0x1, 0xeffffdff, 0x0, [{0x0, 0xff, 0x0, '\x00', 0xfd}, {0x39, 0x3, 0xe}, {0x8}, {0x0, 0xfd, 0x82}, {0x0, 0x0, 0x40}, {0x0, 0x65, 0xff}, {0x3, 0x0, 0x2c, '\x00', 0x21}, {}, {0x0, 0x1, 0x4, '\x00', 0x2}, {0x2, 0x9}, {0x0, 0x4, 0x40, '\x00', 0x1}, {0x0, 0x8, 0x5, '\x00', 0xfc}, {}, {0x3, 0x0, 0xe}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x2, 0x6, 0x80}, {0x80, 0x3, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x4, '\x00', 0x4}, {0x40, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x6, 0xff}, {0x0, 0x0, 0x1}, {0xf7, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000380)) r9 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/51, 0x33}], 0x1}, 0x22) sendmmsg$alg(r9, &(0x7f0000004e40)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="9c1ef3", 0x3}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x20040000) 16m54.674213747s ago: executing program 7 (id=1318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000000000000000000000000085004d0082cc99263fc900006d000000951f56120f0653d9936deb3e8ed3dc34cdbb408142de8a12cc0ea8be9780950305a6b5dee78c98ed8ba3acc6e9e3c6699cc23de71b1a14ea566212d2a90dd2252f1642fe1d6d120861744b1dbfeddd6db5967840f5d3250f81347bde7a5170bf6042551bf233a7b4770a6b7808ff11ace90b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, &(0x7f0000001d40)) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_sync_file_exit\x00', r0, 0x0, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) io_submit(r11, 0x5, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r7, &(0x7f0000000840)="34d10ada8479869a4e1d52b37563de5cdf3da10900645c86a5b220bbe96e02cc8715b053c84f7cff2ce6c27534e24095d4e8d2828a44c118f1d6449cdfe66e00"/76, 0x4c, 0x6, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8, r9, &(0x7f0000000440)="0951637409d9addf1a5b1a62e45dcad694c7448afc9aa4bd39206229ebf3200d7bd9185767d035aba46ca833dc0d199c45c1faa01d4c56eba8387128d65c9bd0004ef5f33c93fcb093cb8c0cc08dcf7c1a6fc20f935f13bb89cbe84c07b72c2437732f8b91550fca1890ad8db4a11c705f9a9434bceb79048ab45590d63f063ffd172a619a448d439bd146589d4130fc2356d9e4df1e5b5780e42b2a88c83397a8a05a9b79230601b4d6b78458ae7ef165a30fa8687172c934ce44829f8f0dbd886bccb7e25308129687ab53633711de6167e6", 0xd3, 0x8001, 0x0, 0x3, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000700)="d3ba79c3422826427325fc8b381cb695e17ffea8fe7ab07399319e8933322df128f258471b5f0bd433deff11f955ac5d91cb221e810e2a152e11fd9d96f7a0", 0x3f, 0x3, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000540)="f80abfc6cd9173af73c196f21e4ad9b992531d6059d6b9bc1e116539d4d599f2d0e612098a93dfb64849f1ff543d8262789e3777fc8ca4f99e1f4854b6b5cced4eb4d3c5cfaaa66c1efbbe77621a0da033faab5aa7896f10ffe64b406abd03efef8c2222cb69", 0x66, 0x3e, 0x0, 0x2, r10}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x2, r9, &(0x7f0000000600)="ba8a4d5573489c5cb75a5088a0bc03772e98c8cec54da7026790116b9332f3bda3a105bdf5198d6fd6e3c3af58813e5495b6afc88f56ff91759f12b4675e06b0954d47cca86bfebe6769b3e50ae4001c1689c92d2b049511c18f19c77a6e340aba4e1665a47926150c0e2f8f75ffdfc733fbc6033830", 0x76, 0x1, 0x0, 0x2}]) 16m53.200787687s ago: executing program 7 (id=1322): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b83e93405820051075090102030109021b0001000000000904000001a092d10009040f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES32], 0x0) r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@deltclass={0x2c, 0x29, 0x20, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x10, 0xc}, {0xd, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) unshare(0x62040200) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r7, 0x33, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 16m48.995935979s ago: executing program 36 (id=1289): r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00'}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='workqueue_activate_work\x00', r3}, 0x18) r4 = gettid() tgkill(r0, r4, 0x30) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000008c0)={0x2, 0x0, @ioapic={0xeeef0000, 0xfffffffe, 0x1, 0xeffffdff, 0x0, [{0x0, 0xff, 0x0, '\x00', 0xfd}, {0x39, 0x3, 0xe}, {0x8}, {0x0, 0xfd, 0x82}, {0x0, 0x0, 0x40}, {0x0, 0x65, 0xff}, {0x3, 0x0, 0x2c, '\x00', 0x21}, {}, {0x0, 0x1, 0x4, '\x00', 0x2}, {0x2, 0x9}, {0x0, 0x4, 0x40, '\x00', 0x1}, {0x0, 0x8, 0x5, '\x00', 0xfc}, {}, {0x3, 0x0, 0xe}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x2, 0x6, 0x80}, {0x80, 0x3, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x4, '\x00', 0x4}, {0x40, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x6, 0xff}, {0x0, 0x0, 0x1}, {0xf7, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000380)) r9 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/51, 0x33}], 0x1}, 0x22) sendmmsg$alg(r9, &(0x7f0000004e40)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="9c1ef3", 0x3}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x20040000) 16m46.062385421s ago: executing program 7 (id=1336): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) clock_settime(0xfffffffb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3f0e0}, &(0x7f0000000040)=0x8) 16m43.133360306s ago: executing program 7 (id=1338): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') setxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) syz_open_dev$dri(&(0x7f0000000380), 0x294a, 0x101000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, 0x0, 0x4000) 16m41.270992018s ago: executing program 7 (id=1340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x6, 0x31, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 16m40.033379799s ago: executing program 7 (id=1341): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3, r2}, 0xc) 16m23.778703864s ago: executing program 37 (id=1341): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3, r2}, 0xc) 6m20.40885705s ago: executing program 2 (id=2853): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x243) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') preadv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/102396, 0x18ffc, 0x4) 6m20.258641455s ago: executing program 2 (id=2854): syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450040fd0000e00000113764e736c2c4a59b066f43c27344ccbf03c1835478000000000008000000000000000000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000002c0f08bf000000730117000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x3000}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2}, {0x0, 0xeeee8000}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0xa, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40, 0x110) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 6m19.163423113s ago: executing program 2 (id=2858): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x4, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="64000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000cc842c30dd5bb2ba000280050001000000000014000180080001b5693fab97327af1707b6bcdaf2a8ee600ac1414aa08000200000000000800074000000000"], 0x64}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000100)=0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000bc07000000000000000000000a00000000000000000000000c00160006000400a8ff719376a39d9247520000000000000000", @ANYRES32, @ANYBLOB="0600150007000000"], 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000001380)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x0, 0x4}]}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r9, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) 6m16.243063226s ago: executing program 2 (id=2864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000000000000000000000000085004d0082cc99263fc900006d000000951f56120f0653d9936deb3e8ed3dc34cdbb408142de8a12cc0ea8be9780950305a6b5dee78c98ed8ba3acc6e9e3c6699cc23de71b1a14ea566212d2a90dd2252f1642fe1d6d120861744b1dbfeddd6db5967840f5d3250f81347bde7a5170bf6042551bf233a7b4770a6b7808ff11ace90b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, &(0x7f0000001d40)) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_sync_file_exit\x00', r0, 0x0, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r13 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r13, &(0x7f0000000080), 0x208e24b) io_submit(r12, 0x5, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r7, &(0x7f0000000840)="34d10ada8479869a4e1d52b37563de5cdf3da10900645c86a5b220bbe96e02cc8715b053c84f7cff2ce6c27534e24095d4e8d2828a44c118f1d6449cdfe66e00"/76, 0x4c, 0x6, 0x0, 0x1, r13}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000000440)="0951637409d9addf1a5b1a62e45dcad694c7448afc9aa4bd39206229ebf3200d7bd9185767d035aba46ca833dc0d199c45c1faa01d4c56eba8387128d65c9bd0004ef5f33c93fcb093cb8c0cc08dcf7c1a6fc20f935f13bb89cbe84c07b72c2437732f8b91550fca1890ad8db4a11c705f9a9434bceb79048ab45590d63f063ffd172a619a448d439bd146589d4130fc2356d9e4df1e5b5780e42b2a88c83397a8a05a9b79230601b4d6b78458ae7ef165a30fa8687172c934ce44829f8f0dbd886bccb7e25308129687ab53633711de6167e6", 0xd3, 0x8001, 0x0, 0x3, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000700)="d3ba79c3422826427325fc8b381cb695e17ffea8fe7ab07399319e8933322df128f258471b5f0bd433deff11f955ac5d91cb221e810e2a152e11fd9d96f7a0", 0x3f, 0x3, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000540)="f80abfc6cd9173af73c196f21e4ad9b992531d6059d6b9bc1e116539d4d599f2d0e612098a93dfb64849f1ff543d8262789e3777fc8ca4f99e1f4854b6b5cced4eb4d3c5cfaaa66c1efbbe77621a0da033faab5aa7896f10ffe64b406abd03efef8c2222cb69", 0x66, 0x3e, 0x0, 0x2, r11}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x2, r10, &(0x7f0000000600)="ba8a4d5573489c5cb75a5088a0bc03772e98c8cec54da7026790116b9332f3bda3a105bdf5198d6fd6e3c3af58813e5495b6afc88f56ff91759f12b4675e06b0954d47cca86bfebe6769b3e50ae4001c1689c92d2b049511c18f19c77a6e340aba4e1665a47926150c0e2f8f75ffdfc733fbc6033830", 0x76, 0x1, 0x0, 0x2}]) 6m15.024683419s ago: executing program 2 (id=2868): syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000002c0f08bf000000730117000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x3000}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2}, {0x0, 0xeeee8000}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0xa, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40, 0x110) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb0800450000b0000000020011907800000000000000000000002f54c06b92d300009c907801000000040000009e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8674fa125e3972a48e8103900d87a5be360cdf554bd6f25601ce35279a57a3873e0b4e6553e2c444cf02a016458a5f67aa497153eddc6a19a3f9661ac468177dc130be49bdd8eb5"], 0x0) 6m13.682422193s ago: executing program 2 (id=2872): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ff513708b8040206100101000c010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000067c0)={0xffffffffffffffff}) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000630152000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ftruncate(r6, 0xfff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000040), 0x4) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000002540)) write$sndseq(r2, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result}], 0x1c) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 5m57.419345368s ago: executing program 38 (id=2872): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ff513708b8040206100101000c010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000067c0)={0xffffffffffffffff}) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000630152000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ftruncate(r6, 0xfff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000040), 0x4) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000002540)) write$sndseq(r2, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result}], 0x1c) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 57.610992375s ago: executing program 9 (id=3679): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000340)={0x3, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x7) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000300), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="022100000000000008001c00", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5, 0x401, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f645dcde0a4f60ec"}}, 0x48}}, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000000001010400000000000000000200000008001a400000010158000d801c000380060002804e220000060002004e220000060002004e20020024000380060002004e200e00060001004e200000060001004f200000060001004e20000014000500ff010000000000000000000000000001180017000000007c000080010000000800007fff0000000908000c400000000418a4fca9a96de082e6c8f56f4b94017b554a4b4cdb1f175d420d4ad4ffa19b7954d5f4d464ae93c95af4098dc61a7105c1c460e5988e5fe5c5c6f3ecd12e079c80aed268ba0ce8d6dbdf3b43e076f0be9d180246e4b3de8eb26f845677e45e16d99079f2d7b4ad9be8ee3ecfa601"], 0x94}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1, r8}) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000005440)) ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x10, 0x977, 0x8000, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x68, 0x0, 0xe0, 0x2, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x27, 0x3, [@multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @private=0xa010102, @private=0xa010101, @remote]}, @timestamp_addr={0x44, 0x14, 0x6c, 0x1, 0x8, [{@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}}}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000200)=[r9], 0x0, 0x0, 0x0}) 56.634437461s ago: executing program 9 (id=3682): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x500, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x6}, @cipso={0x86, 0x6}]}}, "cb"}}}}}, 0x0) 56.395102598s ago: executing program 9 (id=3684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) alarm(0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000002c0), 0x4) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000015000100000000000000000002180000", @ANYRES32, @ANYBLOB="1400030073797a85ac5f74756ee3ff000000e874"], 0x34}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 55.392291002s ago: executing program 9 (id=3685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000000000000000000000000000085004d0082cc99263fc900006d000000951f56120f0653d9936deb3e8ed3dc34cdbb408142de8a12cc0ea8be9780950305a6b5dee78c98ed8ba3acc6e9e3c6699cc23de71b1a14ea566212d2a90dd2252f1642fe1d6d120861744b1dbfeddd6db5967840f5d3250f81347bde7a5170bf6042551bf233a7b4770a6b7808ff11ace90b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, &(0x7f0000001d40)) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_sync_file_exit\x00', r0, 0x0, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r11 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r11, &(0x7f0000000080), 0x208e24b) io_submit(r10, 0x4, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r6, &(0x7f0000000840)="34d10ada8479869a4e1d52b37563de5cdf3da10900645c86a5b220bbe96e02cc8715b053c84f7cff2ce6c27534e24095d4e8d2828a44c118f1d6449cdfe66e00"/76, 0x4c, 0x6, 0x0, 0x1, r11}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8, r9, &(0x7f0000000440)="0951637409d9addf1a5b1a62e45dcad694c7448afc9aa4bd39206229ebf3200d7bd9185767d035aba46ca833dc0d199c45c1faa01d4c56eba8387128d65c9bd0004ef5f33c93fcb093cb8c0cc08dcf7c1a6fc20f935f13bb89cbe84c07b72c2437732f8b91550fca1890ad8db4a11c705f9a9434bceb79048ab45590d63f063ffd172a619a448d439bd146589d4130fc2356d9e4df1e5b5780e42b2a88c83397a8a05a9b79230601b4d6b78458ae7ef165a30fa8687172c934ce44829f8f0dbd886bccb7e25308129687ab53633711de6167e6", 0xd3, 0x8001, 0x0, 0x3, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000700)="d3ba79c3422826427325fc8b381cb695e17ffea8fe7ab07399319e8933322df128f258471b5f0bd433deff11f955ac5d91cb221e810e2a152e11fd9d96f7a0", 0x3f, 0x3, 0x0, 0x3}, 0x0]) 54.078808129s ago: executing program 9 (id=3689): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x90840) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x1) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="a8000000"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x2000000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '{\'-(n\\}!}'}}]}}) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x90840) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) dup(r2) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x1) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="a8000000"], 0xa8) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x2000000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '{\'-(n\\}!}'}}]}}) (async) 53.869265987s ago: executing program 9 (id=3693): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0001}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000001600), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfe, 0x3) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000200)={0x5, 0xf, 0xfff2, 0x800, 0x2f, 0x81, &(0x7f00000001c0)="743d464c0c96b9524fa3b5b7cc4ee09a4816eef5903b7aa9bdae78d771892c5c1d5b5803c7e83b91b7fd749e8d0570"}) sendto$inet6(r2, &(0x7f0000000640)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x408c840, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x40, 0x95}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x2, 0x10}]}) 37.468412542s ago: executing program 39 (id=3693): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0001}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000001600), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfe, 0x3) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000200)={0x5, 0xf, 0xfff2, 0x800, 0x2f, 0x81, &(0x7f00000001c0)="743d464c0c96b9524fa3b5b7cc4ee09a4816eef5903b7aa9bdae78d771892c5c1d5b5803c7e83b91b7fd749e8d0570"}) sendto$inet6(r2, &(0x7f0000000640)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x408c840, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x40, 0x95}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x2, 0x10}]}) 18.198773992s ago: executing program 8 (id=3785): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b83e93405820051075090102030109021b0001000000000904000001a092d10009040f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="200f560000009821cabff177940847540266c990d183dba6a259f13125cd9348c758daa9bb89b24f99d9751efb1d5c47c25b9340da311a6a130feaa1f6273752fe7f0800"/77], 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x8ca5}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x30}, &(0x7f0000000780)={0x40, 0xb, 0x2, 'u\v'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000800)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f0000000840)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x10}, 0x0}) socket$inet6(0xa, 0x80000, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905"], 0x0) r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@deltclass={0x2c, 0x29, 0x20, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x10, 0xc}, {0xd, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) unshare(0x62040200) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r7, 0x33, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14.050880678s ago: executing program 0 (id=3792): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x18, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh], {0x0, 0x0, 0x8}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000371, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc85) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5, 0x0, '\x00', 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x4, 0xe9, 0xb1, 0x40, 0x1f71, 0x3301, 0xce1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x1a, 0x6d}}]}}]}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 13.5345051s ago: executing program 1 (id=3795): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x50d001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff78, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff262], [0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000500)=0x40, 0x4) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="48015d4f8dcbb7fb18bfd73c010000000000925941b711f9ec4c21be5c9b2315024989949cb26b23a2d0ee33a27762b81c60c22c5fef477a231b22ea6b07cd7132eea7061f8c3831a0a81dcbf7b88a4b4cf9da23bec86d55074b0d1fedf29244d13dae09404edf43c4e5f185f1f83951977ddbd2494b9e5dab1b25590e922c5ea00dfaed39d7ee0d3144211fdd7b03666a58a02904b2aaa0de97dea653c3da053a14cc934f8c750f4d94a6b9", @ANYRES16=0x0, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x64080) 11.383720247s ago: executing program 1 (id=3797): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_GET_KEEPCAPS(0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)=""/201, &(0x7f0000000400)=0xc9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d5", 0xb6}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed9", 0x61}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b7035", 0x8b}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1", 0x76}], 0x1}}], 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 11.318572737s ago: executing program 6 (id=3798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x548d03) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f0000000140)={0x0, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040961b060000000000000109022400010000000009040000010300014e81714bff0009213fcc0001220700090581030000000000c330a1eed8196154d9210994de0ea32052a263168ead87ea965bdba62dafe3de26ae116b265b1f0e289c9c84d229dca51c496a69e1372d23751af089612e0113899600638aaed25cd75d008580"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000680001000000000000000000000000000000000006000300000000000400020004000b00"], 0x28}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.169937409s ago: executing program 8 (id=3800): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1f, 0x3, @local, 0xb}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) write$binfmt_script(r1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x757c4000) io_getevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000240)) 9.299129509s ago: executing program 8 (id=3801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(0xfffffffffffffffc, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0xfffffdb4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x40000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r2, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) truncate(0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x0) 9.163979196s ago: executing program 1 (id=3802): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(r1) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8044}, 0x491) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x6, 0x80000000}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}}, 0x0) timerfd_create(0x9, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') pread64(r5, &(0x7f0000000140)=""/216, 0xd8, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000004c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f00000003c0)='./bus\x00', 0x0) renameat2(r6, &(0x7f0000000300)='./bus\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) 9.131988932s ago: executing program 0 (id=3803): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x28000, 0x0, 0x4}, 0x18) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000240)=""/141, 0x8d}], 0x3, &(0x7f0000000340)=""/50, 0x32}, 0x10001) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000003c0), 0x200080, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x1}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x4f, &(0x7f0000000540)=""/79, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, r0, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0x3, 0xfffff800}, 0x10, 0x0, r0, 0x2, &(0x7f0000000680)=[r1, r0, r1, r1, r2], &(0x7f00000006c0)=[{0xd058, 0x2, 0x6, 0x3}, {0x4, 0x3, 0xd, 0x3}], 0x10, 0x40, @void, @value}, 0x94) getpid() ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f00000007c0)) getpid() kexec_load(0x100, 0x8, &(0x7f0000001c80)=[{&(0x7f0000000800)="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", 0xfc, 0xffa0, 0x8}, {&(0x7f0000000900)="b8371b0ac8527ec6b3411ff9db", 0xd, 0xffffffffffff0001, 0x2}, {&(0x7f0000000940)="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", 0x1000, 0x6, 0x4}, {&(0x7f0000001940)="45a6242b1c8c17eec20e86abe90377a525be0cecd95e32e6e87de782a0b765d0c3e633e7f2938ff8325ce3200736797dcac8efe814ebfffa1b94f8f8b043ac33ea87a57cdf381effb905a1df4e0a9c6587de5935f80b1e5c9f869a7848df19f3dacf12dedfef1d89", 0x68, 0xe, 0x4}, {&(0x7f00000019c0)="17cf764f1a0c6cfb191a53c79c165b3cf5ad0ac55d838543c596be9fccb855f0314aee3b6f9fa976c29a8c6d39513b3e6e05859f17e1fe5c61b7a72807412879c4ae91b5ca8904f05db2881b9d40e6f951367dc6bc409e74442e57898836b424e9e06bfd3707df667eb9a1d5de7c4700151514dbdce8da7a62110d5ce8", 0x7d, 0x7, 0x2}, {&(0x7f0000001a40)="018b1d072e8cc7f38e60e7ec9e23d3ac3a723f7b836a2a29cb2e45c04a4219583232cfb6eda8c058003f5bbc106eb1761879a1db1d2e2766ab965801d006f088151964e35d3a5e1bc76f20463735193e6180b2b062310fb1bfcf4c92bd2e09555a6be5840b2b778f8dbf85733c", 0x6d, 0x7, 0xf30}, {&(0x7f0000001ac0)="9230ee4b48c60f8923468a6638e2b824d36ec71e53531bd4601bf89a6eeee5643ec3dd09c9f6c0254fe722664cd52e97a703a97efa22a3c840ec72a5b554c566363581d79d8ff124255211d17b8590a1433b4c066264828b3ba44799cd58b6c37a8157c5acfc46fc13a4bacad547400e3148590c6fb2de19c52ddfab5eeba69cdb6b170b219eb89e885f16426b9becdab04a2da724ee8fae1ab0100aea17cb03837481f01417af4d822f63ef392605db8521398d27ddd85e7af422cc1a0d9bcf0fdee844cc584226383dde6495083c153b27355d3cc39dc14642f1293587bf14e06d86083069cac558d48d4e9bc8ae915a1868", 0xf3, 0x400, 0x1}, {&(0x7f0000001bc0)="035bbe087fc96ce45f0b5dacd6e683ed4f7550f581c143da52132f9f5238ddd3b9cb6677610086065b0598d7d28cee9f69e0a32c13655b4804a81c1b726a32ce1d417cf25e13167d9853cb5295d2de54b3615307e5e1ba267c8a458ee94afcdfbc4fa8481f7cb74a285100838e7a627c21fd069a8b43bbe5c8ccf9abfb1f357c7ed1f1d0cf093e4c5316691e19647146b3bd69736dd945e1a5c9889007192da1a53a4e1d04d776", 0xa7, 0x7ff, 0x4}], 0x3e0000) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000001d80)) r4 = gettid() prlimit64(r4, 0x5, 0x0, &(0x7f00000025c0)) mlockall(0x1) quotactl_fd$Q_SYNC(r0, 0x0, 0x0, 0x0) mlockall(0x5) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000027c0)={&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002640)=[{}, {}, {}], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x9}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000028c0)={&(0x7f0000002840)=[0x0], &(0x7f0000002880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000002900)={0x6d, r5, r6}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000002940)=0x5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000002bc0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a40)={0x140, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x7c}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1dfef8befb60134881e32a1b35ec946cb3e906a6b1b3f8d4"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8539602d39d18a034f1782dec58e050c1ab21502ae60074f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40), &(0x7f0000002c80)='./file0\x00', 0x8, 0x2) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000002d00)=0x1) rename(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000002dc0)={"b082164364792d1657d848e6fa6c4cad", 0x0, 0x0, {0x2, 0x80000000}, {0x19, 0x8}, 0x5, [0x7, 0x1, 0x1, 0x1, 0x2, 0x0, 0x9, 0x7, 0x3f800000000000, 0xffffffffffffffb8, 0x8, 0x86, 0x10000, 0xc, 0xdd83, 0x1]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002ec0)={0x0, 0x0, {0xfffffffffffffff0, @usage=0xffffffff, 0x0, 0x4, 0x0, 0x7b, 0x3526, 0x1, 0x8, @struct={0x7f, 0x10001}, 0x100, 0x3, [0xfffffffffffffff7, 0x5, 0x4, 0x80000001, 0x8]}, {0x3, @usage=0xb, 0x0, 0x6, 0x2, 0x1, 0x1acb, 0x9, 0x1, @struct={0xa61, 0x9}, 0x44735633, 0x10, [0x43, 0x3, 0x2, 0x4, 0x8, 0x6]}, {0xfffffffffffffff7, @struct={0x10000, 0xffffffff}, 0x0, 0x4, 0x4, 0x2c6, 0x80000001, 0x0, 0x53, @usage=0x58a, 0x65, 0x5, [0x1, 0x8, 0xe54, 0xa, 0x1, 0x3]}, {0x2, 0x4, 0x40}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000032c0)={{r3}, r10, 0x16, @unused=[0x10001, 0x6, 0x4, 0x8], @devid=r11}) 8.816786998s ago: executing program 3 (id=3806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300}, 0x0) 8.638723258s ago: executing program 3 (id=3807): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_GET_KEEPCAPS(0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)=""/201, &(0x7f0000000400)=0xc9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') pread64(r6, &(0x7f0000000200)=""/162, 0xa2, 0xae) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d5", 0xb6}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed9", 0x61}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b7035", 0x8b}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1", 0x76}], 0x1}}], 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 7.209169498s ago: executing program 3 (id=3808): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}}, 0x0) 7.024981488s ago: executing program 6 (id=3809): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 6.723987496s ago: executing program 0 (id=3810): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a0000000500010006000000110003"], 0x60}}, 0x0) socket$inet6(0xa, 0x1, 0x5) r2 = fsopen(&(0x7f0000000340)='msdos\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES8=r0, @ANYRESDEC=r2, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x20) 6.722203948s ago: executing program 3 (id=3811): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000023008000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000080)="a4949a7f63598147082453", 0xb, 0x4050, &(0x7f0000000400)={0xa, 0x4e21, 0x5, @private2}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x408d7d46, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0) 6.019107034s ago: executing program 8 (id=3812): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002140)={'gre0\x00', &(0x7f0000002080)={'erspan0\x00', 0x0, 0x700, 0x80, 0x6, 0x4101, {{0x1e, 0x4, 0x2, 0x8, 0x78, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @empty, {[@noop, @timestamp={0x44, 0x28, 0x70, 0x0, 0x9, [0x2, 0x4, 0x95, 0x5, 0x6, 0x2866, 0x1000, 0x3, 0xb]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xcb, 0x0, 0x5, [0xe8, 0x8, 0x8]}, @ssrr={0x89, 0x1f, 0xe7, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @multicast2, @local, @local]}, @end]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002180), 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x21, 0x7, 0x3a}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) 5.974958016s ago: executing program 6 (id=3813): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x50d001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff78, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff262], [0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="48015d4f8dcbb7fb18bfd73c010000000000925941b711f9ec4c21be5c9b2315024989949cb26b23a2d0ee33a27762b81c60c22c5fef477a231b22ea6b07cd7132eea7061f8c3831a0a81dcbf7b88a4b4cf9da23bec86d55074b0d1fedf29244d13dae09404edf43c4e5f185f1f83951977ddbd2494b9e5dab1b25590e922c5ea00dfaed39d7ee0d3144211fdd7b03666a58a02904b2aaa0de97dea653c3da053a14cc934f8c750f4d94a6b9", @ANYRES16=0x0, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x64080) 3.76363163s ago: executing program 6 (id=3814): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.657913186s ago: executing program 8 (id=3815): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x10180) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0e00921ac9335600ac2d65cb77a4fe39cc49f09be829727eda9913590a76e9e9cd5c1d95a8ca2780b6c4", @ANYRES16=0x0, @ANYBLOB="658300000000000000000100000008002a01", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.656953788s ago: executing program 1 (id=3816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000002200)=""/4121, 0x1019) ioctl$TUNSETQUEUE(r1, 0x40049409, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8, 0x20, 0xacec, 0x2, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x64, 0x0, 0x86, 0x2f, 0x0, @private=0xa010102, @empty, {[@end, @cipso={0x86, 0x19, 0x3, [{0x6, 0x11, "32fffdf7f9ce1e873594c587a84e5f"}, {0x2, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r7, 0x4, 0x2, 0x0, 0xff, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback, 0x700, 0x10, 0x5, 0x308}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003c0009000000000000000200040000000400000008000a00", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206010100000000000000000000fffc05000100070000000900020073797a300000000014000780050015000000000008001240000000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x3f000000, 0x0) 3.656318225s ago: executing program 0 (id=3817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300}, 0x0) 3.591143162s ago: executing program 3 (id=3818): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_crypto(0x10, 0x3, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$tipc(r7, 0x0, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000015000b"], 0xe8}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r8], 0x50}, 0x1, 0xba01}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.507420742s ago: executing program 6 (id=3819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x548d03) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f0000000140)={0x0, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040961b060000000000000109022400010000000009040000010300014e81714bff0009213fcc0001220700090581030000000000c330a1eed8196154d9210994de0ea32052a263168ead87ea965bdba62dafe3de26ae116b265b1f0e289c9c84d229dca51c496a69e1372d23751af089612e0113899600638aaed25cd75d008580"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000680001000000000000000000000000000000000006000300000000000400020004000b00"], 0x28}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.490033416s ago: executing program 0 (id=3820): r0 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b0, &(0x7f0000001100)={0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b", 0x16}], 0x2, 0x8) r4 = socket$inet(0x2, 0xa, 0x7f) openat$kvm(0xffffff9c, 0x0, 0x301201, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010005240e0000"], 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003680)=@delchain={0x1df0, 0x65, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x0, 0x6}, {0xfff3, 0x17}}, [@TCA_RATE={0x6, 0x5, {0x1c, 0xd}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x1d5c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_ACT={0x110, 0x4, [@m_vlan={0x10c, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xd5, 0x6, "e37d784911fa0dfb3c4c365217b044d3eec0469aa0c31f8074b6dd77a596e7c28e92658fe17b662c276c4a7fe446326bfc9937eb6373912b29b54eeea3f051e22d2ae869fdb965d36a724596a93de6d6538ab5efd6d6a2407085b7395ec8878f9db1578acd29637c52a7f7eee72582bfcc9283dc86cc5c4098fc30d4ac8c1f4988edd8f766e7b7ba968e4c02b03f90e5821318aea7410f0ca5e509906ec8eddfb31f75e55b0e5d3cecebd566fd038550d854424a0363ddd13751798edafe4ce7a11b9bae4e1b102dfc06b8f05fa7b4391f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_POLICE={0x20, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_FW_MASK={0x8, 0x5, 0x5d12}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x81, 0x2, 0xb8bc, 0x8, 0x4, 0x0, 0x2, 0x80000001, 0x7, 0xa, 0x9, 0x8, 0x1, 0x3ff, 0x9, 0x9, 0xdc65, 0x78, 0x4, 0x800, 0xbde, 0x8a, 0x8, 0x0, 0x2, 0x1, 0x7, 0x7, 0xa2b, 0x9, 0x0, 0x1d50, 0x10, 0xfffff001, 0x2ad, 0x52bd, 0x4, 0x5, 0x2, 0x200, 0x5, 0x4, 0x479, 0xffff9c78, 0x3, 0x5, 0x4, 0x5, 0x6, 0x6, 0x9, 0x4, 0x3, 0xfffffffb, 0x1, 0x397f, 0xd1d6, 0x8, 0x9, 0x5, 0x3, 0x8, 0x7, 0x63, 0x2, 0x390, 0x5, 0x3, 0x39267886, 0x10001, 0x1ff, 0xfffffff9, 0x0, 0xfe, 0x2, 0x7, 0x9, 0x1000, 0xb761, 0xfffffe01, 0x4, 0x0, 0x5, 0x8, 0x2, 0x5, 0x9, 0xa35e, 0xc0dc, 0x5, 0x0, 0x3, 0x7, 0xbc, 0x6, 0x9, 0x3, 0x8000, 0x5f, 0x47e0, 0x0, 0x1000, 0x7, 0x0, 0x9, 0x9, 0x1e5f, 0xfffffffa, 0x5, 0x4, 0x6, 0x9, 0x1, 0x0, 0xfffffffe, 0x4, 0x7, 0x200, 0x0, 0x4, 0x8, 0xffffffd3, 0x0, 0x7, 0xa1f, 0x6, 0x5, 0x8, 0xe, 0x9, 0x0, 0x800, 0x1, 0xffff0001, 0xffff9dc1, 0x7, 0xcd0, 0x7, 0xb61, 0x9, 0x3, 0xefb, 0x6, 0x5, 0x5, 0x5, 0x7d8dcd00, 0x2, 0x2, 0x9, 0xf, 0x0, 0x2a1, 0x9, 0x98d, 0x1, 0x0, 0x2, 0x2, 0x9, 0x7, 0x4, 0x6a, 0x86, 0x5, 0x80000000, 0xf, 0x6, 0xf44, 0x3, 0xfffffffb, 0x2, 0x1, 0x6, 0x100, 0x100, 0xa, 0x800, 0x101, 0xb71, 0x9, 0x7f, 0xe7, 0x3, 0xa, 0x2, 0xff, 0x80000001, 0x6, 0x3, 0x8, 0xf29, 0xc000000, 0x8, 0x3, 0x5191, 0x1, 0x1800000, 0x0, 0x8000, 0xa1c, 0x80000001, 0x7, 0x8001, 0x3e17, 0x8349, 0x9, 0x2, 0xd2b, 0x1, 0x27d3, 0x28, 0x6, 0xfffffff9, 0x0, 0x7, 0xedb7, 0x8, 0x7ff, 0x1, 0xa, 0x2, 0x0, 0x5, 0x2, 0x5, 0xfffffff6, 0x0, 0x8, 0x2, 0x10000, 0xb, 0x80000001, 0x0, 0x6, 0x53d, 0x0, 0x10, 0x5, 0x6, 0xab, 0x1, 0x10001, 0x5, 0xf, 0x5, 0xfffff032, 0x40, 0x4, 0x4, 0x1, 0x400, 0x5, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa110, 0x6, 0x1, 0x9, 0xffffffff, {0x0, 0x0, 0xfff8, 0x8, 0x7, 0xc08}, {0x4f, 0x2, 0x0, 0x13, 0x6be7}, 0x2, 0x2, 0xf}}]}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}, @TCA_FW_ACT={0x17a4, 0x4, [@m_csum={0x10a0, 0x9, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x8, 0x4, 0x9, 0x5}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x4, 0x8, 0x3, 0x7}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xffffffffffffffff, 0x9, 0x8}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x5, 0xfffffff7, 0x1}, 0x22}}]}, {0x1004, 0x6, "cf8affcb563f2a75418d2e6b1c7ab62be10304e63d2178989a4965c5073f6ac18cbd02eb513a1f8cb59816f23df83042964d4464b9ccd83da67fbc7638de612408b9eb4bfcd6e14e358683f809dcfc724645fee17ab35edcbd70eaa56bfbc9ead6b71957e71aedc095b317a8250523cee1baad5d6fc32c9531e9868a2c3f06f7ea61db37eff1b77616aec2c967b020d76b839fdfc81f9cc376e84d71c0478a1701e05743b1f30e8c4efb9f36b1dc5b0bd1a035083ef9293372be497b12511876816ad237cf96296ff4b373458f0cc1ef849edbd17578994a8eda191898de9b959f1b54b88dfd894aeb35b0bc50d31a583b8f1a6dbc39bc509771bc71c75e9cbb3bfe2051f233be17838f0ed945c7671306df76a51a0d2e789bcb02ded064686fe1ff4ef873ce79adff771607c625242c9238adb04c36b834e5688e8964cf3fe9c83d94fcc52e4825560814ef1aa77fab595056407e345ea48831cf0f36c9d3ea5e3b42a5ed1df5513c76627356371c5530dfa3ec420dd8199e54ecf715c638da7f2893a41a10082d30e7866196ececfa7804f4cf16748f8d5e7694b87adb318a1d98ce015dd7f9686861ac1647a2ed2bb28236a88c02e59f9fb959453bcd51e97f8c4d763e91ceeea870cc776251e51949b267cbc1c3277397a3320efa9a1df983704e2a5f3f0182f56baf8d032cdc7720f2530a464bfd1b900e9212b6b416721771fed1f46f70611b7c0282849a53e540ebdb8909c527e0734487c8350d0d469c9c67820779d45ec45b31db325a334a9ca245323693607816a36a3309644f7fd2ac71633c06b6735b990f96ed6cfca09284c9a3d5fdc6228bf6b9086b6e814f35581cac80a8aa9f32b79deb8aecf5b4ed63217fc665b6909ba13c6ab3c0f9a91233cbf427619a8eb1b4472aef4608cf27c48c4c70f34dafaced5dbf3ff810f4b46450f1a6f7c3c513e16f9e94774d78cf1c7949b5bbb4b6d853071812108dc4e3ccda1ec279c37a52b6627f4a5e9c33a32ceabd3a6b26ffd72ffbf8b66848d07a25e956bc78393d215a6d9abe1b72897d23501649fc02786a42dd70d48d44de58773604fe55d74b172f4543ef11c0e8134d7a3cca1da3e31f65f814d49c11d5501323ab2033351c94e78916d5f7fc92e5786ddcfaa0c46239dd74cab9ceefd265f15bd22fc0dd4badc65fbb0623bc8a0eec1a2d9cf8564ee4170bd7f48a27389eb2d6bcd6931449b29acfffcfd281872eabfe36baae21456a35956e50f35cd6b33c5b954e4013b507b1a9028fd7ed8ce1c0e4182bdf957ff6403dacf92f2fd00dbbc0527bb918a3b8c1dd7866bea369450aa4ce25049c4bf7e3f1a5676762acb311c26666aa0df02d3bc65d502e65bda486b91c2b9b9261cf3fae774583391b5b37d104cd429957e65e9092e4a263c1d46ff4ffca4c0698b4b612e775efa690224b25adee43656bda16582412c2b9f7618f20c206e3f476057075801140fa407461c3b8cd980c4b54ecdc5a65bab55a87b7dfe46e47a6cdc0c6f684b1f2f17f0333a2cc1cfc22bacee86b77f696460fc5b9fba21d2ddc6e5a40d915701d96d4fc0cbe0e9d0c5972cbe69a8f72486f6823793bdf81fe74888e3a62050cdd191e23952e05b08e0de5a19b11c8c8843df878f86e9128aeb9295872e4b266de56bf385223201ee152f11806d62b18f6cfc154d65f955041dca49a72ca48e6e80ed9c261b72577d0a3ce0394cf7c925c1b4f0fd59189cc1c3ba99269a6791e49d778f16f7ae07dc529441516699ebe4d5260dfe88441f81af24645441dd08af597182525609af68e111a7a2454a65ec36875ac9c94da69a2fa3dbee12f6b349f869cc33bade33bca5e472d67efbfdfae739e6d5e1efd23f498e37b4fe593c3ae8a307f710d9c5da885c8272d61b49f237c6ea25349ecc91f748dfcab593f053b759e87fbbdfaf7f578f39e9f84c8273105a9217649882c40f079d7c3fb6e2b831ec07b46255b13b71b0970175038fc086ffe96917228a675f046c21566cb96b857a3e9d4cb9d5206fa67efb82eebd6236965ac5280bf197530370823decab53f2e6d742b933629658a8f3e6971991b686f3c85c09871d498150d049803206fef32ce8b6b6adfc9dfd2435b3b6c35510bd5b939d587a6bf1345208453c363cded1e601c9f3afffb11beaa0722bc848f2e5edd22caf3869e92da08fe6ccabc0dc0701b876e03fb8577932879853e7f999a5d2a227d57d97fce2b2d87dbdf354318c9cfd63e63ec40bd4b7f420be1c93626705f9f7470d8e863413a7e3914d7a446b39eb9c70038302e8a4fa455cf6b02be32d62ea8bec4ddec6c7e641320960921717a0be42f1621388c4465b41e6128e1dea5775b2b93a3ba84dbd0669c012bed887231395d8f25c82fbe2f2d8d5d61dcc81d5de576e8ca2e7454a7c9ce9e086cf866716a611dcc73e7fb1ea2b2511325a751e7af0a14359eed19c9a16e7d77348793d2b3c548ffe17eb7a91561cba5ade7abc7fafc928e82092ab640eed314a7cb0e0b5cf6a68812045e265a7edb599cae73367b358b41d7b5581dd16ba36c9d07203fdaf06b564261dd9dcde85c1829107ff119f8cf18c02026921fff5dc971134e9a9d5dd59fa9134044f1799d839579a8b75a805c06320391c360db6cbecd3e9684ff0f6766fa7dbb5ed3e0739b0cbc603a4ea26ada2b6c4930d3c0040a895af612dc8bfa8e3b3399e654d300447dc0ded829e1530ab91c07944a47e10fb3115e1785f7883c2983ab08311b3c25a75c2bc57b2627ae9a552c69886d9298d67b50181adf6dde432112f42b91f5cf0d1619dcbaf28d5ebdecbfbf1a11ded431e623980c0b1ecb50a75e3019da6b86e6321e2445dc6bbdf02841cc10e0f884fc51d17f92974f9888eaf8e2e42bc4f77e0c78618b1c0f1bb8490d810425341b870a229ec9b25ff0cb67f4c28e6b860cdcd98de1d74cc4046c4f6676a0ee584b4bf89cea5bf9c1aeea047b62fe5550699f2a4c2422431ce8e4c997930754478ba1f59648f25a7b6dc5dd0ab380e46a9a1dab61607885adfa40037b28288fee340b2843cf3d4a27e16e53e5ce6f525a9f67b37c736ab50bc8ba69bb75c68916180d4d961c3c15221056385e1376147d087f12b0d2885ee0ec7e6402e51d08c082d84616f3c6b3565539e9fa8239f37050caadaaf8d6dfbd5a4ac2852615c19b16408721fe0cd114c6eb015273dd7b3abfb3d75e7ec3a0afd9502c77c5cd1b05580e59645782d40134edae586f596d42d54c19aeb7f57b627d0ddd91c2b0823331efe47ee2c2a9e98302b468b03455395ac3d8f1d2a9dee7fddee53096300ce2ba9370ac41a6204ca58223f97cd76c930533f7bf96e7ee8744b715babc50d269f834ae35a91ac8cb2fec42eff212e3ade33a152c127e7e9b53221efbdc1e235008a23eeb3c51e3dcf05c1da1491085a817458a195dc70d62e80294e505cecc1ccbb2b64e19d03f54b4dcfaadadef630cac92b605f09c981c5513e8fcbeefe2d34b461696b0e2efc4db6939c2d5c591a3cd3e39816495308e82c28219cd433efef9aac1bf8684d06ef88de4a8daf9150619d71f604be05fdccee2f2959dbbbf8bedd012eee3764cdcd95cfc35a9e00940acb53a1fe07ea9839b8a1a18e0dceb0619509c32c9976359a69f20d2bd53a652414808c139d55007a66fc17382c1132a6a40e671fedec8aa37a53c154a709c92c9edb194f11d12de3ccec3ef095dd0f08f560577522e3686102fb0f79ee715c9e704ac0fc1c62ae38379fac4f41847fe35ee5db4f6c4dd6e67ba17e08947a52f2de22f1fc28815e7483fc294413768d1f40fe175755689bc4dec7df6e45a1e35bbf5ffda705ced28397d738eb40236efaea229fff84b1806e2331e9b7ca35a7cf1f7a8770f3690ea05dee562eb64b3c5aff58208bfafbd12fdd5a85189209ddd65ad26342a3b8f99286149596e630f2e13666d3b9d61026f330741060cb139c70bff81e5764157385b3d5ee153b2a08b19f3cb2de694d5ffbc84849c51d44d3bd1c6fb9509a854bda3692546e77fefbd93c96a07cd0ae916f2a8c13551fefbd3de419f65359e8ea1fa641c02e26675f4a122510917c61e47cbea263249769fa53da905bc6dcd91b494eec172a8211b47b8cc838fd26aafade637e1aaf94a51a2c10ee02f5dd5abdb4c4cebad11962a5fc39d8e70c6e3d4bb6a6b383f6baecb6e05ebcf785d63decd7462a63947b6c4166a692ba8f539281c157c6d66a197af1a29c4ce3b7d76e66c28002efabaa0f4621f2fe2e4c8f3128046237f2f72710ccb0a3a0fdfcfcc11a51492bbad20553c69901bfb400569904375230ef649d270bbc0ca6b5ed8367e57831b0300f6ee85840e219631c7660632a294ff34a7e4566dc9537430c3162257c23f9e52df90d246e59286811ada174c4b8811ff3ffd860894b22ab6e72de7b7f8e53e5ff11189e9a4f03082dc817b67fef699c6e2eca722a9dc423287c149bad1e503070f347cb8f6dadcce53d1273853b4c07ec64e745d8fc18dbc642272561da8ab646b0d75bce3a87fde0e2680e3808962361dad29f34d7532808ed9c110892d5b419c3b9f5bc40a6221a694eaeffc255a45215d7fac1b1779ec6e201cab960f41627fe995e5088678c5ff5ae44d273fe1b84260d021444e4fa56ddddb5abf09b7c167db4200daecaf843658885f9192899f073e8bf85f8ff66c9cf392cac1e9b2c3f880c11e5deac963a9f13c608aa1b780a3506b767cb798a56757500c1188f6eb985baa05634c5b33df8028202c6a9127727d6d38f30cc6b1bda9733fae95e180624f2b996f01eec717e99c1abe3aec4a112ad995e825d5a6c434bad6a45dd8ec788377c115750928c65dc1063e568255db5c704d7ff170e577a78ecba178faa8feb60b0726f9c85bc74e3965fedfddfd6367e054fe820eb57d9cc77a479d8b459c93a2ca169f7e4946ac208dfbb060a4b83be1dd04cac7d0ef37487eddbd9803673da438789fa74b571ece02e377b93bacd18c57f3e9b6d69bab35309913edf34e6cbf93bfd3bf1688419945c6f8492370324947eca9640de81526fcc138ccd055cb55f6628a38eba5c410a7462e50535aa89aebe32c2546d98f5d6561b89c722098b38aa65e9b60997ad7973091b7695ca526b43f732b2bfff1253db2e717b17dafe6fd54ee4ccc1b4dede963bd8c2b53d20bec64da5fc6fe96412036c23ae23996afe7b67f579c0ccb665c6ba49180d1cef141148aa5cd3fe9b48346dda861e5aea256e006728abf8ff4da53b3773aa584be9fb950afb088ae06324b3c3ece0eed5084442e05ea36f804c671e1636e3143b54ca658d1060a9067f172ffb76fd935f4d7b7e1991aa116709b329e3c5e52db9a33f9055b0b6eca75ebaa8fdc2548228d6fff72c7c4fc1b8eb5bafc490aa077600d08f1534def49522373223ae55f0f8e0e524fcb0aa1d20423211c7eed2ed577710edb77a70bc170a6b68890cf3df08da3715bf225a1bedd85a54371ded2f0b9f8d9f603083e74d597a1e7521f449fa601a1eff862848850b7cf3b871ff009a7468d4a5be9bfad18afd2158085ab15f169d62d3e08b83bf7ccc1ed42de33a50d2b9e4f25bff35dd878e5629029db7bd3558d6fbd844d6809e1eed8041adf52e79662a7b72f3433cea3703534d989d11e2ea1a718c79925c9c56c37874ff9e78239aa1ad4ca1ef1cfa8234acedbf2a905cbc1b0809763cc97a648f55493cb498374c827c610c22fe111132d473b155ee3c02cc26123"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x118, 0x10, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10001, 0xd32, 0x3, 0x1, 0x7a5}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x4, 0x4, 0x59ac2de8}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x78b, 0x9, 0xffffffffffffffff, 0x3, 0x7fffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x81, 0x6, "221c3160fc6087ac94bd8208006e175ddb45ff87a71ac0e6a8cf39b901b7e195854e3b4db4ca9fa9e3ea1955677dc080174fdd83f05639426e9f637b3bb2859fb70a34c58a67edc0d4fe9c11dc72e9d261da7ab009579a2cdeadbcb9f7f85e3d658a08b8b6b3722a5490e8ce7d8d452a6102494d8b43a0281517a47471"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x10c, 0xf, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x37, 0x2, 0x7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x170d, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x101, 0x20000000, 0x6, 0x100}}]}, {0xa2, 0x6, "fd94b04709265254a706edca864d65f3d36d88dec1ab3e6dfd339edddea61a7d38778813eccb2889f93db6880a358c2904020a336be6b96e5b7a6af964f1bedf029f442aa30c0e9b2647b238595082af1758d68ec116500d0eae528691a51b2f1f51994f15f111c1074a3ea21e0eeaab8ae0cc3a82f7f0b2c498b1c8592dd0a58532ca578f1b3ec9af90f770392234d7ba2b551b984ef33f36dfeeb4c83b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_csum={0x1d0, 0xa, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xcea6, 0x1, 0x3, 0xec}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x2, 0x8001, 0x3}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0xf, 0x4, 0xbbd6dea, 0xd83d}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0xffffffffffffffff, 0x4, 0x6}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x5, 0xe46, 0x10001}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x6, 0x1, 0x401}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x6, 0x5, 0x80000000}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xb9, 0x2, 0x800, 0x6}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x10000000, 0x1000, 0x1d7}, 0x47}}]}, {0xa7, 0x6, "6778dfda1d0456886b3b0ea31cb13b3617d7384922a07e822e149f51ebeb27cf09d9c865628c7b5623ab1b92c24d4215286b423b1169bb964607bcec6a4cb1867ed9c4e79df9d61daf830f1252aad994558f5a887975195e33ccbf71af1a39adc499d2e63840c33fb7c27ed188a5e3381f029e541445ca698a828d1a39866479900a765183870a74f9046d87c2b2494efda35ff697f49f8c15193a6a02e464cae3c22b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x110, 0x16, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0xc8, 0x6, "6553ae7bb9826cbe99169119ed7b410fb061af02ee543a23587147d056e04c489fc7435c6e3e481a2ada0c5a85c998c69ca8b2a70533a428fc040a111cd827425bd8c043070579eebbb3cc4961819b1acb2c59f19063e10cdf0187523e3e797c21c2e461a94a94b45b7288d6975aa927b92217a038b24c158703bcbfd5a7724ef4da2a67aa4b15afe03aa0a25002ee6b8947c3aff45807230664c4e2951e1ac646f00c3f98406f6d4f31c5ed1c049890f05b0f0d3a04b331a299514ec2903398defdea94"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x9c, 0x14, 0x0, 0x0, {{0xfffffffffffffd40}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0xb, 0x3, 0xcbf9, 0x7}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9a8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xa, 0x1, 0x4, 0x7, 0xffff0000}}]}, {0x36, 0x6, "9a6a3ad55a6ff8d97d2e96f3f7a16b652087c6c459a4c2ed8acebaf3a4b1d51c8a99c672895579187dd82db7f3a44f0913eb"}, {0xfffffffffffffefe, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x160, 0x1c, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x20000005, 0xfffffffa, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x0, 0x4, 0x9, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xfff, 0xf831d6f8260c146a, 0x274b, 0x80}, 0x3}}]}, {0xd1, 0x6, "bae1eb83dceefafd975b0b5dfdfbe2c5d8e72f2093703357c43d2a7e1ac775ae74afaf964913ed957af0339b98f44c9162fdbe6279031805978bb2fff67bd06adf701e8aca6c296665a035229ac9d9adc951a0ebe7b7e99ee457ca2d6294817eb80570f187c35fe38e37ad87235f68ce64aa61043fb497256ef2788d7bd87879148c28af7854e751fb2041cb59c48d8bdb8aa7a48c9afe7dbc9b92a9bf72af6d0c744bd6f6f8c4ca03a6214b9a74b89c7bc7da6050c7d6cc6c5e39fa693af32f8568c595325e7d14f00ef7e09e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x1df0}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000500)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x4100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x5, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x10000007, 0x7fff, 0x4000000, 0x7, 0x5, 0xd, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x7, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xfffb, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x2, 0x5, 0x62f, 0x9, 0x0, 0x484d, 0x3ff, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0xb, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x5, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0x10000, 0x0, 0x7fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x4, 0xd, 0x7, 0x6, 0xa, 0x6, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x37, 0x802, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0x6, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x0, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x3, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0x3, 0xd5800000, 0xffffffff, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x80003, 0x200, 0xfff, 0x3, 0xfffffffd, 0x4, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x5, 0x13a, 0x7, 0x1, 0xb756, 0x2, 0xb9, 0x4, 0x4f, 0x8c1, 0xfffffffc, 0x5, 0x4, 0xf, 0x4, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) 1.524850778s ago: executing program 1 (id=3821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300017c8bf3e3e0781f0694e140988b9ed0000d0ddc93c1ff06d9429339f4eecb633feb88507c117179e4ec0f82bba8269fea3ff0589cbb6a17e1629", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2507000000080001004200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff07000005000000"], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0036e95cbbe4ab9f18cbcba1", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000040011800500190002000000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x2982, &(0x7f0000000440)={0x0, 0x4a49, 0x1100, 0xfffffff9, 0x20}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x1b, 0x20000038, r9) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c798"], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f00000bd000), 0x0, 0x20040800) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r13 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000000c0)=0xf) 622.187602ms ago: executing program 8 (id=3822): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x3) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) unshare(0x2c020400) write$cgroup_int(r0, &(0x7f0000000140)=0xfffffffffffff1a2, 0x12) read$alg(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x5e, 0x4}) setsockopt(r2, 0x84, 0xd, &(0x7f0000000000)="0200f7ff08801d00", 0x8) unshare(0x8040800) 587.987903ms ago: executing program 3 (id=3823): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 22.678561ms ago: executing program 6 (id=3824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pread64(r1, &(0x7f0000000040)=""/161, 0xa1, 0x5) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0xffff0000, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = syz_usb_connect$cdc_ecm(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x1, 0x1, 0xb, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0xc6, {{0xb, 0x24, 0x6, 0x0, 0x0, "2634b4c7d5ed"}, {0x5, 0x24, 0x0, 0x8a3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xf98, 0x3, 0x5}, [@mdlm_detail={0x4a, 0x24, 0x13, 0x2, "eb77c314320b46dbc765428f29aa7930582980b3cd95ec7c07bf5e06192b6cc1259e42c4b4dc170d7ec283fbc472f1f85f56ef27ea0c493bea7a5923d30017d8efc362b4338c"}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x14}, @obex={0x5, 0x24, 0x15, 0x2}, @acm={0x4, 0x24, 0x2, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x39, 0x78, 0x33}}, {{0x9, 0x5, 0x3, 0x2, 0x438, 0x72, 0x5, 0x6}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x2, 0x8, 0x8, 0x10, 0x3}, 0x48, &(0x7f0000000380)={0x5, 0xf, 0x48, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x72, 0x4, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x5, 0xf00f, 0x4, [0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "28ee8ce327d1227f5cc6ff36d97a5330"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6a, 0x7, 0xfffa, 0x4}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x20, 0x24, 0x78, {0x78, 0xf, "d3cab54707cced10432f7c4bc0dfa026d29519d53eb7bbcad799406184da9ed97e298230274eebb91ffb5750c69282c5d434cfca7a48f9c3cad8b6f86ce1168895c8cd88d8b6323a67dd9231ae5095be099e254a82bd284b2683f3fae7fadad398018926b9b3f81e4e656c6afd9ed3a0467680b870ba"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000580)={0x0, 0xf, 0xb7, {0x5, 0xf, 0xb7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5e, 0xff, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0xf00, 0x1474, [0xff30, 0xc000, 0xff0000, 0xffc030]}, @ptm_cap={0x3}, @generic={0x86, 0x10, 0x1, "04003ba68096d433568ffe8ddf9c9dacb11a12d11a104a9045d4c5253f123e4763555621d2f2780ed7b230a2a8c6565ce9437c2b9769fc9d579777399d4b6d70907ce3d3fca59581185ef9e327beb5167ecef2e2adeb094d7052a42cb257e11242ff5dcd97d23b705dd0a3fea3867cfd47033a1882bab8a61407c510bec041fd2cab4d"}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3d, 0x2, 0x7, 0x0, "da1db8a3", "df9d3718"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x13, 0x18, 0xfc, 0xfc, 0x5, 0x100, 0x2}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000700)={0x60, 0x17, 0xf1, "8cd7e1d2567a8098a0c8860888a62976144369ace27e81aed575d70ae99be28c2a43882a22a3e4197b2e282a3363bda656d6ecc58d15761800e2ec1a5f612e27b7accd75c1714e249c99140d7ac9adbd2b479b075a5d0092951814d2119135a334bc9f59fc0c4ef31ff8b246fa04327cdb4801df9c283fa58b5198a729b4b7f65eb381207772368139159477a2d58af73a346ae46027601bd7c62cbd49aa09a46033031d608453c3c301df1d90cce796b22a25d906dc06a4f5f0ae046bfa5093c0abd9010bcb0838c3ca8604e8bad6b766a42f7a0670603d8826a7e5a5dd6c6ddb0dcf2809332a705ce07de061aae85a09"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x4bfb4e07d750d17a}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x97b1}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xfe}, &(0x7f0000000980)={0x40, 0xb, 0x2, "f500"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xf}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "ad8d"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xee}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_ep_write(r3, 0x9, 0x7, &(0x7f0000000c80)="350dcee520d4ec") utime(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x8, 0x3}) read$msr(0xffffffffffffffff, &(0x7f0000000d40)=""/35, 0x23) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000d80)={{0x3, @netrom}, [@netrom, @default, @bcast, @bcast, @netrom, @bcast, @default, @netrom]}, &(0x7f0000000e00)=0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000e40)=0x8, &(0x7f0000000e80)=0x2) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000ec0)='./file0\x00', 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x8, 0x4) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000fc0)={0x14, &(0x7f0000000f00)={0x40, 0x10, 0x4b, {0x4b, 0x4, "49a72cc91cf16a9a1aa4c702cb8e0593fdd4770fa4dc7b15307832f18344239f2bf41f95e3a411a0fa3e81dd4bacd0651537b19ecee8d751f45e0208688cb97abe18a8f25ac393c87d"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x1c, &(0x7f0000001000)={0x40, 0x14, 0xd6, "8695636bae6bdf4ba4fad9c2c877bf677a411504eb50d94338fc96783ed4ecdb1b0a83a5ef0a70cfe56a775f220a6da49465811c84d2959a748f5ff89f63f6f252d5d3acb88314e69bfca998999b3281db5633ec9db03117d80fa945723170ab491962732502565ce97b1cda3169adb7c213dcf2edcfe1f5a22948f78bab75d7617fd60b8ffc10a86aa67467854ffd906e1861cc983af3611b6468f2ef03fa629e456f6d8188d3a902e3b478be7e113d0ef458fbc6369b67954b74cc05cff8f70f900a53cc6dc6de9853a8ae791b6fe4b4d8fafe37d9"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x6}}) syz_open_dev$vbi(&(0x7f00000011c0), 0x1, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) syz_open_dev$vbi(&(0x7f0000001200), 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000001240)='rxrpc_timer\x00', 0xffffffffffffffff, 0x0, 0x100}, 0x18) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0xf7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x2, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0xfd, 0x9}}]}}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x310, 0xb, 0xb, 0x2, 0x10, 0x8}, 0x83, &(0x7f0000001340)={0x5, 0xf, 0x83, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xc, 0x89, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x9, 0xe4}, @generic={0x6a, 0x10, 0x5, "70e70bda33dc668eb7895d1915a68703273f217d89a3175d4648df9afdbf50bb3b90bf721b90e413bbc56b4936c9ab2d98f50ccb37228b123c2b3c75a518c8d4dfbe7c44136ec6587dc03dba419ce8f614e45d254bf9fcab150060e06fa0a6b9b13cbeee8db8e1"}]}, 0x2, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_control_io$hid(r7, &(0x7f00000016c0)={0x24, &(0x7f00000014c0)={0x40, 0x29, 0x75, {0x75, 0x0, "5250ce64e85b39e10e5f33464865192ce76d0b4071764504980f71be648804b7962518ed8bc6de0f1afd4189fcb87ffe14af82822d8f75ed6b528d08d9be654cb414e53dcf3763776691b893cc0f7018ccb654ff76f2fdbd071dfd6ee8e3b1e3904f2ba0bea6010027c25f1db246c9fef63287"}}, &(0x7f0000001540)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "b4a749ec0b007a161fbd20f80e799e88736be542b471f7419486adf7b56aabd62d47258900b1bc569d684fba42ffd29968106ca2dc2e05f797358adf18bf4cfd86346319437039281a1f9019cd2a5838aec76d148703fa5b9501f33f31a4c9e996b421546c432a0dd9112f3659d9e7d9761beec21926b58f0457e425ae742ec66df69699ba6148b2959f10ef8ccf185348b5445e5031561486441aaae5652e083a485a53febb7e83148807be0c0f1cfe1c9792b9d1c01e9577"}}, &(0x7f0000001640)={0x0, 0x22, 0x1e, {[@local, @main=@item_012={0x2, 0x0, 0xc, "12d9"}, @local=@item_4={0x3, 0x2, 0x5, "827f620e"}, @global=@item_012={0x1, 0x1, 0x3, ' '}, @local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0x2, ' LqD'}, @main=@item_4={0x3, 0x0, 0x9, "0e30318a"}, @local=@item_4={0x3, 0x2, 0x2, "85f8a9ed"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0xc, "a5"}]}}, &(0x7f0000001680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xa2f}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001700)={0x40, 0xf, 0x75, "b247786b4552e2e9f4a5d29eb5c03c4d9a991299d2a1c4c81fb9a2a1f0ee91b2e4f21a09e5b9a8f028b731aaf784a07056b9ac2df5aa94226a368e0952fe3a71546fa11aee5aa2c6bc7ac2cdbb467484ded214b60754a4f711c5f958cc1789d3d5c4ff5c47ce5b43ec976ea54cfb6793847569775e"}, &(0x7f0000001780)={0x0, 0xa, 0x1}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000001800)={0x20, 0x1, 0x7f, "9a7cc71fb8ad7cdd53ba4e2a834af9d9de5ecb1e7c54665b50e34b692fb7feedf1557151b04dcea1e9db66d0de350ab92d5ee2b81b6d95e13939fd0ba61bc71f904dedef270d44e00c70e230c789312c59355eb70e3ac22e7a140e912d8d2e602d01c911c1caa5fcf8a36f979191337763898f1743c3eea6351f678a80355a"}, &(0x7f00000018c0)={0x20, 0x3, 0x1}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000001b80)={&(0x7f0000001940), 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x14c, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ac07071}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5213eeee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e1963aa}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fa5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc527726}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x204e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cfa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc942095}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37283f74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68c9d6a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78ab6ef7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5239}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaa4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa7b8baa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x638d825b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75fb9f5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbfeafb9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a72ed9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1375597f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e7f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bbea0c1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ce4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa3edf64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52c6a06b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15c3d8eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd63e9b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fd8f22c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x139f8502}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6316}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3664a1f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe161}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x432212d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30d7d032}]}]}]}, 0x14c}}, 0x4080) syz_open_dev$char_usb(0xc, 0xb4, 0x7d46ea45) syz_open_dev$ndb(&(0x7f0000001bc0), 0x0, 0x210000) 22.231722ms ago: executing program 1 (id=3825): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002140)={'gre0\x00', &(0x7f0000002080)={'erspan0\x00', 0x0, 0x700, 0x80, 0x6, 0x4101, {{0x1e, 0x4, 0x2, 0x8, 0x78, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @empty, {[@noop, @timestamp={0x44, 0x28, 0x70, 0x0, 0x9, [0x2, 0x4, 0x95, 0x5, 0x6, 0x2866, 0x1000, 0x3, 0xb]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xcb, 0x0, 0x5, [0xe8, 0x8, 0x8]}, @ssrr={0x89, 0x1f, 0xe7, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @multicast2, @local, @local]}, @end]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002180), 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x21, 0x7, 0x3a}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 0 (id=3826): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) connect$can_j1939(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f00004fe000/0x2000)=nil, 0x2000}}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'drbg_pr_sha384\x00'}, '\x00', '\x00', 0x2400, 0x2000}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): rialNumber=0 [ 1342.453938][ T9] usb 1-1: config 0 descriptor?? [ 1342.888777][T18432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.897803][T18432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.284585][ T9] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 1343.313202][ T9] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1343.787949][ T9] usb 1-1: USB disconnect, device number 61 [ 1343.796624][T18420] delete_channel: no stack [ 1344.200227][T18442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.210349][T18442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.404287][T10508] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1344.575171][T10508] usb 10-1: Using ep0 maxpacket: 16 [ 1344.654683][T10508] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.680957][T10508] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.698984][T10508] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1344.713789][T10508] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1344.757945][T10508] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.776549][T10508] usb 10-1: config 0 descriptor?? [ 1346.564873][T18469] 9pnet_fd: Insufficient options for proto=fd [ 1346.777916][T16851] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1346.938190][T16851] usb 1-1: Using ep0 maxpacket: 32 [ 1346.951849][T16851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.989286][T16851] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 1347.025614][T16851] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1347.055174][T16851] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1347.077736][T16851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.106832][T16851] usb 1-1: config 0 descriptor?? [ 1347.127267][T16851] usb 1-1: bad CDC descriptors [ 1347.194684][T18188] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1347.367562][T18188] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.402773][T18188] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1347.426057][T18188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.450720][T18188] usb 9-1: Product: syz [ 1347.461484][T18188] usb 9-1: Manufacturer: syz [ 1347.487686][T18188] usb 9-1: SerialNumber: syz [ 1347.775062][T10508] usbhid 10-1:0.0: can't add hid device: -71 [ 1347.783275][T10508] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1347.853650][T10508] usb 10-1: USB disconnect, device number 60 [ 1347.986496][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3244'. [ 1348.633578][T18188] cdc_ncm 9-1:1.0: failed to get mac address [ 1348.960942][T18188] cdc_ncm 9-1:1.0: bind() failure [ 1348.981642][T18188] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1348.990192][T18188] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1349.000311][T18188] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1349.011521][T18188] usb 9-1: USB disconnect, device number 56 [ 1349.090179][T18493] affs: No valid root block on device nullb0 [ 1349.134246][ T6045] usb 1-1: USB disconnect, device number 62 [ 1351.265938][T18502] tty tty20: ldisc open failed (-12), clearing slot 19 [ 1351.439296][T18508] 9pnet_fd: Insufficient options for proto=fd [ 1352.999552][T13443] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1353.127727][T18188] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1353.171666][T13443] usb 9-1: Using ep0 maxpacket: 16 [ 1353.178624][T13443] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1353.188024][T13443] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1353.196307][T13443] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1353.204850][T13443] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1353.213127][T13443] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1353.222164][T13443] usb 9-1: config 0 has no interface number 0 [ 1353.228417][T13443] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1353.239642][T13443] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1353.250725][T13443] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1353.261229][T13443] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1353.274457][T13443] usb 9-1: config 0 interface 125 has no altsetting 0 [ 1353.281441][T13443] usb 9-1: config 0 interface 125 has no altsetting 2 [ 1353.290472][T18188] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.291238][T13443] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1353.314188][T18188] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1353.330017][T13443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.330883][T18188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.345986][T13443] usb 9-1: Product: syz [ 1353.354900][T13443] usb 9-1: Manufacturer: syz [ 1353.357439][T18188] usb 10-1: Product: syz [ 1353.366852][T13443] usb 9-1: SerialNumber: syz [ 1353.371758][T18188] usb 10-1: Manufacturer: syz [ 1353.378865][T18188] usb 10-1: SerialNumber: syz [ 1353.400750][T13443] usb 9-1: config 0 descriptor?? [ 1353.418561][T13443] usb 9-1: selecting invalid altsetting 2 [ 1353.701219][T18525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.721512][T18525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.749778][ C1] usb 9-1: async_complete: urb error -71 [ 1353.755569][ C1] usb 9-1: async_complete: urb error -71 [ 1353.761313][ C1] usb 9-1: async_complete: urb error -71 [ 1353.767041][ C1] usb 9-1: async_complete: urb error -71 [ 1353.843948][T13443] get_1284_register: usb error -71 [ 1353.858632][T13443] uss720 9-1:0.125: probe with driver uss720 failed with error -71 [ 1353.883452][T13443] usb 9-1: USB disconnect, device number 57 [ 1353.962054][T18542] affs: No valid root block on device nullb0 [ 1354.241028][T18546] usb usb7: usbfs: process 18546 (syz.6.3264) did not claim interface 0 before use [ 1354.251549][T18546] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1354.393677][T18548] 9pnet_fd: Insufficient options for proto=fd [ 1354.713836][T18188] cdc_ncm 10-1:1.0: failed to get mac address [ 1354.925048][T18188] cdc_ncm 10-1:1.0: bind() failure [ 1354.943287][T18188] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1355.052212][T18188] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1355.102186][T18188] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1355.121926][T18188] usb 10-1: USB disconnect, device number 61 [ 1355.307998][T18560] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3268'. [ 1356.768217][T18581] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1357.617709][T18188] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1357.800943][T18188] usb 1-1: Using ep0 maxpacket: 16 [ 1357.822915][T18188] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1357.852985][T18188] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1357.951848][T18188] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1358.031047][T18188] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1358.103983][T18188] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1358.206405][T18188] usb 1-1: config 0 has no interface number 0 [ 1358.247346][T18188] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1358.282461][T18188] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1358.352363][T18188] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1358.391616][T18188] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1358.431178][T18188] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1358.439121][T18188] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1358.595146][T18188] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1358.604924][T18188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.615438][T18188] usb 1-1: Product: syz [ 1358.619726][T18188] usb 1-1: Manufacturer: syz [ 1358.626822][T18188] usb 1-1: SerialNumber: syz [ 1358.634970][T18609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1358.647542][T18188] usb 1-1: config 0 descriptor?? [ 1358.654319][T18188] usb 1-1: selecting invalid altsetting 2 [ 1358.898872][T18590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.923249][T18590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.961044][ C0] usb 1-1: async_complete: urb error -71 [ 1358.966828][ C0] usb 1-1: async_complete: urb error -71 [ 1358.972536][ C0] usb 1-1: async_complete: urb error -71 [ 1358.978223][ C0] usb 1-1: async_complete: urb error -71 [ 1359.006036][T18188] get_1284_register: usb error -71 [ 1359.070319][T18188] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 1359.200234][T18188] usb 1-1: USB disconnect, device number 63 [ 1362.979057][T10508] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1363.300654][T18654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.312348][T18654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.575981][T10508] usb 1-1: Using ep0 maxpacket: 16 [ 1363.594950][T18654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.616074][T18654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.625210][T10508] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 1363.636579][T10508] usb 1-1: config 4 has no interface number 0 [ 1363.642728][T10508] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1363.672512][T18654] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1363.673153][T18660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.688766][T10508] usb 1-1: config 4 interface 51 has no altsetting 0 [ 1363.695854][T18654] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1363.718170][T10508] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1363.737926][T10508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.752073][T10508] usb 1-1: Product: syz [ 1363.760003][T10508] usb 1-1: Manufacturer: syz [ 1363.764968][T10508] usb 1-1: SerialNumber: syz [ 1363.773562][T18648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1363.804459][T10508] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 1363.830049][ T6045] usb 10-1: new low-speed USB device number 62 using dummy_hcd [ 1363.991075][ T6045] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1364.010827][ T6045] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.021835][ T6045] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1364.045559][ T6045] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.396662][T18671] tipc: Enabling of bearer rejected, failed to enable media [ 1365.113109][ T6045] usb 10-1: config 0 descriptor?? [ 1366.255519][ T5872] usb 1-1: USB disconnect, device number 64 [ 1366.420978][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1366.464346][ T6045] aquacomputer_d5next 0003:0C70:F0BD.001F: unknown main item tag 0xe [ 1366.474177][ T6045] aquacomputer_d5next 0003:0C70:F0BD.001F: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.9-1/input0 [ 1366.515600][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1366.543663][T18678] netlink: 'syz.1.3301': attribute type 10 has an invalid length. [ 1366.564029][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1367.454210][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.557431][T16851] usb 10-1: USB disconnect, device number 62 [ 1368.339146][T18698] 9pnet: Unknown protocol version 9p2000.?U6u [ 1368.896737][T18703] mkiss: ax0: crc mode is auto. [ 1369.207900][T10508] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1369.292253][ T6045] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1369.534983][ T6045] usb 1-1: Using ep0 maxpacket: 16 [ 1369.546212][T10508] usb 10-1: Using ep0 maxpacket: 16 [ 1369.559885][T10508] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1369.569145][T10508] usb 10-1: can't read configurations, error -61 [ 1369.577886][ T6045] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.598554][ T6045] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.624971][ T6045] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1369.652655][ T6045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1369.659511][ T6045] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1369.669290][ T6045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.685657][ T6045] usb 1-1: config 0 descriptor?? [ 1369.719635][T10508] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1369.890787][T10508] usb 10-1: Using ep0 maxpacket: 16 [ 1369.903847][T10508] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1369.912229][T10508] usb 10-1: can't read configurations, error -61 [ 1369.951613][T10508] usb usb10-port1: attempt power cycle [ 1370.311820][ T6045] hid (null): bogus close delimiter [ 1370.331036][T10508] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1370.331892][ T6045] hid (null): unknown global tag 0xe [ 1370.378889][T10508] usb 10-1: Using ep0 maxpacket: 16 [ 1370.444381][T10508] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1370.445650][ T6045] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.0020/input/input75 [ 1370.480016][T10508] usb 10-1: can't read configurations, error -61 [ 1370.644507][ T6045] kye 0003:0458:5010.0020: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 1370.681758][T10508] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1370.756669][T10508] usb 10-1: Using ep0 maxpacket: 16 [ 1370.765678][T10508] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1370.799533][T10508] usb 10-1: can't read configurations, error -61 [ 1370.810745][T10508] usb usb10-port1: unable to enumerate USB device [ 1370.904187][T18701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.967632][T18701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.470310][T18735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.479440][T18735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.538393][T13443] usb 1-1: USB disconnect, device number 65 [ 1373.294318][T18740] usb usb7: usbfs: process 18740 (syz.8.3319) did not claim interface 0 before use [ 1373.475274][T18740] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1378.588071][T18778] syz.8.3330 (18778): drop_caches: 2 [ 1378.601545][T18778] syz.8.3330 (18778): drop_caches: 2 [ 1379.330480][T10508] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1379.758402][T10508] usb 1-1: Using ep0 maxpacket: 8 [ 1379.767808][T10508] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1379.777065][T10508] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1379.788093][T10508] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1379.812204][T10508] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1379.884010][T10508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.961577][T10508] usb 1-1: Product: syz [ 1379.971824][T10508] usb 1-1: Manufacturer: syz [ 1379.971851][T10508] usb 1-1: SerialNumber: syz [ 1380.304043][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3335'. [ 1380.344549][T18794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.538109][T10508] usb 1-1: 0:2 : does not exist [ 1380.586951][T10508] usb 1-1: USB disconnect, device number 66 [ 1380.694196][T18797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.705912][T18797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.348442][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3339'. [ 1381.421961][T18808] bond0: entered promiscuous mode [ 1381.453677][T18808] bond_slave_0: entered promiscuous mode [ 1381.477133][T18808] bond_slave_1: entered promiscuous mode [ 1381.849553][T18814] syz.0.3344 (18814): drop_caches: 2 [ 1381.870558][T18814] syz.0.3344 (18814): drop_caches: 2 [ 1382.235379][T18817] 9pnet_fd: Insufficient options for proto=fd [ 1383.892157][T18833] overlayfs: missing 'lowerdir' [ 1383.907147][T18835] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1383.915781][T18835] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1383.924354][T18835] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1384.090958][T18837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.100723][T18837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.103685][ T7777] Bluetooth: hci6: Frame reassembly failed (-84) [ 1384.221509][T18842] FAULT_INJECTION: forcing a failure. [ 1384.221509][T18842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.237219][T18842] CPU: 1 UID: 0 PID: 18842 Comm: syz.0.3348 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1384.248045][T18842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1384.258127][T18842] Call Trace: [ 1384.261429][T18842] [ 1384.264375][T18842] dump_stack_lvl+0x241/0x360 [ 1384.269088][T18842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.274319][T18842] ? __pfx__printk+0x10/0x10 [ 1384.278944][T18842] ? snprintf+0xda/0x120 [ 1384.283212][T18842] should_fail_ex+0x3b0/0x4e0 [ 1384.287919][T18842] _copy_to_user+0x31/0xb0 [ 1384.292364][T18842] simple_read_from_buffer+0xca/0x150 [ 1384.297778][T18842] proc_fail_nth_read+0x1e9/0x250 [ 1384.302834][T18842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1384.308411][T18842] ? rw_verify_area+0x55e/0x6f0 [ 1384.311435][T10508] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1384.313264][T18842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1384.313293][T18842] vfs_read+0x1fc/0xb70 [ 1384.313321][T18842] ? __pfx___mutex_lock+0x10/0x10 [ 1384.313344][T18842] ? __pfx_vfs_read+0x10/0x10 [ 1384.313367][T18842] ? __fget_files+0x2a/0x410 [ 1384.313386][T18842] ? __fget_files+0x395/0x410 [ 1384.313410][T18842] ? __fget_files+0x2a/0x410 [ 1384.313435][T18842] ksys_read+0x18f/0x2b0 [ 1384.313459][T18842] ? __pfx_ksys_read+0x10/0x10 [ 1384.313492][T18842] do_syscall_64+0xf3/0x230 [ 1384.313517][T18842] ? clear_bhb_loop+0x35/0x90 [ 1384.313537][T18842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.313563][T18842] RIP: 0033:0x7f827e38473c [ 1384.313582][T18842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1384.313600][T18842] RSP: 002b:00007f827f1d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1384.313623][T18842] RAX: ffffffffffffffda RBX: 00007f827e576160 RCX: 00007f827e38473c [ 1384.418755][T18842] RDX: 000000000000000f RSI: 00007f827f1d80a0 RDI: 000000000000000b [ 1384.426733][T18842] RBP: 00007f827f1d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.434709][T18842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.442684][T18842] R13: 0000000000000000 R14: 00007f827e576160 R15: 00007fffab535808 [ 1384.450677][T18842] [ 1384.536777][T10508] usb 10-1: Using ep0 maxpacket: 8 [ 1384.543430][T10508] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1384.552544][T10508] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1384.566955][T10508] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.580034][T10508] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1384.591739][T10508] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.606993][T10508] usb 10-1: Product: syz [ 1384.611698][T10508] usb 10-1: Manufacturer: syz [ 1384.616452][T10508] usb 10-1: SerialNumber: syz [ 1385.110944][T18848] syz.8.3353: attempt to access beyond end of device [ 1385.110944][T18848] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1385.779975][T10508] usb 10-1: 0:2 : does not exist [ 1385.791839][T10508] usb 10-1: USB disconnect, device number 67 [ 1386.336952][ T5824] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1386.416895][T18857] overlayfs: failed to resolve './file1': -2 [ 1386.471281][T18859] overlayfs: failed to resolve './file0': -2 [ 1386.514725][ T5872] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 1386.726665][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1386.749993][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.771326][ T5872] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1387.110688][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.132426][ T5872] usb 1-1: config 0 descriptor?? [ 1387.162202][T18867] netlink: 'syz.9.3360': attribute type 11 has an invalid length. [ 1387.170188][T18867] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3360'. [ 1387.242677][T18870] FAULT_INJECTION: forcing a failure. [ 1387.242677][T18870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1387.285095][T18870] CPU: 0 UID: 0 PID: 18870 Comm: syz.6.3361 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1387.295941][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1387.306026][T18870] Call Trace: [ 1387.309321][T18870] [ 1387.312270][T18870] dump_stack_lvl+0x241/0x360 [ 1387.316976][T18870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.322202][T18870] ? __pfx__printk+0x10/0x10 [ 1387.326825][T18870] ? __pfx_lock_release+0x10/0x10 [ 1387.331880][T18870] should_fail_ex+0x3b0/0x4e0 [ 1387.336583][T18870] _copy_from_user+0x2f/0xc0 [ 1387.341202][T18870] restore_sigcontext+0xd8/0x7d0 [ 1387.346175][T18870] ? __pfx___might_resched+0x10/0x10 [ 1387.351490][T18870] ? __might_fault+0xaa/0x120 [ 1387.356196][T18870] ? __pfx_restore_sigcontext+0x10/0x10 [ 1387.361792][T18870] ? __task_pid_nr_ns+0x28/0x450 [ 1387.366759][T18870] __do_sys_rt_sigreturn+0x1b9/0x280 [ 1387.372078][T18870] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1387.377912][T18870] ? do_syscall_64+0x100/0x230 [ 1387.382706][T18870] ? do_syscall_64+0xb6/0x230 [ 1387.387418][T18870] do_syscall_64+0xf3/0x230 [ 1387.391961][T18870] ? clear_bhb_loop+0x35/0x90 [ 1387.396671][T18870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.402583][T18870] RIP: 0033:0x7fb498b21f29 [ 1387.407008][T18870] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1387.426627][T18870] RSP: 002b:00007fb499a1da80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1387.435058][T18870] RAX: ffffffffffffffda RBX: 00007fb498d75fa0 RCX: 00007fb498b21f29 [ 1387.443036][T18870] RDX: 00007fb499a1da80 RSI: 00007fb499a1dbb0 RDI: 0000000000000021 [ 1387.451036][T18870] RBP: 00007fb499a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.459020][T18870] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1387.466994][T18870] R13: 0000000000000000 R14: 00007fb498d75fa0 R15: 00007ffd4baa9ab8 [ 1387.474980][T18870] [ 1389.335469][ T5872] aquacomputer_d5next 0003:0C70:F0BD.0021: unknown main item tag 0xe [ 1389.395028][ T5872] aquacomputer_d5next 0003:0C70:F0BD.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.0-1/input0 [ 1389.479384][ T5872] usb 1-1: USB disconnect, device number 67 [ 1389.648810][T18894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.664481][T18894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.667760][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3368'. [ 1390.752795][T18900] overlayfs: failed to resolve './file0': -2 [ 1391.291685][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3371'. [ 1391.389709][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3371'. [ 1391.427736][T18918] FAULT_INJECTION: forcing a failure. [ 1391.427736][T18918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.441157][T18918] CPU: 1 UID: 0 PID: 18918 Comm: syz.0.3376 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1391.451964][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1391.462055][T18918] Call Trace: [ 1391.465357][T18918] [ 1391.468313][T18918] dump_stack_lvl+0x241/0x360 [ 1391.473026][T18918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.478255][T18918] ? __pfx__printk+0x10/0x10 [ 1391.482886][T18918] ? snprintf+0xda/0x120 [ 1391.487158][T18918] should_fail_ex+0x3b0/0x4e0 [ 1391.491869][T18918] _copy_to_user+0x31/0xb0 [ 1391.496312][T18918] simple_read_from_buffer+0xca/0x150 [ 1391.501720][T18918] proc_fail_nth_read+0x1e9/0x250 [ 1391.506776][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1391.512357][T18918] ? rw_verify_area+0x55e/0x6f0 [ 1391.517231][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1391.522813][T18918] vfs_read+0x1fc/0xb70 [ 1391.526991][T18918] ? __pfx_vfs_read+0x10/0x10 [ 1391.531673][T18918] ? _copy_from_user+0x4e/0xc0 [ 1391.536446][T18918] ? move_addr_to_kernel+0x99/0x150 [ 1391.541651][T18918] ? __sys_bind+0x20a/0x290 [ 1391.546162][T18918] ? __pfx___sys_bind+0x10/0x10 [ 1391.551020][T18918] ksys_read+0x18f/0x2b0 [ 1391.555273][T18918] ? __pfx_ksys_read+0x10/0x10 [ 1391.560044][T18918] ? do_syscall_64+0x100/0x230 [ 1391.564821][T18918] ? do_syscall_64+0xb6/0x230 [ 1391.569516][T18918] do_syscall_64+0xf3/0x230 [ 1391.574037][T18918] ? clear_bhb_loop+0x35/0x90 [ 1391.578725][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.584628][T18918] RIP: 0033:0x7f827e38473c [ 1391.589048][T18918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1391.608662][T18918] RSP: 002b:00007f827f21a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1391.617095][T18918] RAX: ffffffffffffffda RBX: 00007f827e575fa0 RCX: 00007f827e38473c [ 1391.625075][T18918] RDX: 000000000000000f RSI: 00007f827f21a0a0 RDI: 0000000000000005 [ 1391.633067][T18918] RBP: 00007f827f21a090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.641063][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.649043][T18918] R13: 0000000000000000 R14: 00007f827e575fa0 R15: 00007fffab535808 [ 1391.657034][T18918] [ 1391.672279][T18911] netlink: 'syz.9.3371': attribute type 10 has an invalid length. [ 1391.714139][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3371'. [ 1395.968140][ T5872] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1396.264601][ T5872] usb 10-1: Using ep0 maxpacket: 32 [ 1396.273600][T18955] overlayfs: failed to resolve './file0': -2 [ 1396.274521][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.300528][ T5872] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 1396.325420][ T5872] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1396.362417][ T5872] usb 10-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1396.382511][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.416594][ T5872] usb 10-1: config 0 descriptor?? [ 1396.424859][ T5872] usb 10-1: bad CDC descriptors [ 1397.782134][T18970] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1397.797506][T18970] dvmrp5: entered allmulticast mode [ 1398.624153][ T5872] usb 10-1: USB disconnect, device number 68 [ 1398.887372][T18989] nfs: Unknown parameter 'wlan1' [ 1399.721978][ T5872] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1399.943069][ T5872] usb 10-1: Using ep0 maxpacket: 16 [ 1399.949627][ T5872] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.960795][ T5872] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.970781][ T5872] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1399.989420][ T5872] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1400.564510][ T5872] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1400.573877][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.459500][T19005] netlink: 'syz.6.3401': attribute type 7 has an invalid length. [ 1401.635092][ T5872] usb 10-1: config 0 descriptor?? [ 1402.032273][ T5872] usbhid 10-1:0.0: can't add hid device: -71 [ 1402.053909][ T5872] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1402.104076][ T5872] usb 10-1: USB disconnect, device number 69 [ 1402.712075][ T5872] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1403.208033][ T5872] usb 10-1: Using ep0 maxpacket: 8 [ 1403.221214][ T5872] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1403.253967][ T5872] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1403.275550][ T5872] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1403.336099][T19034] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:19998 [ 1403.689775][ T5872] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1403.790650][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.830266][ T5872] usb 10-1: Product: syz [ 1403.854778][ T5872] usb 10-1: Manufacturer: syz [ 1403.881408][ T5872] usb 10-1: SerialNumber: syz [ 1405.219845][T19053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.249888][T19053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.426558][T18188] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1405.619964][ T5872] usb 10-1: 0:2 : does not exist [ 1405.710913][T18188] usb 9-1: Using ep0 maxpacket: 16 [ 1405.821699][T18188] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.834321][ T5872] usb 10-1: USB disconnect, device number 70 [ 1405.944699][T18188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1405.971444][T18188] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1406.024915][T18188] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1406.043165][T18188] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1406.074101][T18188] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1406.108879][T18188] usb 9-1: Manufacturer: syz [ 1406.132667][T18188] usb 9-1: config 0 descriptor?? [ 1406.280250][T19066] FAULT_INJECTION: forcing a failure. [ 1406.280250][T19066] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.356479][T19066] CPU: 1 UID: 0 PID: 19066 Comm: syz.0.3418 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1406.367319][T19066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1406.377408][T19066] Call Trace: [ 1406.380706][T19066] [ 1406.383687][T19066] dump_stack_lvl+0x241/0x360 [ 1406.388377][T19066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.393595][T19066] ? __pfx__printk+0x10/0x10 [ 1406.398194][T19066] ? ref_tracker_alloc+0x332/0x490 [ 1406.403329][T19066] should_fail_ex+0x3b0/0x4e0 [ 1406.408033][T19066] should_failslab+0xac/0x100 [ 1406.412753][T19066] ? skb_clone+0x20c/0x390 [ 1406.417199][T19066] kmem_cache_alloc_noprof+0x70/0x380 [ 1406.422614][T19066] skb_clone+0x20c/0x390 [ 1406.426893][T19066] __netlink_deliver_tap+0x3cc/0x7f0 [ 1406.432216][T19066] ? netlink_deliver_tap+0x2e/0x1b0 [ 1406.437435][T19066] netlink_deliver_tap+0x19d/0x1b0 [ 1406.442567][T19066] netlink_sendskb+0x68/0x140 [ 1406.447276][T19066] netlink_unicast+0x39d/0x990 [ 1406.452079][T19066] ? __pfx_netlink_unicast+0x10/0x10 [ 1406.457416][T19066] nfnetlink_rcv+0x26bd/0x2ab0 [ 1406.462240][T19066] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1406.467377][T19066] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1406.473304][T19066] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 1406.479940][T19066] ? rcu_read_unlock_special+0x497/0x570 [ 1406.485610][T19066] ? netlink_deliver_tap+0x2e/0x1b0 [ 1406.490831][T19066] ? skb_clone+0x240/0x390 [ 1406.495254][T19066] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1406.501266][T19066] ? __rcu_read_unlock+0xa1/0x110 [ 1406.506315][T19066] netlink_unicast+0x7f6/0x990 [ 1406.511099][T19066] ? __pfx_netlink_unicast+0x10/0x10 [ 1406.516385][T19066] ? __virt_addr_valid+0x45f/0x530 [ 1406.521514][T19066] ? __phys_addr_symbol+0x2f/0x70 [ 1406.526568][T19066] ? __check_object_size+0x47a/0x730 [ 1406.531896][T19066] netlink_sendmsg+0x8e4/0xcb0 [ 1406.536705][T19066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1406.542036][T19066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1406.547344][T19066] __sock_sendmsg+0x221/0x270 [ 1406.552062][T19066] ____sys_sendmsg+0x52a/0x7e0 [ 1406.556866][T19066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1406.562176][T19066] ? __fget_files+0x2a/0x410 [ 1406.566788][T19066] ? __fget_files+0x2a/0x410 [ 1406.571409][T19066] __sys_sendmsg+0x269/0x350 [ 1406.576023][T19066] ? __pfx_lock_release+0x10/0x10 [ 1406.581074][T19066] ? __pfx___sys_sendmsg+0x10/0x10 [ 1406.586216][T19066] ? __pfx_vfs_write+0x10/0x10 [ 1406.591029][T19066] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1406.597377][T19066] ? do_syscall_64+0x100/0x230 [ 1406.602172][T19066] ? do_syscall_64+0xb6/0x230 [ 1406.606876][T19066] do_syscall_64+0xf3/0x230 [ 1406.611402][T19066] ? clear_bhb_loop+0x35/0x90 [ 1406.616097][T19066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.622019][T19066] RIP: 0033:0x7f827e385d29 [ 1406.626460][T19066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.646096][T19066] RSP: 002b:00007f827f21a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1406.654539][T19066] RAX: ffffffffffffffda RBX: 00007f827e575fa0 RCX: 00007f827e385d29 [ 1406.662533][T19066] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1406.670523][T19066] RBP: 00007f827f21a090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.678519][T19066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1406.686507][T19066] R13: 0000000000000000 R14: 00007f827e575fa0 R15: 00007fffab535808 [ 1406.694516][T19066] [ 1406.697736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.763426][T19071] syz.9.3419: attempt to access beyond end of device [ 1406.763426][T19071] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1407.895884][T19081] syz.6.3422 (19081): drop_caches: 2 [ 1407.915047][T19081] syz.6.3422 (19081): drop_caches: 2 [ 1408.410307][ T6045] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1408.566716][T16851] usb 9-1: USB disconnect, device number 58 [ 1408.581463][ T6045] usb 1-1: Using ep0 maxpacket: 32 [ 1408.591022][ T6045] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1408.664297][ T6045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.687705][ T6045] usb 1-1: Product: syz [ 1408.710301][ T6045] usb 1-1: Manufacturer: syz [ 1408.750890][ T6045] usb 1-1: SerialNumber: syz [ 1408.813806][ T6045] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1408.954590][ T5927] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1409.108577][T19093] FAULT_INJECTION: forcing a failure. [ 1409.108577][T19093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.122502][T19093] CPU: 0 UID: 0 PID: 19093 Comm: syz.6.3424 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1409.133301][T19093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1409.143378][T19093] Call Trace: [ 1409.146677][T19093] [ 1409.149632][T19093] dump_stack_lvl+0x241/0x360 [ 1409.154350][T19093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.159572][T19093] ? __pfx__printk+0x10/0x10 [ 1409.164185][T19093] ? shmem_allowable_huge_orders+0x580/0x660 [ 1409.170285][T19093] should_fail_ex+0x3b0/0x4e0 [ 1409.174993][T19093] copy_page_from_iter_atomic+0x301/0x1e30 [ 1409.180836][T19093] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1409.186508][T19093] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1409.192780][T19093] ? shmem_write_begin+0x1e9/0x350 [ 1409.197925][T19093] ? __pfx_shmem_write_begin+0x10/0x10 [ 1409.203421][T19093] ? fault_in_iov_iter_readable+0x229/0x280 [ 1409.209340][T19093] generic_perform_write+0x675/0x990 [ 1409.214661][T19093] ? __pfx_generic_perform_write+0x10/0x10 [ 1409.220490][T19093] ? _raw_spin_unlock+0x28/0x50 [ 1409.225361][T19093] ? __mark_inode_dirty+0x5b2/0xe90 [ 1409.230581][T19093] ? mnt_put_write_access_file+0xbf/0x100 [ 1409.236325][T19093] ? file_update_time+0x3dd/0x450 [ 1409.241375][T19093] shmem_file_write_iter+0xf9/0x120 [ 1409.246604][T19093] do_iter_readv_writev+0x600/0x880 [ 1409.251832][T19093] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1409.257595][T19093] ? rcu_read_lock_any_held+0xb7/0x160 [ 1409.263103][T19093] vfs_writev+0x376/0xba0 [ 1409.267471][T19093] ? __pfx_lock_acquire+0x10/0x10 [ 1409.272516][T19093] ? __pfx_vfs_writev+0x10/0x10 [ 1409.277387][T19093] ? vfs_write+0x730/0xd30 [ 1409.281839][T19093] ? __fget_files+0x2a/0x410 [ 1409.286449][T19093] ? __fget_files+0x395/0x410 [ 1409.291142][T19093] ? __fget_files+0x2a/0x410 [ 1409.295760][T19093] __se_sys_pwritev2+0x196/0x2b0 [ 1409.300735][T19093] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 1409.306244][T19093] ? do_syscall_64+0x100/0x230 [ 1409.311058][T19093] ? __x64_sys_pwritev2+0x21/0xf0 [ 1409.316116][T19093] do_syscall_64+0xf3/0x230 [ 1409.320658][T19093] ? clear_bhb_loop+0x35/0x90 [ 1409.325355][T19093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.331275][T19093] RIP: 0033:0x7fb498b85d29 [ 1409.335713][T19093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.355345][T19093] RSP: 002b:00007fb4999dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1409.363786][T19093] RAX: ffffffffffffffda RBX: 00007fb498d76160 RCX: 00007fb498b85d29 [ 1409.371782][T19093] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 000000000000000b [ 1409.379773][T19093] RBP: 00007fb4999dc090 R08: 0000000000000000 R09: 0000000000000003 [ 1409.387764][T19093] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000002 [ 1409.395761][T19093] R13: 0000000000000000 R14: 00007fb498d76160 R15: 00007ffd4baa9ab8 [ 1409.403770][T19093] [ 1409.510355][T16851] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1409.520023][ T5927] usb 10-1: device descriptor read/64, error -71 [ 1409.526772][ T6045] gspca_stk1135: reg_w 0x2 err -110 [ 1409.533073][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.539474][ T6045] gspca_stk1135: Sensor write failed [ 1409.544941][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.551306][ T6045] gspca_stk1135: Sensor write failed [ 1409.556856][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.563254][ T6045] gspca_stk1135: Sensor read failed [ 1409.568579][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.575000][ T6045] gspca_stk1135: Sensor read failed [ 1409.580254][ T6045] gspca_stk1135: Detected sensor type unknown (0x0) [ 1409.587107][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.593464][ T6045] gspca_stk1135: Sensor read failed [ 1409.598798][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.605154][ T6045] gspca_stk1135: Sensor read failed [ 1409.610439][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.616972][ T6045] gspca_stk1135: Sensor write failed [ 1409.622305][ T6045] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.629454][ T6045] gspca_stk1135: Sensor write failed [ 1409.635239][ T6045] stk1135 1-1:64.0: probe with driver stk1135 failed with error -110 [ 1409.916213][ T5927] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1410.013992][T16851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.025483][T16851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.049449][T16851] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.073518][T16851] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1410.094405][T16851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.147229][T16851] usb 9-1: config 0 descriptor?? [ 1410.386672][ T5927] usb 10-1: device descriptor read/64, error -71 [ 1410.504766][ T5927] usb usb10-port1: attempt power cycle [ 1410.601442][T16851] prodikeys 0003:041E:2801.0022: unknown main item tag 0x0 [ 1410.611444][T16851] prodikeys 0003:041E:2801.0022: unknown main item tag 0x0 [ 1410.631402][T16851] prodikeys 0003:041E:2801.0022: item fetching failed at offset 2/5 [ 1410.641500][T16851] prodikeys 0003:041E:2801.0022: hid parse failed [ 1410.648761][T16851] prodikeys 0003:041E:2801.0022: probe with driver prodikeys failed with error -22 [ 1410.888376][ T5927] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1411.124309][ T5927] usb 10-1: device descriptor read/8, error -71 [ 1411.124431][T19087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.139526][T19087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.372331][ T5872] usb 9-1: USB disconnect, device number 59 [ 1411.544505][ T5927] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1411.576011][ T5927] usb 10-1: device descriptor read/8, error -71 [ 1411.776330][ T5927] usb usb10-port1: unable to enumerate USB device [ 1412.579497][ T5927] usb 1-1: USB disconnect, device number 68 [ 1412.685191][T19118] affs: No valid root block on device nullb0 [ 1414.766281][T19129] syz.6.3435 (19129): drop_caches: 2 [ 1414.797179][T19129] syz.6.3435 (19129): drop_caches: 2 [ 1415.532125][T19137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.561059][T19137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.662665][ T9] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1417.079406][ T9] usb 10-1: config 0 has an invalid interface number: 15 but max is 0 [ 1417.138913][ T9] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1418.032332][ T9] usb 10-1: config 0 has no interface number 1 [ 1418.062620][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1418.092059][ T9] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 1418.114970][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.141804][ T9] usb 10-1: Product: syz [ 1418.146397][ T9] usb 10-1: Manufacturer: syz [ 1418.158419][ T9] usb 10-1: SerialNumber: syz [ 1419.052943][ T9] usb 10-1: config 0 descriptor?? [ 1419.142406][ T9] usb 10-1: can't set config #0, error -71 [ 1419.157721][ T9] usb 10-1: USB disconnect, device number 75 [ 1419.292829][ T6057] Bluetooth: hci6: Frame reassembly failed (-84) [ 1419.301001][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.321217][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.903055][T19178] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.903114][T19178] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1420.903193][T19178] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.903214][T19178] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1421.502757][T19180] affs: No valid root block on device nullb0 [ 1421.546183][ T5824] Bluetooth: hci6: command 0x1003 tx timeout [ 1421.768551][T15140] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1422.451507][T19182] lo speed is unknown, defaulting to 1000 [ 1422.576417][T19190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.585311][T19190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.679017][T19192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1423.044358][ T9] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 1423.216410][ T9] usb 10-1: config 0 has an invalid interface number: 140 but max is 4 [ 1423.242836][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1423.283219][ T9] usb 10-1: config 0 has no interface number 0 [ 1423.314952][ T9] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 1423.324764][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.687205][ T9] usb 10-1: Product: syz [ 1424.691567][ T9] usb 10-1: Manufacturer: syz [ 1424.696321][ T9] usb 10-1: SerialNumber: syz [ 1424.703680][ T9] usb 10-1: config 0 descriptor?? [ 1424.740060][ T9] as10x_usb: device has been detected [ 1424.751864][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1424.782705][ T9] usb 10-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1424.812471][ T9] as10x_usb: error during firmware upload part1 [ 1424.831946][ T9] Registered device Elgato EyeTV DTT Deluxe [ 1425.086407][ T6045] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1425.092434][ T9] usb 10-1: USB disconnect, device number 76 [ 1425.336302][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 1425.406315][ T6045] usb 9-1: config 0 has an invalid interface number: 94 but max is 0 [ 1425.432208][ T6045] usb 9-1: config 0 has no interface number 0 [ 1425.438620][ T6045] usb 9-1: config 0 interface 94 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1425.449062][ T6045] usb 9-1: config 0 interface 94 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 0 [ 1425.459118][ T6045] usb 9-1: config 0 interface 94 altsetting 5 has an endpoint descriptor with address 0x69, changing to 0x9 [ 1428.446320][ T9] as10x_usb: device has been disconnected [ 1428.793308][ T6045] usb 9-1: config 0 interface 94 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1428.803230][ T6045] usb 9-1: config 0 interface 94 has no altsetting 0 [ 1430.005222][ T6045] usb 9-1: string descriptor 0 read error: -71 [ 1430.011531][ T6045] usb 9-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2f.16 [ 1430.020779][ T6045] usb 9-1: New USB device strings: Mfr=1, Product=50, SerialNumber=157 [ 1430.040715][ T6045] usb 9-1: config 0 descriptor?? [ 1430.361342][ T6045] usb 9-1: can't set config #0, error -71 [ 1430.376666][ T6045] usb 9-1: USB disconnect, device number 60 [ 1430.816059][T19226] overlayfs: failed to resolve './file0': -2 [ 1433.238135][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1435.654100][T19274] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.662093][T19274] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1435.670576][T19274] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.678415][T19274] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1437.750935][T19285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.464485][T19285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.797007][T19293] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 1439.718448][T19289] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3481'. [ 1439.730955][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3481'. [ 1440.912258][T18188] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1441.079650][T18188] usb 9-1: Using ep0 maxpacket: 32 [ 1441.089657][T18188] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.108785][T18188] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 1441.119990][T18188] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1441.139661][ T29] audit: type=1326 audit(1734916633.263:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1441.163075][T18188] usb 9-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1441.256595][ T29] audit: type=1326 audit(1734916633.263:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d3e5847df code=0x7ffc0000 [ 1441.279161][ T29] audit: type=1326 audit(1734916633.263:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1441.300972][ T29] audit: type=1326 audit(1734916633.263:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1441.334506][ T29] audit: type=1326 audit(1734916633.263:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1441.437619][T19319] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1441.445600][T19319] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1441.454493][T19319] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1441.462390][T19319] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1442.287702][ T29] audit: type=1326 audit(1734916633.263:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1442.362299][ T29] audit: type=1326 audit(1734916633.263:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1442.393258][ T29] audit: type=1326 audit(1734916633.263:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1442.394092][T19324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.416206][ T29] audit: type=1326 audit(1734916633.263:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1442.446195][ T29] audit: type=1326 audit(1734916633.263:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.1.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d3e585d29 code=0x7ffc0000 [ 1442.448194][T18188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.476170][T19324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.111282][T18188] usb 9-1: config 0 descriptor?? [ 1443.129687][T18188] usb 9-1: can't set config #0, error -71 [ 1443.352830][T19327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1443.392431][T18188] usb 9-1: USB disconnect, device number 61 [ 1444.169620][T19351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.193039][T19351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.361400][T18188] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1444.560401][T18188] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1444.596526][T18188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.639570][ T6045] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1444.749537][T18188] usb 1-1: Product: syz [ 1444.757023][T18188] usb 1-1: Manufacturer: syz [ 1444.779062][T18188] usb 1-1: SerialNumber: syz [ 1444.843800][ T6045] usb 9-1: Using ep0 maxpacket: 16 [ 1444.864066][ T6045] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.916971][ T6045] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.968009][ T6045] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1444.989923][T18188] usb 1-1: config 0 descriptor?? [ 1444.999687][ T6045] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1445.009020][ T6045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.032653][ T6045] usb 9-1: config 0 descriptor?? [ 1445.442801][T19362] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1445.450697][T19362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1445.459644][T19362] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1445.467620][T19362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1445.905495][T18188] mos7840 1-1:0.0: required endpoints missing [ 1445.914062][T18188] usb 1-1: USB disconnect, device number 69 [ 1445.978063][T19363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.016235][T19363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.181911][T19353] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1446.200588][T19353] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1446.238014][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.246141][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.253422][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.275073][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.282369][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.305702][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.313203][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.320592][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.327889][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.335379][ T6045] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1446.345936][ T6045] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0023/input/input76 [ 1446.424298][T19378] netlink: 'syz.0.3504': attribute type 11 has an invalid length. [ 1446.432511][T19378] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1446.531100][ T6045] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1446.549125][T13443] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1447.276972][T13443] usb 10-1: Using ep0 maxpacket: 32 [ 1447.317880][T13443] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.335293][ T6045] usb 9-1: USB disconnect, device number 62 [ 1447.341697][T13443] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 1447.495645][T13443] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1447.509648][T13443] usb 10-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1447.519001][T13443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.333795][T13443] usb 10-1: config 0 descriptor?? [ 1448.370101][T13443] usb 10-1: bad CDC descriptors [ 1449.696056][T10508] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1450.059537][T10508] usb 9-1: Using ep0 maxpacket: 16 [ 1450.066579][T10508] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.077992][T10508] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.157872][ T6045] usb 10-1: USB disconnect, device number 77 [ 1450.316268][T10508] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1450.358818][T10508] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1450.380206][T10508] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.485409][T19411] syz.6.3515 (19411): drop_caches: 2 [ 1450.500713][T10508] usb 9-1: config 0 descriptor?? [ 1450.503214][T19411] syz.6.3515 (19411): drop_caches: 2 [ 1450.518443][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1450.518489][ T29] audit: type=1400 audit(1734916642.009:124): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=19410 comm="syz.1.3514" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 1451.251892][T19423] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1451.260081][T19423] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 1451.269124][T19423] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1451.277056][T19423] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 1451.400706][T10508] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 1451.732133][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.763036][T19400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.789236][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.797012][T19400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.804948][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.812252][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.821621][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.831726][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.842703][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.850342][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.859807][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.867457][T10508] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1451.880490][T10508] microsoft 0003:045E:07DA.0024: No inputs registered, leaving [ 1451.898902][T10508] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1451.910500][T10508] microsoft 0003:045E:07DA.0024: no inputs found [ 1451.916976][T10508] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 1451.942337][T10508] usb 9-1: USB disconnect, device number 63 [ 1452.432839][T10508] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1452.460348][T19431] netlink: 'syz.0.3518': attribute type 11 has an invalid length. [ 1452.468742][T19431] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3518'. [ 1452.689445][T10508] usb 10-1: Using ep0 maxpacket: 16 [ 1452.713683][T10508] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.737612][T10508] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.750083][T10508] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1452.779504][T10508] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1452.808870][T10508] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.840895][T10508] usb 10-1: config 0 descriptor?? [ 1453.351840][T19434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.363056][T19434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.467800][T19434] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3521'. [ 1453.512897][T19434] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3521'. [ 1453.540287][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.569363][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.583232][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.619574][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.646558][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.668171][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.683997][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.693431][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.700796][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.708253][T10508] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1453.725200][T10508] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0025/input/input78 [ 1453.766871][T19445] FAULT_INJECTION: forcing a failure. [ 1453.766871][T19445] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.766880][T10508] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1453.766941][T19445] CPU: 1 UID: 0 PID: 19445 Comm: syz.0.3523 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1453.792733][T10508] usb 10-1: USB disconnect, device number 78 [ 1453.802164][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1453.802186][T19445] Call Trace: [ 1453.802195][T19445] [ 1453.802205][T19445] dump_stack_lvl+0x241/0x360 [ 1453.802235][T19445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.802257][T19445] ? __pfx__printk+0x10/0x10 [ 1453.802287][T19445] should_fail_ex+0x3b0/0x4e0 [ 1453.802309][T19445] should_failslab+0xac/0x100 [ 1453.802335][T19445] __kmalloc_noprof+0xdd/0x4c0 [ 1453.802354][T19445] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1453.802382][T19445] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1453.802416][T19445] tomoyo_path_number_perm+0x236/0x860 [ 1453.802436][T19445] ? __lock_acquire+0x1397/0x2100 [ 1453.802459][T19445] ? tomoyo_path_number_perm+0x206/0x860 [ 1453.802482][T19445] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1453.802533][T19445] ? __fget_files+0x2a/0x410 [ 1453.892297][T19445] ? __fget_files+0x2a/0x410 [ 1453.896932][T19445] security_file_ioctl+0xc6/0x2a0 [ 1453.902018][T19445] __se_sys_ioctl+0x46/0x170 [ 1453.906656][T19445] do_syscall_64+0xf3/0x230 [ 1453.911200][T19445] ? clear_bhb_loop+0x35/0x90 [ 1453.915912][T19445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.921843][T19445] RIP: 0033:0x7f827e385d29 [ 1453.926281][T19445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.945925][T19445] RSP: 002b:00007f827f1f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.954388][T19445] RAX: ffffffffffffffda RBX: 00007f827e576080 RCX: 00007f827e385d29 [ 1453.962390][T19445] RDX: 0000000020000000 RSI: 0000000000008b26 RDI: 0000000000000004 [ 1453.970410][T19445] RBP: 00007f827f1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.978416][T19445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.986425][T19445] R13: 0000000000000000 R14: 00007f827e576080 R15: 00007fffab535808 [ 1453.994444][T19445] [ 1454.418251][T19445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1454.578435][T19452] sp0: Synchronizing with TNC [ 1455.878185][ T29] audit: type=1400 audit(1734916646.976:125): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=19465 comm="syz.6.3529" saddr=172.30.0.7 daddr=172.20.20.170 netif=wpan0 [ 1456.182432][T19478] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1456.190507][T19478] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1456.199280][T19478] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1456.207151][T19478] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1456.848015][T10508] usb 9-1: new low-speed USB device number 64 using dummy_hcd [ 1457.014271][T10508] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1457.025756][T10508] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.063448][T10508] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1457.085563][T10508] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.106615][T19486] netlink: 'syz.9.3533': attribute type 11 has an invalid length. [ 1457.106898][T10508] usb 9-1: config 0 descriptor?? [ 1457.114483][T19486] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3533'. [ 1457.767400][ T29] audit: type=1400 audit(1734916648.529:126): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=19488 comm="syz.1.3535" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 1457.939609][T10508] usbhid 9-1:0.0: can't add hid device: -71 [ 1457.945670][T10508] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1458.006766][T10508] usb 9-1: USB disconnect, device number 64 [ 1459.841898][T16851] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1459.865219][T19517] netlink: 428 bytes leftover after parsing attributes in process `syz.8.3542'. [ 1459.876678][T19517] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3542'. [ 1460.044530][T16851] usb 10-1: Using ep0 maxpacket: 16 [ 1460.051232][T16851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.076379][T16851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.237738][T16851] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1460.250858][T16851] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1460.260349][T16851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.301877][T16851] usb 10-1: config 0 descriptor?? [ 1460.646029][T18188] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1460.701234][T19529] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1460.746474][T19529] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1460.814439][T18188] usb 1-1: Using ep0 maxpacket: 16 [ 1460.821038][T18188] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1460.867410][T19529] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1460.906366][T18188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1460.924374][T19529] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1460.934244][T19503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.943476][T19503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.944611][T18188] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1460.982203][T19503] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3538'. [ 1460.993634][T18188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.040553][T19503] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3538'. [ 1461.058136][T18188] usb 1-1: Product: syz [ 1461.084510][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.098775][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.114296][T18188] usb 1-1: Manufacturer: syz [ 1461.125257][T18188] usb 1-1: SerialNumber: syz [ 1461.145599][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.167248][T18188] usb 1-1: config 0 descriptor?? [ 1461.175115][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.197658][T18188] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1461.219319][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.237509][T18188] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1461.245409][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.268911][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.290176][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.311308][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.330130][T16851] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1461.355937][T16851] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0026/input/input79 [ 1461.409787][T16851] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1461.424867][T16851] usb 10-1: USB disconnect, device number 79 [ 1462.693886][T18188] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1462.739624][T18188] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1462.845517][T16851] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1462.884545][T19548] netlink: 'syz.1.3548': attribute type 11 has an invalid length. [ 1462.947747][T19548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1463.019353][T16851] usb 9-1: Using ep0 maxpacket: 16 [ 1463.032268][T16851] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1463.054394][T16851] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1463.080876][T16851] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1463.155829][T16851] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1463.178435][T16851] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1463.193150][T16851] usb 9-1: config 0 has no interface number 0 [ 1463.199440][T16851] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1463.210680][T16851] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1463.220653][T16851] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1463.230887][T16851] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1463.244262][T16851] usb 9-1: config 0 interface 125 has no altsetting 0 [ 1463.251130][T16851] usb 9-1: config 0 interface 125 has no altsetting 2 [ 1463.294645][ T5872] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1463.538021][ T5872] usb 10-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1463.562274][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.628504][T18188] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1463.634791][ T5872] usb 10-1: Product: syz [ 1463.636950][T16851] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1463.660072][T16851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.672603][T16851] usb 9-1: Product: syz [ 1463.678677][ T5872] usb 10-1: Manufacturer: syz [ 1463.680295][T16851] usb 9-1: Manufacturer: syz [ 1463.690037][T16851] usb 9-1: SerialNumber: syz [ 1463.698522][ T5872] usb 10-1: SerialNumber: syz [ 1463.759520][ T5872] usb 10-1: config 0 descriptor?? [ 1463.802420][ T5872] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 1463.829133][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1463.840755][T16851] usb 9-1: config 0 descriptor?? [ 1463.850713][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1463.859014][T16851] usb 9-1: selecting invalid altsetting 2 [ 1463.872235][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1463.979051][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1464.010870][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1464.024793][ T5872] usb 10-1: USB disconnect, device number 80 [ 1464.071262][T19543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.114617][T19543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.146968][ C0] usb 9-1: async_complete: urb error -71 [ 1464.152764][ C0] usb 9-1: async_complete: urb error -71 [ 1464.158498][ C0] usb 9-1: async_complete: urb error -71 [ 1464.164234][ C0] usb 9-1: async_complete: urb error -71 [ 1464.185802][T16851] get_1284_register: usb error -71 [ 1464.191086][T16851] uss720 9-1:0.125: probe with driver uss720 failed with error -71 [ 1464.215420][T16851] usb 9-1: USB disconnect, device number 65 [ 1464.422907][T19562] binder: 19559:19562 ioctl c0306201 0 returned -14 [ 1465.016706][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1465.024690][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1465.032789][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1465.057788][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1465.121596][T18188] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1465.164734][T18188] usb 1-1: USB disconnect, device number 70 [ 1466.995899][T19584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.015068][T19584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.061223][T19584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.153242][T19584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.222349][T18188] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1467.242411][T19584] syz.1.3559: attempt to access beyond end of device [ 1467.242411][T19584] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1467.263745][T19584] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 1467.286753][T19586] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1467.310595][T19586] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 1467.334519][T19586] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1467.355847][T19586] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 1467.417659][T18188] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 1467.441787][T18188] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1467.459486][T18188] usb 1-1: config 0 has no interface number 1 [ 1467.472593][T18188] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1467.537338][T18188] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 1467.554309][T18188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.571718][T18188] usb 1-1: Product: syz [ 1467.582977][T18188] usb 1-1: Manufacturer: syz [ 1467.594555][T18188] usb 1-1: SerialNumber: syz [ 1467.608658][T19592] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3561'. [ 1467.611872][T18188] usb 1-1: config 0 descriptor?? [ 1467.753875][T18188] viperboard 1-1:0.0: version 0.00 found at bus 001 address 071 [ 1467.769594][T18188] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1467.786292][T18188] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1467.813341][T18188] viperboard 1-1:0.15: version 0.00 found at bus 001 address 071 [ 1467.943995][T18188] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 1468.109862][T18188] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1468.469453][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.717273][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.984988][T19616] lo speed is unknown, defaulting to 1000 [ 1471.696393][T19623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.160505][ T6045] usb 1-1: USB disconnect, device number 71 [ 1475.186874][T19648] netlink: 'syz.1.3565': attribute type 11 has an invalid length. [ 1475.270341][T19648] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1477.393542][T19668] FAULT_INJECTION: forcing a failure. [ 1477.393542][T19668] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.476713][T19668] CPU: 0 UID: 0 PID: 19668 Comm: syz.8.3577 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1477.487558][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1477.497651][T19668] Call Trace: [ 1477.500962][T19668] [ 1477.503922][T19668] dump_stack_lvl+0x241/0x360 [ 1477.508645][T19668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1477.513876][T19668] ? __pfx__printk+0x10/0x10 [ 1477.518465][T19668] ? __kmalloc_noprof+0xb5/0x4c0 [ 1477.523398][T19668] ? __pfx___might_resched+0x10/0x10 [ 1477.528706][T19668] should_fail_ex+0x3b0/0x4e0 [ 1477.533413][T19668] should_failslab+0xac/0x100 [ 1477.538126][T19668] __kmalloc_noprof+0xdd/0x4c0 [ 1477.542917][T19668] ? snd_pcm_hw_refine+0x965/0x1b40 [ 1477.548150][T19668] snd_pcm_hw_refine+0x965/0x1b40 [ 1477.553216][T19668] ? snd_pcm_hw_param_near+0x59d/0x740 [ 1477.558702][T19668] ? __se_sys_ioctl+0xf5/0x170 [ 1477.563489][T19668] ? do_syscall_64+0xf3/0x230 [ 1477.568194][T19668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.574289][T19668] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1477.579790][T19668] ? mark_lock+0x9a/0x360 [ 1477.584163][T19668] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1477.590534][T19668] ? kasan_quarantine_put+0xdc/0x230 [ 1477.595859][T19668] snd_pcm_hw_param_first+0x406/0x6f0 [ 1477.601269][T19668] snd_pcm_hw_param_near+0x62d/0x740 [ 1477.606595][T19668] ? __pfx_snd_pcm_hw_param_near+0x10/0x10 [ 1477.612442][T19668] snd_pcm_oss_change_params_locked+0x1ff5/0x3d60 [ 1477.618889][T19668] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1477.624840][T19668] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1477.631630][T19668] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1477.637306][T19668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1477.643338][T19668] snd_pcm_oss_get_active_substream+0x201/0x280 [ 1477.649616][T19668] snd_pcm_oss_set_channels+0x23b/0x5c0 [ 1477.655197][T19668] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 1477.661297][T19668] ? __might_fault+0xaa/0x120 [ 1477.666006][T19668] ? __might_fault+0xc6/0x120 [ 1477.670718][T19668] snd_pcm_oss_ioctl+0xc9d/0xff0 [ 1477.675683][T19668] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1477.681174][T19668] ? __fget_files+0x2a/0x410 [ 1477.685792][T19668] ? __fget_files+0x2a/0x410 [ 1477.690415][T19668] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1477.695917][T19668] __se_sys_ioctl+0xf5/0x170 [ 1477.700533][T19668] do_syscall_64+0xf3/0x230 [ 1477.705086][T19668] ? clear_bhb_loop+0x35/0x90 [ 1477.709792][T19668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.715717][T19668] RIP: 0033:0x7fc166785d29 [ 1477.720162][T19668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.739801][T19668] RSP: 002b:00007fc167637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.748253][T19668] RAX: ffffffffffffffda RBX: 00007fc166975fa0 RCX: 00007fc166785d29 [ 1477.756260][T19668] RDX: 0000000020000080 RSI: 00000000c0045006 RDI: 0000000000000003 [ 1477.764267][T19668] RBP: 00007fc167637090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.772279][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1477.780282][T19668] R13: 0000000000000000 R14: 00007fc166975fa0 R15: 00007ffe69470978 [ 1477.788305][T19668] [ 1477.822353][ T29] audit: type=1400 audit(1734916667.574:127): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=19671 comm="syz.6.3578" saddr=172.30.0.7 daddr=172.20.20.170 netif=wpan0 [ 1478.765587][T19682] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.3580'. [ 1478.961627][T19684] netlink: 428 bytes leftover after parsing attributes in process `syz.6.3580'. [ 1478.997279][T19684] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3580'. [ 1479.099546][T19680] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1479.107746][T19680] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 1479.116237][T19680] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1479.148847][T19680] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 1479.279105][T19688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.325592][T19688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.394820][T19690] syz.9.3574: attempt to access beyond end of device [ 1479.394820][T19690] loop9: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1479.449668][T19688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.470879][T19690] hfs: can't find a HFS filesystem on dev loop9 [ 1479.497390][T19688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.124384][T19697] overlayfs: missing 'lowerdir' [ 1484.312245][ T6045] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1484.486940][ T6045] usb 1-1: Using ep0 maxpacket: 32 [ 1484.510552][T19725] netlink: 'syz.1.3591': attribute type 11 has an invalid length. [ 1484.518518][T19725] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1484.591448][ T6045] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1484.874316][ T6045] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.40 [ 1485.010237][ T6045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.060572][ T6045] usb 1-1: Product: 㹁½䳄䵝Ϻ⬪꧌ກ띵ꋋᩞᜅ婎଼뿳鸉衵軁跎袍ά⦧ⱕ⦆껂韬ᯐズ⢘ꗃ賖點༨皌驷煑縼켃죘瞠睑䓻ꃯᗂ౽큵䟛큖䭅麣顫ﶩ蔴䬙ﺰ㤣뛙䆎霆鈽進恐䠛脑䟑⛷씕嗀昸瓨ᇩ瑖녘ᬵ헫 [ 1485.087445][ T6045] usb 1-1: Manufacturer: ᐊ [ 1485.092093][ T6045] usb 1-1: SerialNumber: syz [ 1485.777509][T19735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.881635][T19735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.340635][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3594'. [ 1486.371668][T19737] netlink: 'syz.9.3594': attribute type 1 has an invalid length. [ 1486.382126][T19737] netlink: 'syz.9.3594': attribute type 2 has an invalid length. [ 1486.390149][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3594'. [ 1486.551159][ T6045] usbhid 1-1:1.0: can't add hid device: -71 [ 1486.578042][ T6045] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1486.659647][ T6045] usb 1-1: USB disconnect, device number 72 [ 1486.990962][T19744] overlayfs: missing 'lowerdir' [ 1486.996049][T19743] FAULT_INJECTION: forcing a failure. [ 1486.996049][T19743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.043800][T19743] CPU: 1 UID: 0 PID: 19743 Comm: syz.9.3597 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1487.054626][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1487.064688][T19743] Call Trace: [ 1487.067968][T19743] [ 1487.070919][T19743] dump_stack_lvl+0x241/0x360 [ 1487.075607][T19743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1487.080811][T19743] ? __pfx__printk+0x10/0x10 [ 1487.085405][T19743] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1487.091391][T19743] ? __pfx_lock_release+0x10/0x10 [ 1487.096423][T19743] ? _raw_spin_lock_irq+0xdf/0x120 [ 1487.101546][T19743] should_fail_ex+0x3b0/0x4e0 [ 1487.106231][T19743] _copy_from_user+0x2f/0xc0 [ 1487.110830][T19743] restore_altstack+0x99/0x150 [ 1487.115599][T19743] ? __pfx_restore_altstack+0x10/0x10 [ 1487.120979][T19743] ? __task_pid_nr_ns+0x28/0x450 [ 1487.125943][T19743] __do_sys_rt_sigreturn+0x194/0x280 [ 1487.131254][T19743] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1487.137074][T19743] ? do_syscall_64+0x100/0x230 [ 1487.141852][T19743] ? do_syscall_64+0xb6/0x230 [ 1487.146543][T19743] do_syscall_64+0xf3/0x230 [ 1487.151053][T19743] ? clear_bhb_loop+0x35/0x90 [ 1487.155733][T19743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.161637][T19743] RIP: 0033:0x7f77c0721f29 [ 1487.166054][T19743] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1487.185666][T19743] RSP: 002b:00007f77c1608a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1487.194087][T19743] RAX: ffffffffffffffda RBX: 00007f77c0975fa0 RCX: 00007f77c0721f29 [ 1487.202063][T19743] RDX: 00007f77c1608a80 RSI: 00007f77c1608bb0 RDI: 0000000000000021 [ 1487.210037][T19743] RBP: 00007f77c1609090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.218008][T19743] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1487.226003][T19743] R13: 0000000000000000 R14: 00007f77c0975fa0 R15: 00007fffa61f8358 [ 1487.234000][T19743] [ 1488.690689][T19760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1488.701129][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1490.192982][T19771] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3604'. [ 1490.653169][T19779] netlink: 'syz.8.3603': attribute type 11 has an invalid length. [ 1490.661221][T19779] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3603'. [ 1492.355140][ T29] audit: type=1400 audit(1734916681.156:128): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=19796 comm="syz.8.3609" saddr=172.30.0.9 daddr=172.20.20.170 netif=wpan0 [ 1492.801338][T19797] openvswitch: netlink: Flow actions attr not present in new flow. [ 1492.920338][T19801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.947242][T19801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.207415][T19805] overlayfs: missing 'workdir' [ 1493.237335][T19810] erofs (device erofs): cannot find valid erofs superblock [ 1493.437545][T19815] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3617'. [ 1493.447023][T19815] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3617'. [ 1493.833241][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.843849][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.859027][T18188] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1493.933952][T19831] netlink: 'syz.9.3619': attribute type 11 has an invalid length. [ 1493.942198][T19831] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3619'. [ 1494.028598][T18188] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.059669][T18188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1494.087996][T18188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.110923][T18188] usb 1-1: Product: syz [ 1494.118715][T18188] usb 1-1: Manufacturer: syz [ 1494.126775][T18188] usb 1-1: SerialNumber: syz [ 1495.910686][T18188] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1495.928522][T18188] cdc_ncm 1-1:1.0: bind() failure [ 1496.055819][T18188] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1496.062785][T18188] cdc_ncm 1-1:1.1: bind() failure [ 1496.201976][T19832] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1496.297936][T19832] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1496.330654][T19832] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1496.368180][T19832] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1496.528328][T19847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1497.623330][T18188] usb 1-1: USB disconnect, device number 73 [ 1497.788996][T19857] overlayfs: missing 'workdir' [ 1498.008495][T19865] ufs: You didn't specify the type of your ufs filesystem [ 1498.008495][T19865] [ 1498.008495][T19865] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1498.008495][T19865] [ 1498.008495][T19865] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1498.077339][T19865] ufs: ufstype=old is supported read-only [ 1498.134048][T19869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3631'. [ 1498.158539][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 1498.188667][ T6045] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1498.270216][T19865] ufs: ufs_fill_super(): bad magic number [ 1498.388558][ T6045] usb 10-1: Using ep0 maxpacket: 16 [ 1498.542982][ T6045] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.562723][ T6045] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.572861][ T6045] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1498.586200][ T6045] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1498.593102][ T6045] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1498.602413][ T6045] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.630923][ T6045] usb 10-1: config 0 descriptor?? [ 1498.770412][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1500.171241][ T6045] hid (null): bogus close delimiter [ 1500.176699][ T6045] hid (null): unknown global tag 0xe [ 1500.198277][ T6045] input: HID 0458:5010 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5010.0027/input/input80 [ 1503.529836][T19907] loop2: detected capacity change from 0 to 7 [ 1503.609281][ T6045] kye 0003:0458:5010.0027: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.9-1/input0 [ 1503.652353][T19907] Dev loop2: unable to read RDB block 7 [ 1503.798140][T19907] loop2: unable to read partition table [ 1503.811433][ T6045] usb 10-1: USB disconnect, device number 81 [ 1503.834272][T19907] loop2: partition table beyond EOD, truncated [ 1503.845193][T19911] overlayfs: missing 'workdir' [ 1503.866158][T19907] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1504.538205][T19930] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1504.546771][T19930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1504.556161][T19930] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1504.564068][T19930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1505.609888][T19932] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1506.719769][ T5927] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1507.027817][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 1507.088979][ T5927] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.100560][ T5927] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.117117][ T5927] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1507.140437][ T5927] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1507.147681][ T5927] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1507.167570][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.207517][ T5927] usb 9-1: config 0 descriptor?? [ 1508.610382][T19949] syz.0.3652 (19949): drop_caches: 2 [ 1508.616915][T19949] syz.0.3652 (19949): drop_caches: 2 [ 1509.156533][ T5927] hid (null): bogus close delimiter [ 1509.174950][ T5927] hid (null): unknown global tag 0xe [ 1509.203970][T19957] 9pnet_fd: Insufficient options for proto=fd [ 1509.307148][ T5927] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5010.0028/input/input81 [ 1509.334099][ T5927] kye 0003:0458:5010.0028: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 1509.752885][ T9] usb 9-1: USB disconnect, device number 66 [ 1510.034571][T18188] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1510.425249][T18188] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1510.505026][T18188] usb 1-1: config 0 interface 0 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1510.834722][T19977] FAULT_INJECTION: forcing a failure. [ 1510.834722][T19977] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.853669][T18188] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1510.954857][T18188] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1510.964231][T18188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.989412][T19977] CPU: 0 UID: 0 PID: 19977 Comm: syz.6.3663 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1511.000253][T19977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1511.010339][T19977] Call Trace: [ 1511.013637][T19977] [ 1511.016588][T19977] dump_stack_lvl+0x241/0x360 [ 1511.021298][T19977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1511.026524][T19977] ? __pfx__printk+0x10/0x10 [ 1511.031138][T19977] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1511.036710][T19977] ? __pfx___might_resched+0x10/0x10 [ 1511.042037][T19977] should_fail_ex+0x3b0/0x4e0 [ 1511.046741][T19977] should_failslab+0xac/0x100 [ 1511.051465][T19977] ? security_file_alloc+0x32/0x310 [ 1511.056686][T19977] kmem_cache_alloc_noprof+0x70/0x380 [ 1511.062107][T19977] security_file_alloc+0x32/0x310 [ 1511.067160][T19977] init_file+0x91/0x280 [ 1511.071338][T19977] alloc_empty_file+0xb8/0x1d0 [ 1511.076120][T19977] alloc_file_clone+0x58/0xe0 [ 1511.080818][T19977] do_shmat+0x6f7/0xc70 [ 1511.085010][T19977] ? do_shmat+0x2b5/0xc70 [ 1511.089365][T19977] ? __pfx_do_shmat+0x10/0x10 [ 1511.094075][T19977] __x64_sys_shmat+0x106/0x190 [ 1511.098866][T19977] ? __pfx___x64_sys_shmat+0x10/0x10 [ 1511.104175][T19977] ? __secure_computing+0x125/0x370 [ 1511.109415][T19977] do_syscall_64+0xf3/0x230 [ 1511.113948][T19977] ? clear_bhb_loop+0x35/0x90 [ 1511.118656][T19977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.124585][T19977] RIP: 0033:0x7fb498b85d29 [ 1511.129031][T19977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1511.148668][T19977] RSP: 002b:00007fb499a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1511.157118][T19977] RAX: ffffffffffffffda RBX: 00007fb498d75fa0 RCX: 00007fb498b85d29 [ 1511.165106][T19977] RDX: ffffffffffffdfff RSI: 0000000020000000 RDI: 0000000000000000 [ 1511.173082][T19977] RBP: 00007fb499a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1511.181055][T19977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.189042][T19977] R13: 0000000000000000 R14: 00007fb498d75fa0 R15: 00007ffd4baa9ab8 [ 1511.197048][T19977] [ 1511.247329][T18188] usb 1-1: config 0 descriptor?? [ 1511.254072][T19969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1511.263222][T19969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1511.321549][T19984] sp0: Synchronizing with TNC [ 1511.339657][T19984] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3665'. [ 1511.530685][ T5927] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1511.723352][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 1511.782039][ T5927] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1511.831666][ T5927] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1511.993967][ T5927] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1512.005686][ T5927] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1512.017206][ T5927] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1512.043397][ T5927] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1512.052744][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.060996][ T5927] usb 9-1: Product: syz [ 1512.065373][ T5927] usb 9-1: Manufacturer: syz [ 1512.070114][ T5927] usb 9-1: SerialNumber: syz [ 1512.115944][ T5927] usb 9-1: config 0 descriptor?? [ 1512.180808][T19995] 9pnet_fd: Insufficient options for proto=fd [ 1512.205444][T19993] overlayfs: overlapping lowerdir path [ 1512.438330][ T5927] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 1512.454864][ T5927] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 1512.597515][T20002] syz.9.3669 (20002): drop_caches: 2 [ 1512.613577][T20002] syz.9.3669 (20002): drop_caches: 2 [ 1513.305558][T13443] usb 9-1: USB disconnect, device number 67 [ 1513.345952][T18188] usb 1-1: string descriptor 0 read error: -71 [ 1513.361620][T18188] usbhid 1-1:0.0: can't add hid device: -71 [ 1513.367806][T18188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1513.411356][T18188] usb 1-1: USB disconnect, device number 74 [ 1513.515355][ T29] audit: type=1400 audit(1734916700.968:129): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=20012 comm="syz.1.3675" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 1515.231551][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3678'. [ 1515.490840][T20037] sp0: Synchronizing with TNC [ 1515.741090][T20037] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3679'. [ 1516.677698][ T5824] Bluetooth: hci6: sending frame failed (-49) [ 1516.686642][T15140] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1517.619315][T20062] syz.9.3685 (20062): drop_caches: 2 [ 1517.632480][T20062] syz.9.3685 (20062): drop_caches: 2 [ 1520.219720][T20100] syz.0.3697 (20100): drop_caches: 2 [ 1520.272061][T20100] syz.0.3697 (20100): drop_caches: 2 [ 1520.405793][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3696'. [ 1521.434494][T20109] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1521.442552][T20109] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 1521.450934][T20109] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1521.458874][T20109] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 1521.600856][T20111] affs: No valid root block on device nullb0 [ 1522.153560][T20114] syz.0.3700 (20114): drop_caches: 2 [ 1522.166129][T20114] syz.0.3700 (20114): drop_caches: 2 [ 1525.985279][T20137] tipc: Enabling of bearer rejected, failed to enable media [ 1526.251524][T18188] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1526.651348][T18188] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1526.662540][T18188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.673917][T20144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.682704][T18188] usb 9-1: Product: syz [ 1526.687063][T18188] usb 9-1: Manufacturer: syz [ 1526.692656][T20144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.705743][T18188] usb 9-1: SerialNumber: syz [ 1526.713330][T18188] usb 9-1: config 0 descriptor?? [ 1526.739687][T20146] syz.0.3706 (20146): drop_caches: 2 [ 1526.759296][T20142] syz_tun: entered promiscuous mode [ 1526.771151][T20146] syz.0.3706 (20146): drop_caches: 2 [ 1526.819020][T20142] syz_tun: left promiscuous mode [ 1527.000166][T18188] mos7840 9-1:0.0: required endpoints missing [ 1527.017518][T18188] usb 9-1: USB disconnect, device number 68 [ 1527.037571][ T29] audit: type=1400 audit(1734916713.614:130): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=20154 comm="syz.1.3709" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 1528.585754][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3712'. [ 1528.774835][T20166] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3711'. [ 1528.820535][T20170] siw: device registration error -23 [ 1530.768187][T20182] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3718'. [ 1531.538924][T20188] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1532.637845][ T5927] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1532.731689][T20207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1532.964969][ T5927] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1533.063230][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.181802][ T5927] usb 1-1: config 0 descriptor?? [ 1533.684507][ T5927] [drm:udl_init] *ERROR* Selecting channel failed [ 1533.910470][ T5927] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1533.920474][ T5927] [drm] Initialized udl on minor 2 [ 1533.928053][ T5927] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1533.940712][ T5927] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1533.949745][T13443] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1533.957715][T13443] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1533.965952][ T5927] usb 1-1: USB disconnect, device number 75 [ 1537.010838][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1537.022661][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1537.032114][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1537.044668][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1537.054453][ T5824] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1537.064280][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1537.304137][T20259] syz.0.3738 (20259): drop_caches: 2 [ 1537.333578][T20259] syz.0.3738 (20259): drop_caches: 2 [ 1537.821071][T15140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1537.877185][T15140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1537.887970][T15140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1537.896118][T15140] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1537.903952][T15140] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1538.007937][T15140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1538.050483][T20249] lo speed is unknown, defaulting to 1000 [ 1539.178177][T20249] chnl_net:caif_netlink_parms(): no params data found [ 1540.016014][T20282] FAULT_INJECTION: forcing a failure. [ 1540.016014][T20282] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.029235][T20282] CPU: 1 UID: 0 PID: 20282 Comm: syz.6.3745 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1540.040043][T20282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1540.050138][T20282] Call Trace: [ 1540.053440][T20282] [ 1540.056390][T20282] dump_stack_lvl+0x241/0x360 [ 1540.061099][T20282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1540.066322][T20282] ? __pfx__printk+0x10/0x10 [ 1540.070936][T20282] ? ima_get_action+0x75/0xb0 [ 1540.075647][T20282] should_fail_ex+0x3b0/0x4e0 [ 1540.080347][T20282] should_failslab+0xac/0x100 [ 1540.085058][T20282] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1540.090884][T20282] ? __alloc_skb+0x1c3/0x440 [ 1540.095496][T20282] __alloc_skb+0x1c3/0x440 [ 1540.099938][T20282] ? __lock_acquire+0x1397/0x2100 [ 1540.104985][T20282] ? __pfx___alloc_skb+0x10/0x10 [ 1540.109958][T20282] ? sctp_tsnmap_num_gabs+0x81/0x400 [ 1540.115292][T20282] _sctp_make_chunk+0x58/0x460 [ 1540.120107][T20282] sctp_make_sack+0x17a/0xdf0 [ 1540.124833][T20282] ? __pfx_lock_acquire+0x10/0x10 [ 1540.129898][T20282] ? sctp_packet_config+0x5b2/0xdb0 [ 1540.135153][T20282] ? __pfx_sctp_make_sack+0x10/0x10 [ 1540.140408][T20282] ? sctp_packet_config+0xa33/0xdb0 [ 1540.145645][T20282] sctp_packet_append_chunk+0x7de/0x1010 [ 1540.151336][T20282] sctp_packet_transmit_chunk+0x35/0x1d0 [ 1540.157015][T20282] sctp_outq_flush+0x1c6b/0x3e20 [ 1540.162020][T20282] ? __pfx_validate_chain+0x10/0x10 [ 1540.167261][T20282] ? __pfx_sctp_outq_flush+0x10/0x10 [ 1540.172589][T20282] ? sctp_outq_is_empty+0x47/0xf0 [ 1540.177659][T20282] ? sctp_outq_uncork+0x65/0xb0 [ 1540.182550][T20282] sctp_do_sm+0x4381/0x60c0 [ 1540.187111][T20282] ? __pfx_sctp_do_sm+0x10/0x10 [ 1540.192034][T20282] ? __local_bh_enable_ip+0x168/0x200 [ 1540.197450][T20282] ? lockdep_hardirqs_on+0x99/0x150 [ 1540.203084][T20282] ? trace_inet_sock_set_state+0x90/0x230 [ 1540.208848][T20282] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 1540.214166][T20282] ? __pfx_sctp_shutdown+0x10/0x10 [ 1540.219307][T20282] inet_shutdown+0x1fd/0x390 [ 1540.223923][T20282] __x64_sys_shutdown+0x13f/0x1a0 [ 1540.228992][T20282] do_syscall_64+0xf3/0x230 [ 1540.233527][T20282] ? clear_bhb_loop+0x35/0x90 [ 1540.238228][T20282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.244160][T20282] RIP: 0033:0x7fb498b85d29 [ 1540.248608][T20282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.268258][T20282] RSP: 002b:00007fb499a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 1540.276713][T20282] RAX: ffffffffffffffda RBX: 00007fb498d75fa0 RCX: 00007fb498b85d29 [ 1540.284724][T20282] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1540.292731][T20282] RBP: 00007fb499a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.300740][T20282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.308743][T20282] R13: 0000000000000000 R14: 00007fb498d75fa0 R15: 00007ffd4baa9ab8 [ 1540.316770][T20282] [ 1540.437970][T15140] Bluetooth: hci6: command tx timeout [ 1540.525951][T20249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.533211][T20249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.544992][T20249] bridge_slave_0: entered allmulticast mode [ 1540.573951][T20249] bridge_slave_0: entered promiscuous mode [ 1540.619336][T20249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.661766][T20249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.670292][T20249] bridge_slave_1: entered allmulticast mode [ 1540.677460][T20249] bridge_slave_1: entered promiscuous mode [ 1541.722040][T20249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.933626][T20249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.168130][T20249] team0: Port device team_slave_0 added [ 1542.178681][T20249] team0: Port device team_slave_1 added [ 1542.230158][T10508] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1542.470619][T20249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.477625][T20249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.521322][T20249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.534529][T10508] usb 1-1: Using ep0 maxpacket: 8 [ 1542.559227][T10508] usb 1-1: config 5 has an invalid interface number: 52 but max is 1 [ 1542.567633][T10508] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.588619][T20249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.595618][T20249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.621843][T15140] Bluetooth: hci6: command tx timeout [ 1542.640212][T10508] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1542.649138][T10508] usb 1-1: config 5 has no interface number 0 [ 1542.767208][T20249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.874822][T10508] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 1542.884426][T10508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.893265][T10508] usb 1-1: Product: syz [ 1542.900099][T10508] usb 1-1: Manufacturer: syz [ 1542.905107][T10508] usb 1-1: SerialNumber: syz [ 1544.702773][T20249] hsr_slave_0: entered promiscuous mode [ 1544.722335][T20249] hsr_slave_1: entered promiscuous mode [ 1544.731462][T10508] cytherm 1-1:5.52: Cypress thermometer device now attached [ 1544.751732][T10508] usb 1-1: USB disconnect, device number 76 [ 1544.758446][T10508] cytherm 1-1:5.52: Cypress thermometer now disconnected [ 1544.771249][T20249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1544.799933][T20249] Cannot create hsr debugfs directory [ 1544.941740][T15140] Bluetooth: hci6: command tx timeout [ 1544.977078][T20336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.988987][T20336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.004529][T20336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.013104][T20336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.108148][T20338] overlayfs: overlapping lowerdir path [ 1547.155098][T15140] Bluetooth: hci6: command tx timeout [ 1547.858541][T20351] overlay: ./file0 is not a directory [ 1548.473766][T20249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.691627][ T5872] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1548.728896][T20249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.088380][ T5872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.111975][ T5872] usb 9-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1549.140454][ T5872] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1549.147374][ T5872] usb 9-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 1549.158592][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.174308][ T5872] usb 9-1: config 0 descriptor?? [ 1549.190714][ T5872] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1549.199942][T20249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.337129][T16851] usb 9-1: USB disconnect, device number 69 [ 1549.352179][T20249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.916757][T20249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1550.969294][T20249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1551.110522][T20249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1551.488148][ T5872] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 1551.519417][T20249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1551.704632][ T5872] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1551.758306][ T5872] usb 9-1: not running at top speed; connect to a high speed hub [ 1551.784320][T20398] netlink: 344 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1551.821134][ T5872] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1551.931161][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1551.963282][ T5872] usb 9-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1552.006172][ T5872] usb 9-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=a0.fc [ 1552.026703][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.056355][ T5872] usb 9-1: Product: syz [ 1552.069862][ T5872] usb 9-1: Manufacturer: syz [ 1552.074535][ T5872] usb 9-1: SerialNumber: syz [ 1552.114329][ T5872] usb 9-1: config 0 descriptor?? [ 1552.359531][T20249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.416407][T20249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.514434][T20415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.524329][T20415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.680911][T20417] netlink: 'syz.1.3778': attribute type 11 has an invalid length. [ 1552.688923][T20417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1552.890445][T17840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.897662][T17840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.045460][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3773'. [ 1553.087465][T20249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1553.113749][T20249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1553.207496][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.215437][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.869254][ T29] audit: type=1400 audit(1734916738.720:131): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=20432 comm="syz.0.3783" saddr=172.30.0.1 daddr=172.20.20.170 netif=wpan0 [ 1553.902031][T20249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.655896][ T5872] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1554.670493][T20249] veth0_vlan: entered promiscuous mode [ 1554.704635][ T5872] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1554.719309][T20249] veth1_vlan: entered promiscuous mode [ 1554.753415][ T5872] usb 9-1: USB disconnect, device number 70 [ 1555.141099][T20249] veth0_macvtap: entered promiscuous mode [ 1555.260099][ T5872] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1555.555924][T20249] veth1_macvtap: entered promiscuous mode [ 1555.680305][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.712762][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.727408][ T5872] usb 9-1: config 0 has an invalid interface number: 15 but max is 0 [ 1555.735911][ T5872] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1555.800349][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.822223][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.843236][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.864440][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.883558][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.915564][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.926817][ T5872] usb 9-1: config 0 has no interface number 1 [ 1555.933589][ T5872] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1555.946764][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.950865][ T5872] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 1555.966592][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.784875][T20450] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1556.792752][T20450] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1556.801335][T20450] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1556.809925][T20450] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1556.991728][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.999879][ T5872] usb 9-1: Product: syz [ 1557.004081][ T5872] usb 9-1: Manufacturer: syz [ 1557.008791][ T5872] usb 9-1: SerialNumber: syz [ 1557.016702][T20249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.026712][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.318559][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.333069][ T5872] usb 9-1: config 0 descriptor?? [ 1557.338846][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.397019][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.435354][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.473924][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.473985][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.474005][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.474024][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.474039][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.474057][T20249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.474071][T20249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.475532][T20249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.481158][ T5872] viperboard 9-1:0.0: version 0.00 found at bus 009 address 071 [ 1557.489752][ T5872] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1557.489784][ T5872] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1557.493438][ T5872] viperboard 9-1:0.15: version 0.00 found at bus 009 address 071 [ 1557.500523][ T5872] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 1557.500553][ T5872] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1557.540668][T20454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.540830][T20454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.550076][T20249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.701053][T20249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.701090][T20249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.701115][T20249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.798346][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.798368][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.839841][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.839866][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.121920][T20464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.131586][T20464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.479832][T20467] lo speed is unknown, defaulting to 1000 [ 1558.728736][T20472] vlan2: entered allmulticast mode [ 1559.072207][T16851] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1559.232227][T16851] usb 1-1: Using ep0 maxpacket: 16 [ 1559.239109][T16851] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1559.247833][T16851] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1559.256175][T16851] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1559.264528][T16851] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1559.272764][T16851] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1559.283580][T16851] usb 1-1: config 0 has no interface number 0 [ 1559.296349][T16851] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1559.319516][T16851] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1559.330018][T16851] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1559.340121][T16851] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1559.354440][T16851] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1559.363709][T16851] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1559.375804][T16851] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1559.389072][T16851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.397393][T16851] usb 1-1: Product: syz [ 1559.401720][T16851] usb 1-1: Manufacturer: syz [ 1559.407313][T16851] usb 1-1: SerialNumber: syz [ 1559.417824][T16851] usb 1-1: config 0 descriptor?? [ 1559.425891][T16851] usb 1-1: selecting invalid altsetting 2 [ 1560.664938][T16851] get_1284_register timeout [ 1560.669608][T16851] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 1560.677591][ C0] usb 1-1: async_complete: urb error -104 [ 1560.677692][ C0] usb 1-1: async_complete: urb error -104 [ 1560.677771][ C0] usb 1-1: async_complete: urb error -104 [ 1560.677847][ C0] usb 1-1: async_complete: urb error -104 [ 1561.308838][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.319830][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.333322][T10508] usb 9-1: USB disconnect, device number 71 [ 1561.608999][T16851] usb 1-1: USB disconnect, device number 77 [ 1561.983387][T20500] binder: 20494:20500 ioctl c0306201 0 returned -14 [ 1562.629777][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1562.642851][T20502] ip6gretap1: entered allmulticast mode [ 1563.740164][T20511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.791325][T20511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.076153][T10508] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1564.250526][T10508] usb 9-1: Using ep0 maxpacket: 16 [ 1564.272879][T10508] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1564.303785][T10508] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1564.321704][T10508] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1564.335034][T10508] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1564.347277][T10508] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1564.367345][T10508] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1564.377503][T10508] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.385834][T10508] usb 9-1: Product: syz [ 1564.390554][T10508] usb 9-1: Manufacturer: syz [ 1564.395417][T10508] usb 9-1: SerialNumber: syz [ 1564.424128][T10508] usb 9-1: config 0 descriptor?? [ 1564.461139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1565.521742][T10508] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 1565.532125][T10508] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 1566.131223][T10508] usb 9-1: USB disconnect, device number 72 [ 1569.490152][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1570.173858][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'. [ 1570.186302][T20568] binder: 20559:20568 ioctl c0306201 0 returned -14 [ 1570.948085][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1570.969256][T20563] bridge_slave_1: left allmulticast mode [ 1571.020109][T20563] bridge_slave_1: left promiscuous mode [ 1571.040764][T20563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.309418][T20563] bridge_slave_0: left allmulticast mode [ 1571.322230][T20563] bridge_slave_0: left promiscuous mode [ 1571.346906][T20563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.909454][T20578] [ 1572.911852][T20578] ====================================================== [ 1572.918883][T20578] WARNING: possible circular locking dependency detected [ 1572.925912][T20578] 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 Not tainted [ 1572.933032][T20578] ------------------------------------------------------ [ 1572.940076][T20578] syz.8.3822/20578 is trying to acquire lock: [ 1572.946155][T20578] ffff8880721d46c8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x45/0x70 [ 1572.955940][T20578] [ 1572.955940][T20578] but task is already holding lock: [ 1572.963319][T20578] ffff888021bcec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1572.972676][T20578] [ 1572.972676][T20578] which lock already depends on the new lock. [ 1572.972676][T20578] [ 1572.983102][T20578] [ 1572.983102][T20578] the existing dependency chain (in reverse order) is: [ 1572.992134][T20578] [ 1572.992134][T20578] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1572.999371][T20578] lock_acquire+0x1ed/0x550 [ 1573.004410][T20578] __mutex_lock+0x1ac/0xee0 [ 1573.009463][T20578] kernfs_fop_write_iter+0x1ea/0x500 [ 1573.015272][T20578] iter_file_splice_write+0xbfa/0x1510 [ 1573.021254][T20578] do_splice+0xd68/0x18e0 [ 1573.026111][T20578] __se_sys_splice+0x2e0/0x450 [ 1573.031414][T20578] do_syscall_64+0xf3/0x230 [ 1573.036448][T20578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.042883][T20578] [ 1573.042883][T20578] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1573.050266][T20578] lock_acquire+0x1ed/0x550 [ 1573.055300][T20578] __mutex_lock+0x1ac/0xee0 [ 1573.060359][T20578] iter_file_splice_write+0x330/0x1510 [ 1573.066372][T20578] do_splice+0xd68/0x18e0 [ 1573.071251][T20578] __se_sys_splice+0x2e0/0x450 [ 1573.076542][T20578] do_syscall_64+0xf3/0x230 [ 1573.081592][T20578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.083287][T20589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3826'. [ 1573.088016][T20578] [ 1573.088016][T20578] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 1573.088065][T20578] lock_acquire+0x1ed/0x550 [ 1573.088089][T20578] sb_start_write+0x4d/0x1c0 [ 1573.088108][T20578] mnt_want_write+0x3f/0x90 [ 1573.088125][T20578] ovl_create_object+0x13a/0x3a0 [ 1573.088144][T20578] path_openat+0x1c03/0x3590 [ 1573.088164][T20578] do_filp_open+0x27f/0x4e0 [ 1573.088184][T20578] do_sys_openat2+0x13e/0x1d0 [ 1573.088201][T20578] __x64_sys_open+0x225/0x270 [ 1573.088217][T20578] do_syscall_64+0xf3/0x230 [ 1573.088241][T20578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.088265][T20578] [ 1573.088265][T20578] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1573.088293][T20578] validate_chain+0x18ef/0x5920 [ 1573.088314][T20578] __lock_acquire+0x1397/0x2100 [ 1573.088331][T20578] lock_acquire+0x1ed/0x550 [ 1573.088348][T20578] down_read+0xb1/0xa40 [ 1573.088363][T20578] lookup_slow+0x45/0x70 [ 1573.088381][T20578] walk_component+0x2e1/0x410 [ 1573.088398][T20578] path_lookupat+0x16f/0x450 [ 1573.088413][T20578] filename_lookup+0x2a3/0x670 [ 1573.088429][T20578] kern_path+0x35/0x50 [ 1573.211043][T20578] lookup_bdev+0xc5/0x290 [ 1573.215901][T20578] resume_store+0x1a0/0x710 [ 1573.220942][T20578] kernfs_fop_write_iter+0x3a0/0x500 [ 1573.226750][T20578] vfs_write+0xaeb/0xd30 [ 1573.231522][T20578] ksys_write+0x18f/0x2b0 [ 1573.236367][T20578] do_syscall_64+0xf3/0x230 [ 1573.241410][T20578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.247831][T20578] [ 1573.247831][T20578] other info that might help us debug this: [ 1573.247831][T20578] [ 1573.258073][T20578] Chain exists of: [ 1573.258073][T20578] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 1573.258073][T20578] [ 1573.271485][T20578] Possible unsafe locking scenario: [ 1573.271485][T20578] [ 1573.278941][T20578] CPU0 CPU1 [ 1573.284299][T20578] ---- ---- [ 1573.289655][T20578] lock(&of->mutex); [ 1573.293643][T20578] lock(&pipe->mutex); [ 1573.300327][T20578] lock(&of->mutex); [ 1573.306820][T20578] rlock(&ovl_i_mutex_dir_key[depth]); [ 1573.312369][T20578] [ 1573.312369][T20578] *** DEADLOCK *** [ 1573.312369][T20578] [ 1573.320511][T20578] 4 locks held by syz.8.3822/20578: [ 1573.325698][T20578] #0: ffff8880732957b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 1573.334761][T20578] #1: ffff8880354d8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 1573.343687][T20578] #2: ffff888021bcec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1573.353431][T20578] #3: ffff888140eddf08 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1573.363449][T20578] [ 1573.363449][T20578] stack backtrace: [ 1573.369346][T20578] CPU: 1 UID: 0 PID: 20578 Comm: syz.8.3822 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 1573.380101][T20578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1573.390156][T20578] Call Trace: [ 1573.393423][T20578] [ 1573.396349][T20578] dump_stack_lvl+0x241/0x360 [ 1573.401038][T20578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1573.406252][T20578] ? __pfx__printk+0x10/0x10 [ 1573.410870][T20578] print_circular_bug+0x13a/0x1b0 [ 1573.415899][T20578] check_noncircular+0x36a/0x4a0 [ 1573.420845][T20578] ? __pfx_check_noncircular+0x10/0x10 [ 1573.426325][T20578] validate_chain+0x18ef/0x5920 [ 1573.431181][T20578] ? __pfx_validate_chain+0x10/0x10 [ 1573.436373][T20578] ? __bfs+0x344/0x6f0 [ 1573.440445][T20578] ? __pfx_validate_chain+0x10/0x10 [ 1573.445660][T20578] ? __pfx_lockdep_unlock+0x10/0x10 [ 1573.450866][T20578] ? __pfx_validate_chain+0x10/0x10 [ 1573.456086][T20578] ? register_lock_class+0x102/0x980 [ 1573.461374][T20578] ? __pfx_register_lock_class+0x10/0x10 [ 1573.467022][T20578] ? register_lock_class+0x102/0x980 [ 1573.472306][T20578] ? mark_lock+0x9a/0x360 [ 1573.476643][T20578] __lock_acquire+0x1397/0x2100 [ 1573.481487][T20578] lock_acquire+0x1ed/0x550 [ 1573.485990][T20578] ? lookup_slow+0x45/0x70 [ 1573.490415][T20578] ? __pfx_lock_acquire+0x10/0x10 [ 1573.495430][T20578] ? __pfx___might_resched+0x10/0x10 [ 1573.500709][T20578] ? __pfx_lock_acquire+0x10/0x10 [ 1573.505736][T20578] ? __d_lookup+0x64/0x7b0 [ 1573.510165][T20578] down_read+0xb1/0xa40 [ 1573.514311][T20578] ? lookup_slow+0x45/0x70 [ 1573.518719][T20578] ? __pfx_down_read+0x10/0x10 [ 1573.523468][T20578] ? __d_lookup+0x64/0x7b0 [ 1573.527891][T20578] ? __d_lookup+0x706/0x7b0 [ 1573.532412][T20578] ? bpf_lsm_inode_permission+0x9/0x10 [ 1573.537874][T20578] ? security_inode_permission+0xbc/0x320 [ 1573.543584][T20578] ? make_vfsuid+0x52/0xa0 [ 1573.548001][T20578] ? link_path_walk+0xc60/0xea0 [ 1573.552881][T20578] lookup_slow+0x45/0x70 [ 1573.557128][T20578] walk_component+0x2e1/0x410 [ 1573.561796][T20578] path_lookupat+0x16f/0x450 [ 1573.566381][T20578] filename_lookup+0x2a3/0x670 [ 1573.571153][T20578] ? __pfx_filename_lookup+0x10/0x10 [ 1573.576456][T20578] ? rcu_is_watching+0x15/0xb0 [ 1573.581213][T20578] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1573.586583][T20578] ? getname_kernel+0x140/0x2f0 [ 1573.591441][T20578] kern_path+0x35/0x50 [ 1573.595520][T20578] lookup_bdev+0xc5/0x290 [ 1573.599849][T20578] ? rcu_is_watching+0x15/0xb0 [ 1573.604622][T20578] ? __pfx_lookup_bdev+0x10/0x10 [ 1573.609551][T20578] ? __asan_memcpy+0x40/0x70 [ 1573.614144][T20578] resume_store+0x1a0/0x710 [ 1573.618665][T20578] ? kernfs_fop_write_iter+0x1ea/0x500 [ 1573.624120][T20578] ? __pfx_resume_store+0x10/0x10 [ 1573.629141][T20578] ? sysfs_kf_write+0x182/0x2a0 [ 1573.633993][T20578] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1573.639213][T20578] kernfs_fop_write_iter+0x3a0/0x500 [ 1573.644515][T20578] vfs_write+0xaeb/0xd30 [ 1573.648765][T20578] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1573.654568][T20578] ? __pfx_vfs_write+0x10/0x10 [ 1573.659340][T20578] ? __pfx_do_futex+0x10/0x10 [ 1573.664019][T20578] ? put_files_struct+0x23d/0x310 [ 1573.669042][T20578] ksys_write+0x18f/0x2b0 [ 1573.673365][T20578] ? __pfx_ksys_write+0x10/0x10 [ 1573.678215][T20578] ? do_syscall_64+0x100/0x230 [ 1573.682992][T20578] ? do_syscall_64+0xb6/0x230 [ 1573.687673][T20578] do_syscall_64+0xf3/0x230 [ 1573.692190][T20578] ? clear_bhb_loop+0x35/0x90 [ 1573.696873][T20578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.702808][T20578] RIP: 0033:0x7fc166785d29 [ 1573.707221][T20578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.726823][T20578] RSP: 002b:00007fc167637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1573.735245][T20578] RAX: ffffffffffffffda RBX: 00007fc166975fa0 RCX: 00007fc166785d29 [ 1573.743212][T20578] RDX: 0000000000000012 RSI: 0000000020000140 RDI: 0000000000000003 [ 1573.751176][T20578] RBP: 00007fc166801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1573.759142][T20578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.767107][T20578] R13: 0000000000000000 R14: 00007fc166975fa0 R15: 00007ffe69470978 [ 1573.775082][T20578] [ 1573.811892][T20578] PM: Image not found (code -6)